Key | Value |
---|---|
FileSize | 72988 |
MD5 | 6A14E3EC9334D993111D02115D62A6CE |
PackageDescription | Plugins for the audit event dispatcher The audispd-plugins package provides plugins for the real-time interface to the audit system, audispd. These plugins can do things like relay events to remote machines or analyze events for suspicious behavior. |
PackageMaintainer | Laurent Bigonville <bigon@debian.org> |
PackageName | audispd-plugins |
PackageSection | admin |
PackageVersion | 1:2.8.3-1+b1 |
SHA-1 | 975C2B6D77672A1CC664F0BBAE848FFE74E5B1A1 |
SHA-256 | 4855E1328EC1AF720BAAF87CA4D12359FE6DBD1ED23D5963551CBB9E9C951BA4 |
hashlookup:children-total | 19 |
hashlookup:trust | 50 |
The searched file hash includes 19 children files known and seen by metalookup. A sample is included below:
Key | Value |
---|---|
FileName | ./sbin/audisp-remote |
FileSize | 47192 |
MD5 | 26812AA95D793B6420532DB9E50459B2 |
SHA-1 | 0E176ECE6B78B7C1873C4C7E36B2ACAF462F1718 |
SHA-256 | 0BC83021299EA2332DEA22180925C463EC20CDCFFDF4E1CDE43BDD6637396A10 |
SSDEEP | 768:LWnnvqj9Ca79kNyaAxYPTge4UG35Xh1H:wyxCkkkYbgeAh1H |
TLSH | T172230A06B7E258FEC060C93045AB4732BA71B885D3316B3F23056B783D62B549B2FA75 |
Key | Value |
---|---|
FileName | ./sbin/audisp-prelude |
FileSize | 55520 |
MD5 | EA944D52FC2C82EDD39373ED9E2C5787 |
SHA-1 | 0EFE0E88F7F3A8F0F2CE87965310E38812B09E74 |
SHA-256 | FF52D155AE87DD70DDA2295CBEC26FD51FFE66B546CFC04905A42237FCB17D25 |
SSDEEP | 768:+ZAv1gPcIG4JBSSQ80OCXhoAovlmmZtL:+ZaIGKsXWd3 |
TLSH | T13E43D74BB79084FDC2F0C674A9CB627159F53800D671B62EBA145E782E22B44CF2EB65 |
Key | Value |
---|---|
CRC32 | 41DA0A99 |
FileName | ./etc/audisp/plugins.d/au-prelude.conf |
FileSize | 280 |
MD5 | FDBE0EAE23D0AB3963F81D4102E1CC4B |
OpSystemCode | 362 |
ProductCode | 183705 |
RDS:package_id | 182052 |
SHA-1 | 25FE37B04A644C1438DD2B609C6190BAC368918F |
SHA-256 | CD39364F42336B4A3D5F6E1B56216C4A28732FE90F633413CDC2617304EFA7E6 |
SSDEEP | 6:mV7id4EjQEXsoA0EvdQj3KYAmJGp6LOjkeGNy9Vd1ZY:mF+JHvElyBPGfRWAVd1G |
SpecialCode | |
TLSH | T19AD0C2B121B4B27814093A413A8BC5E999BAB09656281415243D88A46126074E323B86 |
db | nsrl_modern_rds |
insert-timestamp | 1679426507.4377716 |
source | RDS.db |
Key | Value |
---|---|
FileName | ./usr/share/doc/python3-audit/changelog.Debian.amd64.gz |
FileSize | 239 |
MD5 | B0BFFFE35944E1337A5B03824813AF76 |
SHA-1 | 2B9D84CB85CDF4313790EB8309DBDBE16894EAB2 |
SHA-256 | 885403DB1C1F521266B52444A5E9FB1B612FD67D7E33E781AABE955D74449FF4 |
SSDEEP | 6:XtRMVrRIOnrwBUJcM6VgcFDcT00MRemfK9Xr:XQVVIMzcMR0EMRebRr |
TLSH | T127D0972895EA0420DE409E303083AA028F2A034001EEDD542AA0A82E14A800EE4FA6E8 |
Key | Value |
---|---|
FileName | ./usr/share/man/man8/audisp-prelude.8.gz |
FileSize | 2088 |
MD5 | 9635CD7692B43DE32B33DE8CF1E4C0A4 |
SHA-1 | 2D93402611C688DD754C3CBAC12870C56BAF207A |
SHA-256 | 3FE4E06AD0C8B8BC6D2553B359268362EDA8459CCA22929DF8712FAB82368EC2 |
SSDEEP | 48:Xikc+/VpfW7CKm/zzwxq27WZPtIc8tLCgVVmpfmcVmSu:tl+OKm7x270+XLP2OcW |
TLSH | T175411947DEB8A0AC0ED39685856054B5E811A034FE6453FC18361F46A5931C3BA5CD3C |
Key | Value |
---|---|
FileName | ./sbin/audispd-zos-remote |
FileSize | 34888 |
MD5 | 4BC0147FE6ABBF9AB52ADADA87BC74D5 |
SHA-1 | 2D982F49391D8D9D4AE272688D93D5B96D933882 |
SHA-256 | A134C43EF7665452D598A272F38129576DAC79B662005D25522F857C86EC5B3D |
SSDEEP | 768:ok4ZZFny0Px9apKrkS7slGp/xSp/ulq6:ok4Zq0P1r7A0p1 |
TLSH | T127F2080BB2A185FFC095CD3045AB0131AB70BD83E362576B2749B6742D42F19DB2F66B |
Key | Value |
---|---|
FileName | ./usr/share/man/man8/audispd-zos-remote.8.gz |
FileSize | 3810 |
MD5 | 7E55F39A9CB9CBB7015C528056EB4938 |
RDS:package_id | 182052 |
SHA-1 | 359BAD44B01EE23C99AD3A381D3763338461D812 |
SHA-256 | 4D928EC8EEB09FA3AACE085318915952FF4BF7AD287B803325D90C4BA34BF838 |
SSDEEP | 96:PTHyWRUTUlfYgYb7dAyY77G6Nprzy1+mA:7tUTq+796NA17A |
TLSH | T107717C27162AF3B1307B23BB80E9A73A006519B994FBC02938406CDD8879702F0D57BE |
insert-timestamp | 1679426507.3935153 |
source | RDS.db |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
FileName | ./usr/share/man/man8/audisp-remote.8.gz |
FileSize | 788 |
MD5 | EA760FE34FE2F9A4ED14F89910F1FDE5 |
RDS:package_id | 182052 |
SHA-1 | 4FFDE58FD6CEB5089017587C19DFA3573044CAE0 |
SHA-256 | F92779302EB66FFF8804D7A302E92AFD162F4795B221982DE3653A3FE21755F0 |
SSDEEP | 24:XevYB4YGTwyU2R7H4MA2yEzUosEPLxXUNmb:Xe9NwyUmj4mz4eXS0 |
TLSH | T106017A42257121077D4CA909DAE996D5592DC5203E20FF7CE571812D49E364FD3C50DF |
insert-timestamp | 1679426507.4002094 |
source | RDS.db |
tar:gname | root |
tar:uname | root |
Key | Value |
---|---|
CRC32 | 88842C8A |
FileName | ./etc/audisp/plugins.d/audispd-zos-remote.conf |
FileSize | 436 |
MD5 | BE9F4B5B737E467A8FF69348A83108E3 |
OpSystemCode | 362 |
ProductCode | 183705 |
RDS:package_id | 182052 |
SHA-1 | 655063BC53686E399C1154FB82664812C1C188FF |
SHA-256 | 85BF9CC51764A1EBA91D71BC62F291CD96708875FA364A81EB751148E9E8F3C0 |
SSDEEP | 12:q0RofnEEgb3duRuRhK4xxi9h0cdYDMfM3aRWid1DfvKoaC:qYofnrgbRhKCi9h0uYdTid17bl |
SpecialCode | |
TLSH | T179E0ABF12AC53A630C3126008B9F70D8176BA3F2523E1445722BC6999AAE5A1C30B7D5 |
db | nsrl_modern_rds |
insert-timestamp | 1679426507.4327202 |
source | RDS.db |
Key | Value |
---|---|
CRC32 | 9DA9B2A7 |
FileName | ./etc/audit/zos-remote.conf |
FileSize | 246 |
MD5 | 871BBE04101FF19CF1BAA0DD300C76EC |
OpSystemCode | 362 |
ProductCode | 183705 |
RDS:package_id | 182052 |
SHA-1 | 6FE4675388A81688FCE3618EEB16B331155DF1CE |
SHA-256 | 392EF562F7CD7F6A1D474A506C32AD4B9171926A89E9D3BD90F6B420B9847A72 |
SSDEEP | 6:jLVYQIRQFaH42kQ6VyK7naKQ8JRDEFGMKL3TJyMLEdNj5L/SiXykfXv:jLERTZ6sSaKlvE8HJyMGNtL6iXPfXv |
SpecialCode | |
TLSH | T168D0979108C72DF3206607CB022630D0130CA390073F00422D22E70F5F3FA9783172EA |
db | nsrl_modern_rds |
insert-timestamp | 1679426507.4216154 |
source | RDS.db |
tar:gname | root |
tar:uname | root |