| Key | Value |
|---|---|
| FileSize | 360102 |
| MD5 | 83421249102EDD8C6D40D7EDE81F722E |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1.7.13-1ubuntu3 |
| SHA-1 | DA0C2B665AADF4F9918749F2CD8A64E2BA4133F1 |
| SHA-256 | E34406A8B437478E147A39FCCA82827DDBF64C3BC0C46B42DC6FDE3AF56CB45E |
| hashlookup:children-total | 39 |
| hashlookup:trust | 50 |
The searched file hash includes 39 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| FileName | auditd.conf |
| FileSize | 680 |
| MD5 | 664D289B80288D1E182C4FB194757817 |
| RDS:package_id | 187003 |
| SHA-1 | 11661A65CC18B21752E765B7A00266E43F298831 |
| SHA-256 | 109F9B40FE3BA12B1666C34B83690C93C211559E60ECC45D449FB559D556C90B |
| SSDEEP | 12:LzAKR4MoKK9M7tJSPhp2MEIZoQxQ3j4HTXeOQ600tMSQrRBAVo3zpWpK/Kfrv:vK/Php2MEIrKj4HDjQ60KSjA0t/wv |
| TLSH | T1AB01FEA855E8F9A6907BEAC2E093018F0179B418305826213A1FF429FABCC809B83650 |
| insert-timestamp | 1679424419.4797292 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/ausearch.8.gz |
| FileSize | 3016 |
| MD5 | 85957AC955498ABA3AD318263258A7AC |
| SHA-1 | 135808A008C207CD8F4A9EFBB7542E004FE92529 |
| SHA-256 | E19EBC46C0C57FCCED459CA99FF79C70465AFF135D42EA6405F84B30E01E548C |
| SSDEEP | 48:XU7RD6aiN3nSi5GMntByjNbdY+exk4l11PPdDW6sygvK9rRzS1nG6IS:ema03nSwXpfx/11XxWndk6b |
| TLSH | T197515C6A1B149176DCA673789BD38DC69CC20ED610DC3F822B19ED96D8570F97006984 |
| Key | Value |
|---|---|
| FileName | ./sbin/auditd |
| FileSize | 165972 |
| MD5 | 0D2D2BE146FA34A22FA7E59825923F02 |
| SHA-1 | 1A5C25ADD26712800DF93C7915D23D25210C493D |
| SHA-256 | F5B7DF57BE46C7EB0B176480373829F5CFCB84325569FA5BE3F517CA9805D98D |
| SSDEEP | 3072:zDO1WQuVbY4rwYfAb6Iaj1ad8xRBr/dECtYqspEZ5IsC9+:zDO19SstmIoMArFECtDspa5ID+ |
| TLSH | T15EF33905F99386B7C85B02709917E6BF4B38DE11AB04CF13EB0C6D2C7D3B6656A4A385 |
| Key | Value |
|---|---|
| FileName | ./sbin/autrace |
| FileSize | 91760 |
| MD5 | 68044CCEF43EBA6E883854038FEE5C39 |
| SHA-1 | 1FFAF289F5521CF1BC6A3AF3AF05641FAD2F8BFA |
| SHA-256 | E82B266CDDFAE9D9272FFEE174AD0CC11B159EBAACAA15BA795DA4F6798CAA22 |
| SSDEEP | 1536:ySn9cR8QPgwARTYYlYxqqlCLJUUirqsknqqgEZEmI2Xhh6daKR2FI+5:jG/PgwAR8qECtYqspEZ5IsC9+5 |
| TLSH | T1AD93F745FDD29B37C89B01329917EAA64A7CDC10AB04CF03F71D665C783B6B09B86789 |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/TODO |
| FileSize | 3284 |
| MD5 | 476E4BEBE5C1879F8315B04EA4E46E6F |
| SHA-1 | 2FF3C460FA827D82DEA8B9ABCD41D140B7E0A676 |
| SHA-256 | 67BD61023A63051667129BBE5CD99A27E814621284A93F3725242E3CF1CCB2B8 |
| SSDEEP | 48:5jBKS+WvVMS0xPrjhfy1tdZBIZgaAuv/2YaktDxntoCNLv:DKS+WvWS0xpy1bT2RBLRttmqLv |
| TLSH | T13F619637651D11262CD153F2A31228A2B31EC2EE971C5E7EF0BED3066B4E6B4557E2C8 |
| Key | Value |
|---|---|
| CRC32 | 1DD87932 |
| FileName | af_unix.conf |
| FileSize | 359 |
| MD5 | 64E9C248CED25E16B59769E716688CA6 |
| OpSystemCode | 362 |
| ProductCode | 14897 |
| RDS:package_id | 187003 |
| SHA-1 | 3EFACF98091DCAB57CE4CF0CD9811B94F978EE92 |
| SHA-256 | E24AF7D6260E9AF4EA2CD39E728691BAD4EDA8FF342310A9E4FD80CF73A92412 |
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZ/dMYeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g41/db |
| SpecialCode | |
| TLSH | T134E061A2D5A03A2538E80B11AB5D8295FC2596C83B340017282D3C1001039209263EDC |
| db | nsrl_modern_rds |
| insert-timestamp | 1679424419.464056 |
| source | RDS.db |
| Key | Value |
|---|---|
| CRC32 | DB06F3F2 |
| FileName | changelog.gz |
| FileSize | 8535 |
| MD5 | 8042C0F378A8FD94ECB2C2B19609238C |
| OpSystemCode | 362 |
| ProductCode | 13453 |
| SHA-1 | 3FE814149FEF5E8D183230FBDE1F9108CCE623C6 |
| SHA-256 | F39979B1052B8966A9B05491315D7B8E7FDA199F02CF697557B1F841785878A5 |
| SSDEEP | 192:gqXrNKQ3sFlf17qrKliurDYim7EUncKz+S6Ty8ct0skSgXes+0GDLXQ:JNBClfd6K8V7EycccOiskSeRULA |
| SpecialCode | |
| TLSH | T11F02AFE806930E5F859DD8F4C4CAF835E5D348BA32F5A54A345492FB9812CE213371E6 |
| db | nsrl_modern_rds |
| insert-timestamp | 1647001968.494406 |
| source | NSRL |
| Key | Value |
|---|---|
| CRC32 | 1EC45F21 |
| FileName | ./usr/share/doc/auditd/examples/auditd.cron |
| FileSize | 271 |
| MD5 | 38EABF76CB16946B506A2FE853DE2863 |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 222721 |
| SHA-1 | 45BCD14824122202B143E78E59533968C933A5B5 |
| SHA-256 | 8655D58E59EB7420D5182AA76017DAF40452EBABC1A5131DE0A7320AEEEE2368 |
| SSDEEP | 6:hhRGk+O8cOBFsNRY+sgkldrn1vsYCs6ZZA49jsfBrvOFqfn:tGkgNo6gkv5sYr6ZZbpLFqfn |
| SpecialCode | |
| TLSH | T19ED0C203290858300B1503A34A42696210A8104E3E37F06425EE275DFA93ADFB0C775E |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040704.3995628 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/examples/capp.rules.gz |
| FileSize | 2474 |
| MD5 | 6700CDA50BB931A1EFF70189E66679DC |
| SHA-1 | 4E37510545D0620BE5895D768831D4AAD86EC94D |
| SHA-256 | 009B8F358CB6B60773554650F6039C985FBB2C80DF1AACA4E9E52C35DFB80F1B |
| SSDEEP | 48:XEMecS6XSuWOuxPZrUGyvoBdcpvc3A9uwja7TYiBwO15cYOIjlsHh4TVf:UMJS6XSuWOTGyv22uwja5wO1JObST1 |
| TLSH | T15C510A90F0552D56B5E449BED73F9CA0C2AD87E288D0A2421F02E0D2F4D36CEB4552BC |
| Key | Value |
|---|---|
| FileName | ./usr/share/man/man8/aulast.8.gz |
| FileSize | 991 |
| MD5 | AF80C1E431D69969CBBE36B72813D54F |
| SHA-1 | 52A8F8C79A478E8CE1197B2735F5DEA6B787E5EE |
| SHA-256 | F9908BF57C65ACD6645A393298742F8DF146C809D73FCFBD96A4D26D654729C0 |
| SSDEEP | 24:XLV+iz1O5JErhP+dSUhXsj0XONcCh2O1K203zH/e0GkDJFz:XZXA5G4nh8jsOv2O1K203bXL |
| TLSH | T1D7115471360E91E32DC3B79B91D47E8ED93A6FE49971DA050D0E8D60813E192784B15E |