Detections
Analytics

Revision 1.4

Sep 16, 2022
Functional Update
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - EACCES
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - EACCES x64
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - EPERM
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - EPERM x64
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl EACCES
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl EACCES x64
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl EPERM
  • 4.1.10 Ensure unsuccessful unauthorized file access attempts are collected - auditctl EPERM x64
  • 4.1.12 Ensure successful file system mounts are collected - auditctl mount
  • 4.1.12 Ensure successful file system mounts are collected - auditctl mount x64
  • 4.1.12 Ensure successful file system mounts are collected - mounts
  • 4.1.12 Ensure successful file system mounts are collected - mounts x64
  • 4.1.13 Ensure file deletion events by users are collected - auditctl delete
  • 4.1.13 Ensure file deletion events by users are collected - auditctl delete x64
  • 4.1.13 Ensure file deletion events by users are collected - delete
  • 4.1.13 Ensure file deletion events by users are collected - delete x64
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl b32 actions
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl b64 actions
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - b32 actions
  • 4.1.15 Ensure system administrator command executions (sudo) are collected - b64 actions
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chmod fchmod fchmodat
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chmod fchmod fchmodat x64
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chown fchown fchownat lchown
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chown fchown fchownat lchown x64
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl lsetxattr setxattr fsetxattr removexattr
  • 4.1.9 Ensure discretionary access control permission modification events are collected - auditctl setxattr x64
  • 4.1.9 Ensure discretionary access control permission modification events are collected - chmod fchmod fchmodat
  • 4.1.9 Ensure discretionary access control permission modification events are collected - chmod fchmod fchmodat x64
  • 4.1.9 Ensure discretionary access control permission modification events are collected - chown fchown fchownat lchown
  • 4.1.9 Ensure discretionary access control permission modification events are collected - chown fchown fchownat lchown x64
  • 4.1.9 Ensure discretionary access control permission modification events are collected - lsetxattr setxattr fsetxattr removexattr
  • 4.1.9 Ensure discretionary access control permission modification events are collected - lsetxattr setxattr fsetxattr removexattr x64
Miscellaneous
  • Variables updated.