Detections
Analytics

Revision 1.2

Sep 16, 2022
Functional Update
  • 4.1.10 Ensure discretionary access control permission modification events are collected - chown/fchown/fchownat/lchown
  • 4.1.10 Ensure discretionary access control permission modification events are collected - setxattr/lsetxattr/fsetxattr/removexattr
  • 4.1.11 Ensure unsuccessful unauthorized file access attempts are collected - EACCES
  • 4.1.11 Ensure unsuccessful unauthorized file access attempts are collected - EPERM
  • 4.1.11 Ensure unsuccessful unauthorized file access attempts are collected - b64 EACCES
  • 4.1.11 Ensure unsuccessful unauthorized file access attempts are collected - b64 EPERM
  • 4.1.13 Ensure successful file system mounts are collected - b64 mounts
  • 4.1.13 Ensure successful file system mounts are collected - mounts
  • 4.1.14 Ensure file deletion events by users are collected
  • 4.1.14 Ensure file deletion events by users are collected - b64
Miscellaneous
  • References updated.