Synopsis
SIEM Pull Service has detected via Splunk query that, on this Linux system, a software package was removed.
Description
SIEM Pull Service has detected via Splunk query that, on this Linux system, a software package was removed. The query used was (sourcetype="dpkg*" OR sourcetype="syslog*" OR sourcetype="yum*") AND (remove OR "yum* *rase*") AND NOT (systemd OR startup)
