14 Commits

Author	SHA1	Message	Date
zinint	47f7d648a3	T1036	2019-10-29 22:33:03 +03:00
zinint	d1cf80d9b6	Update lnx_auditd_user_discovery.yml	2019-10-28 00:00:06 +03:00
zinint	68b4541274	t1033	2019-10-27 23:59:16 +03:00
Florian Roth	f5a8a81ff7	fix: linux cmds rule	2019-07-02 15:22:26 +02:00
petermmm	b6c4e64a9b	fixed attack category number 2->3	2019-05-12 11:59:13 +02:00
petermmm	2778558ae3	added rule .bash_profile and .bashrc T1156	2019-05-12 02:07:13 +02:00
Alexandre ZANNI	74da324d8f	remove old public_html ... remove old public_html	2018-05-29 11:44:38 +02:00
Alexandre ZANNI	a1de770b64	enhance web server paths ... - specify when it is apache only - add Per-user path - add archlinux paths	2018-05-29 11:41:36 +02:00
SherifEldeeb	48441962cc	Change All "str" references to be "list"to mach schema update	2018-01-28 02:24:16 +03:00
SherifEldeeb	112a0939d7	Change "reference" to "references" to match new schema	2018-01-28 02:12:19 +03:00
Florian Roth	aca70e57ec	Massive Title Cleanup	2018-01-27 10:57:30 +01:00
Florian Roth	f31ed7177e	Added status 'experimental' to newly created auditd rules	2018-01-23 11:15:02 +01:00
Florian Roth	fe80ae7885	Rule: Linux auditd 'program execution in suspicious folders'	2018-01-23 11:13:23 +01:00
Florian Roth	228ca1b765	Rule: Linux auditd 'suspicious commands'	2018-01-23 11:13:23 +01:00