Products: Linux - Auditd
| Rule ID | Rule Name |
|---|---|
| MATCH-S00682 | Excessive Use of Escape Characters in Command Line |
| MATCH-S00445 | Known Ransomware File Extensions |
| MATCH-S00723 | Loadable Kernel Module Modifications |
| MATCH-S00683 | Overly Permissive Chmod Command |
| MATCH-S00919 | chage command use on host |
| Log Mapper ID | Log Mapper Name |
|---|---|
| b09d8957-f7b3-4493-8301-456c4e8bccbc | Auditd |