| splunk |
Linux Auditd Copy Fail Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Auditd Data Destruction Command |
production |
2026-05-13 |
| splunk |
Linux Auditd Data Transfer Size Limits Via Split |
production |
2026-05-13 |
| splunk |
Linux Auditd Data Transfer Size Limits Via Split Syscall |
production |
2026-05-13 |
| splunk |
Linux Auditd Database File And Directory Discovery |
production |
2026-05-13 |
| splunk |
Linux Auditd Dd File Overwrite |
production |
2026-05-13 |
| splunk |
Linux Auditd Disable Or Modify System Firewall |
production |
2026-05-13 |
| splunk |
Linux Auditd Doas Conf File Creation |
production |
2026-05-13 |
| splunk |
Linux Auditd Doas Tool Execution |
production |
2026-05-13 |
| splunk |
Linux Auditd Edit Cron Table Parameter |
production |
2026-05-13 |
| splunk |
Cisco SNMP Community String Configuration Changes |
production |
2026-05-13 |
| splunk |
Linux Auditd File And Directory Discovery |
production |
2026-05-13 |
| splunk |
Linux Auditd File Permission Modification Via Chmod |
production |
2026-05-13 |
| splunk |
Linux Auditd File Permissions Modification Via Chattr |
production |
2026-05-13 |
| splunk |
Linux Auditd Find Credentials From Password Managers |
production |
2026-05-13 |
| splunk |
Linux Auditd Find Credentials From Password Stores |
production |
2026-05-13 |
| splunk |
Linux Auditd Find Ssh Private Keys |
production |
2026-05-13 |
| splunk |
Linux Auditd Hardware Addition Swapoff |
production |
2026-05-13 |
| splunk |
Linux Auditd Hidden Files And Directories Creation |
production |
2026-05-13 |
| splunk |
Linux Auditd Insert Kernel Module Using Insmod Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Install Kernel Module Using Modprobe Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Kernel Module Enumeration |
production |
2026-05-13 |
| splunk |
Linux Auditd Kernel Module Using Rmmod Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Nopasswd Entry In Sudoers File |
production |
2026-05-13 |
| splunk |
Linux Auditd Osquery Service Stop |
production |
2026-05-13 |
| splunk |
Linux Auditd Possible Access Or Modification Of Sshd Config File |
production |
2026-05-13 |
| splunk |
Linux Auditd Possible Access To Credential Files |
production |
2026-05-13 |
| splunk |
Linux Auditd Possible Access To Sudoers File |
production |
2026-05-13 |
| splunk |
Linux Auditd Possible Append Cronjob Entry On Existing Cronjob File |
production |
2026-05-13 |
| splunk |
Linux Auditd Preload Hijack Library Calls |
production |
2026-05-13 |
| splunk |
Linux Auditd Preload Hijack Via Preload File |
production |
2026-05-13 |
| splunk |
Linux Auditd Private Keys and Certificate Enumeration |
production |
2026-05-13 |
| splunk |
Linux Auditd Service Restarted |
production |
2026-05-13 |
| splunk |
Linux Auditd Service Started |
production |
2026-05-13 |
| splunk |
Linux Auditd Setuid Using Chmod Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Setuid Using Setcap Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Shred Overwrite Command |
production |
2026-05-13 |
| splunk |
Linux Auditd Stop Services |
production |
2026-05-13 |
| splunk |
Linux Auditd Sudo Or Su Execution |
production |
2026-05-13 |
| splunk |
Linux Auditd Sysmon Service Stop |
production |
2026-05-13 |