| Key | Value |
|---|---|
| FileSize | 188288 |
| MD5 | 10B1570E630623A26A3CE223D6E5BBB2 |
| PackageDescription | User space tools for security auditing The audit package contains the user space utilities for storing and searching the audit records generated by the audit subsystem in the Linux 2.6 kernel. . Also contains the audit dispatcher "audisp". |
| PackageMaintainer | Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com> |
| PackageName | auditd |
| PackageSection | admin |
| PackageVersion | 1:2.3.7-1ubuntu2 |
| SHA-1 | FF89A08B56274233F830A3866E00E08D9B5A50B7 |
| SHA-256 | 22D18CAE874411B833689AD816A85312786A5B22C3E4A037EFA44A50265D74FB |
| hashlookup:children-total | 45 |
| hashlookup:trust | 50 |
The searched file hash includes 45 children files known and seen by metalookup. A sample is included below:
| Key | Value |
|---|---|
| CRC32 | 190661C4 |
| FileName | auditd.conf.5.gz |
| FileSize | 5179 |
| MD5 | E00697B2FA7AA2BE440CFC136DF2BE24 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 00EA0CE6163A5510BABC16C6469AB986475B6E58 |
| SHA-256 | CED4172C6365A1BB2679819F607963D7481932B567D145AFBF69137DC754B409 |
| SSDEEP | 96:GWNosY80NzlYsD1kI8ka4UJehqZbPt5DKQbm39fSLEpZOInR1LZ8EJsgt5/e:GE0NThkI8wUJwqZDRbotSLEpZOIDSEJQ |
| SpecialCode | |
| TLSH | T1C8B18EC05AA1525EA85831706B3740879D196E6DD3F5FCDB203AC17B694169039AAC02 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646978213.0425208 |
| source | NSRL |
| Key | Value |
|---|---|
| FileName | ./sbin/ausearch |
| FileSize | 89008 |
| MD5 | F51E9727363EFC28E39E21C61E17EBC1 |
| SHA-1 | 14B3BDD7BA9BE2BA5EEB982C5308E19A817D0D27 |
| SHA-256 | 4A06475E32061F7D3CFA1CE22FAEF942F8E93735309D1EC72EA16D69211A56CA |
| SSDEEP | 1536:0W8biOLfndVUxwS14yon7lyoH9+zHf+sCTo:05FUWozon7MaM |
| TLSH | T14F933A2772A55CFDC151C230469F9253A9B2F029D3317ABF3584AB353A4AE250F2EB35 |
| Key | Value |
|---|---|
| CRC32 | 3A7069AE |
| FileName | auditctl.8.gz |
| FileSize | 6351 |
| MD5 | FFCC9DBB6C5A6565272F4A7106834F2D |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 1761F79316C20565273B2DF6D6A4E8673110F35A |
| SHA-256 | 7B8EC6F4A43B624EEF25858023A38774161DBA6032743ECA5BF35CBA405CB575 |
| SSDEEP | 192:VRFUGsXHN/OdcF8fUM99nq5Yx7z8uymeTPe9sHiol:VEdXN/JI19ICezPe9Fol |
| SpecialCode | |
| TLSH | T19FD1BE7E748840090656B255BA64E30DAF8D26A9300DA30D3AA2E1922BF121C6C9D0F7 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646986925.683344 |
| source | NSRL |
| Key | Value |
|---|---|
| CRC32 | 99CFA27F |
| FileName | auditd.8.gz |
| FileSize | 1499 |
| MD5 | 0089D3BC150AC16B1A266B3DA5C1AAB0 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| SHA-1 | 17DB586662FD048B6FD7C79486157F1EABBAEE37 |
| SHA-256 | F201EFF61418E00E62730E4F28B51360AE881100238D68FDB93460363A7E2CFC |
| SSDEEP | 24:X2bvJnp1yT8JGJObUxSA90t4mv9yrrFBC5SEd6ODC/YqIibXvCQU1TxRrxpnorns:Xkb4Sq0t4g9oa96cqIiDEtbDnors |
| SpecialCode | |
| TLSH | T1FA31E9E45815E1E0B3560B7C865D6E08C085931E14CEFA0A62AEE7D13A8F2B39791185 |
| db | nsrl_modern_rds |
| insert-timestamp | 1646987135.8325508 |
| source | NSRL |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/examples/nispom.rules.gz |
| FileSize | 1699 |
| MD5 | 5A3E0FD09C3B4738C8DE77C8F71F421E |
| SHA-1 | 222ED9ED3F4737FE85A52E77533B7E17FF286761 |
| SHA-256 | D094A989F13E5244DAE49421C361F67789B1C1A23FCCABE611C39DBB23931EA4 |
| SSDEEP | 48:X16nXcyLrshZ9n1ndEDaP9nkCtysk8clj6+C:F8Xc+rg7n1ndRlNyZRc |
| TLSH | T16631F8619680096926A0755FF5036F201644330CE6803BA57C2BDABBB22FE226B98A34 |
| Key | Value |
|---|---|
| CRC32 | 9B2DA067 |
| FileName | ./usr/share/man/man8/audispd.8.gz |
| FileSize | 1159 |
| MD5 | 135BB7129C559DBFDA3D7DB7C4F119C7 |
| OpSystemCode | 362 |
| ProductCode | 183711 |
| RDS:package_id | 222721 |
| SHA-1 | 2303B4F9ED81D8A3970B9F5236A990B86F91AC88 |
| SHA-256 | A472521EACF96BAFF706D46B0BF46FBDC6FAEA3530B0990E1BC5E05CB1FC73E6 |
| SSDEEP | 24:XuGxmtghkwHrEkYNBBZfiAc47XEf6AlOC6NCGW/NEjOyq05L0Xn7VJ:XuwFhk3vjoC61OC6cGGEVDwXn7VJ |
| SpecialCode | |
| TLSH | T1C321CA417E287187A971F41256C3544123042C5B07F9745EF7FF857F51280DA879DB52 |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040854.401868 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/README.Debian |
| FileSize | 919 |
| MD5 | 71530E8E04634A023800D9FCFE478BC1 |
| RDS:package_id | 222721 |
| SHA-1 | 2BC8DF446CD0C850B8FFB11BC620BDB23B312E12 |
| SHA-256 | B207622700C8AB30D56D93BF40D42FD91180A8D8E726264F68B7ACDA09684E5D |
| SSDEEP | 24:3kEXgfgX6koVgF/pO+4TH2d9e1Y201n6Wflv3pGu:3k+ToWF/4+4Ltt41fp |
| TLSH | T1DD1199237E81DB264680F0A5FE572280DA2A30AC3309242420E9A0DFE94253A52FEF71 |
| insert-timestamp | 1727040704.3892922 |
| source | RDS.db |
| Key | Value |
|---|---|
| FileName | ./sbin/autrace |
| FileSize | 14736 |
| MD5 | E8161C3FC4F1BCF0ACE5418002C73444 |
| SHA-1 | 30EC238FE5F778C3EC48EC7D32B76F05CD9D035D |
| SHA-256 | B4FA10657A40F4A15747B183F84844B78AED9499BFB1E1AC4920BF46760F4C63 |
| SSDEEP | 192:GN+9xNyoW7OabE6B39IR+qnhOHtD+qX3I52VFHUe40qLM6FGSS6:txQOaY6t9jqnYYqX3IQVFHV40q |
| TLSH | T11862B407A6135A7AC0C48277C5CB3270BDB3A0A9D722472B1515F1745D92B698F3EB2C |
| Key | Value |
|---|---|
| CRC32 | 1C124E86 |
| FileName | ./etc/audisp/plugins.d/af_unix.conf |
| FileSize | 358 |
| MD5 | 199EAA1E43FA9139F0910BDB64FD219E |
| OpSystemCode | 362 |
| ProductCode | 214118 |
| RDS:package_id | 222721 |
| SHA-1 | 31F906A6E55C835D5A14D241D88580FBCF7F7422 |
| SHA-256 | B7C3E851E8901BC6B2895A6BE8ABE38887EA4BF8BCC9BF2699BF940C7974B567 |
| SSDEEP | 6:mV7+QIKRcGreM2K/jcAu4YcqMqMoaeGiXCR2SFhGi+g4VxZUjkeIPTgnHtVbK/3:mFAKR3reMlcAhYc+MpeGiSRBQ/g414RS |
| SpecialCode | |
| TLSH | T16BE068A2E9A03A2538E80B11AFAD83A5FC2596C97B380017282E2C2041029209263EEC |
| db | nsrl_modern_rds |
| insert-timestamp | 1727040613.7428613 |
| source | RDS.db |
| tar:gname | root |
| tar:uname | root |
| Key | Value |
|---|---|
| FileName | ./usr/share/doc/auditd/examples/stig.rules.gz |
| FileSize | 2761 |
| MD5 | 3F8A590EDA3C78F94CFA891D934A91D0 |
| SHA-1 | 3A7A43049C49D3F340BC76177BD97D8CC6AA01F2 |
| SHA-256 | 9DDD71B63BD5E815E1E9FF7EF3185F5E5269134DFBD2EE41FDF4CC594AF5E448 |
| SSDEEP | 48:XfMjNE23yijIu1pooJyCvr3x/tUvnGA2nHZZKxTrK48R+mUDT7Ja:kjP3y8rD/vLdtAGA2n5Z8K48R+m8/Ja |
| TLSH | T14A515C8E938A4B8521A7AFB24144D52205980BCACCEF10F1DC97B14F8924936641FB77 |