Ensure events that modify date and time information are collected – auditctl /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – auditctl settimeofday,adjtimex x64 Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime x64 Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – settimeofday,adjtimex x64 Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify user/group information are collected – auditctl /etc/group Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl /etc/gshadow Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl /etc/passwd Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl /etc/security/opasswd Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...