Ensure events that modify date and time information are collected – auditctl b64 adjtimex Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – auditctl b64 clock_settime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – b32 adjtimex Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – b32 clock_settime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – b32 /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – b64 adjtimex Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – b64 clock_settime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify user/group information are collected – auditctl /etc/group Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl /etc/passwd Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...
Ensure events that modify user/group information are collected – auditctl /etc/security/opasswd Details Record events affecting the group , passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on...