1200KM / tag
auditd — logsource-service tag
52 related reference pages for logsource-service: auditd.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- ASLR Disabled Via Sysctl or Direct Syscall - Linux · sigma-rule
- Audio Capture · sigma-rule
- Auditing Configuration Changes on Linux Host · sigma-rule
- Binary Padding - Linux · sigma-rule
- BPFDoor Abnormal Process ID or Lock File Accessed · sigma-rule
- Bpfdoor TCP Ports Redirect · sigma-rule
- Clear or Disable Kernel Ring Buffer Logs via Syslog Syscall · sigma-rule
- Clipboard Collection of Image Data with Xclip Tool · sigma-rule
- Clipboard Collection with Xclip Tool - Auditd · sigma-rule
- Creation Of An User Account · sigma-rule
- Credentials In Files - Linux · sigma-rule
- Data Compressed · sigma-rule
- Data Exfiltration with Wget · sigma-rule
- Disable System Firewall · sigma-rule
- File or Folder Permissions Change · sigma-rule
- File Time Attribute Change - Linux · sigma-rule
- Hidden Files and Directories · sigma-rule
- Linux Capabilities Discovery · sigma-rule
- Linux Keylogging with Pam.d · sigma-rule
- Linux Network Service Scanning - Auditd · sigma-rule
- Loading of Kernel Module via Insmod · sigma-rule
- Logging Configuration Changes on Linux Host · sigma-rule
- Masquerading as Linux Crond Process · sigma-rule
- Modification of ld.so.preload · sigma-rule
- Modify System Firewall · sigma-rule
- Network Sniffing - Linux · sigma-rule
- Overwriting the File with Dev Zero or Null · sigma-rule
- Password Policy Discovery - Linux · sigma-rule
- Possible Coin Miner CPU Priority Param · sigma-rule
- Potential Abuse of Linux Magic System Request Key · sigma-rule
- Program Executions in Suspicious Folders · sigma-rule
- Remove Immutable File Attribute - Auditd · sigma-rule
- Screen Capture with Import Tool · sigma-rule
- Screen Capture with Xwd · sigma-rule
- Service Reload or Start - Linux · sigma-rule
- Special File Creation via Mknod Syscall · sigma-rule
- Split A File Into Pieces - Linux · sigma-rule
- Steganography Extract Files with Steghide · sigma-rule
- Steganography Hide Files with Steghide · sigma-rule
- Steganography Hide Zip Information in Picture File · sigma-rule
- Steganography Unzip Hidden Information From Picture File · sigma-rule
- Suspicious Commands Linux · sigma-rule
- Suspicious History File Operations - Linux · sigma-rule
- System and Hardware Information Discovery · sigma-rule
- System Info Discovery via Sysinfo Syscall · sigma-rule
- System Information Discovery - Auditd · sigma-rule
- System Owner or User Discovery - Linux · sigma-rule
- System Shutdown/Reboot - Linux · sigma-rule
- Systemd Service Creation · sigma-rule
- Unix Shell Configuration Modification · sigma-rule
- Use Of Hidden Paths Or Files · sigma-rule
- Webshell Remote Command Execution · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.