5e298fe7-088a-467a-b57f-d8558368621d.md

Products: Linux - Auditd

Rules

Rule ID	Rule Name
MATCH-S00445	Known Ransomware File Extensions
MATCH-S00683	Overly Permissive Chmod Command
MATCH-S00919	chage command use on host

Log Mappers

Log Mapper ID	Log Mapper Name
b09d8957-f7b3-4493-8301-456c4e8bccbc	Auditd