Add host event rules for bind and capability activity
This commit is contained in:
parent
b40ac4252c
commit
9784033f86
12 changed files with 316 additions and 8 deletions
11
tests/fixtures/sids/100076-interpreter-unusual-accept.json
vendored
Normal file
11
tests/fixtures/sids/100076-interpreter-unusual-accept.json
vendored
Normal file
|
|
@ -0,0 +1,11 @@
|
|||
{
|
||||
"event": "accept",
|
||||
"pid": 4242,
|
||||
"ppid": 1,
|
||||
"uid": 1000,
|
||||
"comm": "python3",
|
||||
"peer_ip": "8.8.8.8",
|
||||
"peer_port": 51515,
|
||||
"local_ip": "0.0.0.0",
|
||||
"local_port": 4444
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue