luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add host correlation and assurance coverage

Browse source
This commit is contained in:
Luna 2026-07-10 03:07:00 -07:00
parent 8194d13734
commit b40ac4252c
No known key found for this signature in database
36 changed files with 944 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

10
tests/fixtures/sids/100069-interpreter-persistence-write.json vendored Normal file
View file

@ -0,0 +1,10 @@
{
"event": "file_write",
"pid": 4242,
"ppid": 1,
"uid": 1000,
"comm": "python3",
"parent_comm": "bash",
"path": "/etc/systemd/system/evil.service",
"argv": ["-c", "write unit"]
}

10
tests/fixtures/sids/100070-persistence-permission-change.json vendored Normal file
View file

@ -0,0 +1,10 @@
{
"event": "chmod",
"pid": 4243,
"ppid": 1,
"uid": 0,
"comm": "chmod",
"parent_comm": "bash",
"path": "/etc/cron.d/backup",
"mode": "0o777"
}

9
tests/fixtures/sids/100071-interpreter-setuid-root.json vendored Normal file
View file

@ -0,0 +1,9 @@
{
"event": "setuid",
"pid": 4244,
"ppid": 1,
"uid": 1000,
"comm": "python3",
"parent_comm": "bash",
"target_uid": 0
}

9
tests/fixtures/sids/100072-interpreter-setgid-root.json vendored Normal file
View file

@ -0,0 +1,9 @@
{
"event": "setgid",
"pid": 4245,
"ppid": 1,
"uid": 1000,
"comm": "python3",
"parent_comm": "bash",
"target_gid": 0
}