Add host correlation and assurance coverage
This commit is contained in:
parent
8194d13734
commit
b40ac4252c
36 changed files with 944 additions and 23 deletions
10
tests/fixtures/sids/100069-interpreter-persistence-write.json
vendored
Normal file
10
tests/fixtures/sids/100069-interpreter-persistence-write.json
vendored
Normal file
|
|
@ -0,0 +1,10 @@
|
|||
{
|
||||
"event": "file_write",
|
||||
"pid": 4242,
|
||||
"ppid": 1,
|
||||
"uid": 1000,
|
||||
"comm": "python3",
|
||||
"parent_comm": "bash",
|
||||
"path": "/etc/systemd/system/evil.service",
|
||||
"argv": ["-c", "write unit"]
|
||||
}
|
||||
Loading…
Add table
Add a link
Reference in a new issue