Skip to content

Add Linux Auditd Enumeration Script Activity detection - #4380

Open
vahidmalekk wants to merge 2 commits into
splunk:developfrom
vahidmalekk:detection/linux-auditd-enumeration
Open

vahidmalekk wants to merge 2 commits into
splunk:developfrom
vahidmalekk:detection/linux-auditd-enumeration

Preserve account/parent/process fields for allowlisting (address review)

2b2abc4
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning and 1 notice
labeler
succeeded Nov 2, 2026 in 9s