Repository navigation

Add Linux Auditd Enumeration Script Activity detection - #4380

Open

vahidmalekk wants to merge 2 commits into

splunk:developfrom

vahidmalekk:detection/linux-auditd-enumeration

Open

Add Linux Auditd Enumeration Script Activity detection#4380
vahidmalekk wants to merge 2 commits into
splunk:developfrom
vahidmalekk:detection/linux-auditd-enumeration

Commits on Oct 31, 2026
- Add Linux Auditd Enumeration Script Activity detection
  vahidmalekk
  committed
  42e196e
Commits on Nov 2, 2026
- Preserve account/parent/process fields for allowlisting (address review)
  vahidmalekk
  committed
  2b2abc4