Host-based intrusion detection system comparison: Difference between revisions

Revision as of 20:20, 4 November 2023

Revision as of 16:07, 20 March 2024

Line 13:

! Logs

! [[Information_technology_security_audit|Config]]

! Sane defaults

! Notes

|-

Line 24 ⟶ 23:

| {{yes}}

| {{yes}}

|

|

|-

Line 35 ⟶ 33:

| {{yes}}

| {{yes}}

|

|

|-

Line 46 ⟶ 43:

| {{partial}}<ref>Last</ref>

|

| {{no}}

|

|-

Line 57 ⟶ 53:

| {{no}}

|

|

|

|-

Line 68 ⟶ 63:

| {{partial}}<ref>lastlog, wtmp, utmp, wtmpx</ref>

|

|

|

|-

Line 78 ⟶ 72:

| {{no}}

| {{no}}

| {{yes}}

| {{yes}}

|

Line 90 ⟶ 83:

| {{no}}

|

|

| proc ps compare

|-

Line 101 ⟶ 93:

| {{no}}

|

|

|

|-

Line 112 ⟶ 103:

| {{yes}}

|

| {{no}}

|

|-

Line 123 ⟶ 113:

| {{yes}}

|

| {{no}}

|

|-

Line 133 ⟶ 122:

| {{no}}

| {{yes}}

|

|

|

Line 145 ⟶ 133:

| {{yes}}

|

|

|

|-

Line 156 ⟶ 143:

| {{yes}}

|

|

|

|-

Line 167 ⟶ 153:

| {{no}}

|

| {{no}}

|

|-

Line 178 ⟶ 163:

| {{no}}

|

|

|

|-

Line 189 ⟶ 173:

| {{no}}

| {{yes}}

| {{no}}

| 3/42 modules are Debian specific.

|-