Jump to content United States-English
HP.com Home Products and Services Support and Drivers Solutions How to Buy
» Contact HP
More options
HP.com home
 HP-UX Host Intrusion Detection System Version 4.1 Administrator's Guide: HP-UX 11i v1, HP-UX 11i v2 and HP-UX 11i v3

Appendix A Templates and Alerts
» 

Technical documentation

Complete book in PDF
» Feedback
Content starts here

 » Table of Contents

 » Index

spacerspacerspacer
spacer
spacer
  		 
 

Table of Contents

Alert Summary
UNIX Regular Expressions
Limitations
Template Property Types
Type I: Path Names to [Not] Monitor
Type II: Path Names/Programs Pairs
Type III: User Names/UIDs
Type IV: User Name/UID Pairs
Type V: Network Triplets
Type VI: Time Strings
Type VII: Flags
Type VIII: Scalars
Type IX: Path Names / Integer Pairs
Buffer Overflow Template
Execute on Stack
Unusual Argument Length
Argument with Nonprintable Character
Race Condition Template
File Reference Modification
Privileged setuid Script Executed
Modification of files/directories Template
File Being Modified
Changes to Log File Template
Append-Only File Being Modified
Creation and Modification of setuid/setgid File Template
Setuid or setgid File Created or Modified
Creation of World-Writable File Template
World-Writable File Created
Modification of Another User’s File Template
Non-Owned File Being Modified
Login/Logout Template
Login/Logout
Successful su Detected
Repeated Failed Logins Template
Failed Login Attempts
Repeated Failed su Commands Template
Repeated Failed su Attempts

This appendix describes the detection templates that constitute the surveillance groups. It also describes the alerts that are passed to the System Manager and to the response programs by the HIDS agent. This appendix addresses the following topics:



Browser Preferences
  		 


Alert Summary  
Printable version
Privacy statement Using this site means you accept its terms Feedback to webmaster
© Hewlett-Packard Development Company, L.P.