blob: 59e3f4b4e9b03870501463e57cdd4919396b27ec (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
<?xml version="1.0" encoding="UTF-8"?>
<group name="ossec,">
<rule id="56041" level="1">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-last-logins'</match>
<check_diff />
<description>List of the last logged in users.</description>
</rule>
<rule id="56042" level="1">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-tcp4-all'</match>
<check_diff />
<description>Listening IPv4 TCP port opened or closed.</description>
</rule>
<rule id="56043" level="7">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-tcp4'</match>
<check_diff />
<description>Listening IPv4 TCP port opened or closed.</description>
</rule>
<rule id="56044" level="1">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-tcp6-all'</match>
<check_diff />
<description>Listening IPv6 TCP port opened or closed.</description>
</rule>
<rule id="56045" level="7">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-tcp6'</match>
<check_diff />
<description>Listening IPv6 TCP port opened or closed.</description>
</rule>
<rule id="56046" level="1">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-udp4-all'</match>
<check_diff />
<description>Listening IPv4 UDP port opened or closed.</description>
</rule>
<rule id="56047" level="7">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-udp4'</match>
<check_diff />
<description>Listening IPv4 UDP port opened or closed.</description>
</rule>
<rule id="56048" level="1">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-udp6-all'</match>
<check_diff />
<description>Listening IPv6 UDP port opened or closed.</description>
</rule>
<rule id="56049" level="7">
<if_sid>530</if_sid>
<match>ossec: output: 'freebsd-open-ports-udp6'</match>
<check_diff />
<description>Listening IPv6 UDP port opened or closed.</description>
</rule>
</group>
|
