HIDS 61129

From Atomicorp Wiki
Jump to: navigation, search

Rule ID

61129

Status

Active rule currently published.

Description

Grsecurity has detected a time change on the system.

This rule detects when the time on the system has been changed. ASL does not cause this event, and this rule does not shun or block any activity. It exists to detect potentially suspicious changes to the system. Attackers sometimes change the systems time to corrupt the logs on the system, or to hide activity.

False Positives

None.

Tuning Recommendations

None.

Similar Rules

None.

Personal tools