Difference between revisions of "HIDS 550"
From Atomicorp Wiki
(Created page with "'''Rule ID''' 553 '''Status''' Active rule currently published. '''Description''' This rule is detects when a monitored file changes. '''False Positives''' There is n...") |
m |
||
| Line 1: | Line 1: | ||
'''Rule ID''' | '''Rule ID''' | ||
| − | + | 550 | |
'''Status''' | '''Status''' | ||
Revision as of 18:22, 25 July 2011
Rule ID
550
Status
Active rule currently published.
Description
This rule is detects when a monitored file changes.
False Positives
There is no known false positive for this rule. This rule detects when files change, therefore, it is not recommended that you disable this rule.
If you believe that this is a false positive, please report this to our security team can determine if this is a legitimate case, or if its clever attack on your system. Instructions to report false positives are detailed on the Reporting False Positives wiki page.
Tuning Recommendations
None.
Similar Rules
None.
Knowledge Base Articles
None.
Outside References
