HIDS 550

From Atomicorp Wiki
Revision as of 18:22, 25 July 2011 by Mshinn (Talk | contribs)

Jump to: navigation, search

Rule ID

550

Status

Active rule currently published.

Description

This rule is detects when a monitored file changes.

False Positives

There is no known false positive for this rule. This rule detects when files change, therefore, it is not recommended that you disable this rule.

If you believe that this is a false positive, please report this to our security team can determine if this is a legitimate case, or if its clever attack on your system. Instructions to report false positives are detailed on the Reporting False Positives wiki page.


Tuning Recommendations

None.

Similar Rules

None.

Knowledge Base Articles

None.

Outside References

Personal tools