Official 1.0 release of cmdReporter
- New: cmdReporter has been completely re-written as a stand-alone binary.
- New: System reboots no longer required for full audit data collection.
- New: Edits to system configuration files no longer necessary.
cmdReporter Wiki
- General Information
- Preference Documentation
-
Log Data Documentation
-
Log Data Examples
- APP_METRICS
- AUDIO_VIDEO_DEVICE_EVENT
- AUDIT_CLASS_VERIFICATION_EVENT
- AUE_ACCEPT
- AUE_AUTH_USER
- AUE_BIND
- AUE_CHDIR
- AUE_CHROOT
- AUE_CONNECT
- AUE_EXECVE
- AUE_EXIT
- AUE_FORK
- AUE_GETAUID
- AUE_KILL
- AUE_LISTEN
- AUE_LOGOUT
- AUE_LW_LOGIN
- AUE_MAC_SET_PROC
- AUE_MOUNT
- AUE_PIDFORTASK
- AUE_POSIX_SPAWN
- AUE_PTRACE
- AUE_REMOVE_FROM_GROUP
- AUE_SESSION_CLOSE
- AUE_SESSION_END
- AUE_SESSION_START
- AUE_SESSION_UPDATE
- AUE_SETPRIORITY
- AUE_SETSOCKOPT
- AUE_SETTIMEOFDAY
- AUE_SHUTDOWN
- AUE_SOCKETPAIR
- AUE_SSAUTHINT
- AUE_SSAUTHMECH
- AUE_SSAUTHORIZE
- AUE_TASKFORPID
- AUE_TASKNAMEFORPID
- AUE_UNMOUNT
- AUE_WAIT4
- CMDREPORTER_TAMPER_EVENT
- FILE_EVENT
- GATEKEEPER_INFO_EVENT
- GATEKEEPER_MANUAL_OVERRIDES
- GATEKEEPER_QUARANTINE_LOG
- HARDWARE_EVENT
- LICENSE_INFO_EVENT
- PREFERENCE_LIST_EVENT
- PRINT_EVENT_INFORMATION
- PROHIBITED_APP_BLOCKED
- SIGNAL_EVENT
- UNIFIED_LOG_EVENT
- XPROTECT_DEFINITIONS_VERSION_INFO
- XPROTECT_EVENT_LOG
- Interesting Types of Events
-
Log Data Examples
- Related Tech and Configurations
- Compliance