Pattern 23 : Crontab File Editing

Rule Name

Rule Type

Common Event

Classification

Pattern 23 : Crontab File Editing

Base Rule

Object Read

Access Success

List Crontab Files

Sub Rule

Object Read

Access Success

Begin Editing Crontab File

Sub Rule

Object Modified

Access Success

End Editing Crontab File

Sub Rule

Object Modified

Access Success

Replace Crontab File

Sub Rule

Object Added

Access Success

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<login>

Text\String

N/A

<object>

Text\String

N/A

<tag1>

Text\String