Hello,
I received an Interesting Notification today from my server. Was wondering if anybody has any thoughts on this?
OSSEC HIDS Notification.
2007 Feb 27 10:55:55
Received From: server->syscheck
Rule: 13 fired (level 8) -> "Integrity checksum of file '/etc/psa/psa.key' has changed."
Portion of the log(s):
Integrity checksum changed for: '/etc/psa/psa.key'
Size changed from '46270' to '46030'
Old md5sum was: '77292d5b5ef97acf93f180105feea065'
New md5sum is : '7722112703a67018f187540ebb3e45ab'
Old sha1sum was: 'e31056f124ea1150ded661730e8f694804a253a5'
New sha1sum is : '381434ad7ff28f9a8606b47f3acb810d0af85b9b'
--END OF NOTIFICATION
I received an Interesting Notification today from my server. Was wondering if anybody has any thoughts on this?
OSSEC HIDS Notification.
2007 Feb 27 10:55:55
Received From: server->syscheck
Rule: 13 fired (level 8) -> "Integrity checksum of file '/etc/psa/psa.key' has changed."
Portion of the log(s):
Integrity checksum changed for: '/etc/psa/psa.key'
Size changed from '46270' to '46030'
Old md5sum was: '77292d5b5ef97acf93f180105feea065'
New md5sum is : '7722112703a67018f187540ebb3e45ab'
Old sha1sum was: 'e31056f124ea1150ded661730e8f694804a253a5'
New sha1sum is : '381434ad7ff28f9a8606b47f3acb810d0af85b9b'
--END OF NOTIFICATION