HP-UX Host Intrusion Detection System Version 4.7 Administrator Guide HP-UX 11i v3 (766144-001, March 2014)

Table 20 File Being Modified Alert Properties (continued)
DescriptionAlert Value/FormatAlert Field
Type
Alert FieldResponse
Program
Argument
• File renamed
• File modified
• Hard link created
• Symbolic link created
• Directory created
• Special file created
• File deleted
• Directory deleted
• Miscellaneous event
Failed Attempts to Modify Files
Table 21 (page 123) lists the alert details and event properties this template generates and forwards
to a response program when there is an unsuccessful modification of a file that is monitored by
this template and when the monitor_failed_attempt global property is set to 1. All other
alert properties for failed attempts are listed in Table 20 (page 120).
122 Templates and Alerts