0044-libbin-del-/bin Directory Has Files Deleted
Rule ID
Category
Level
Compatible Versions
Description
- Monitors whether files under the host
/bin directory are deleted.
Scan Frequency
Rationale
- The
/bin directory contains executable files of essential system commands. If they are deleted, the system may fail to operate normally.
Risk Items
Audit Method
- If file deletion is detected under the
/bin directory, check whether the affected files are critical system commands.
Impact
Default Value
References
CIS Controls