Linux Network Service Scanning - Auditd — Detection Rule

Detects enumeration of local or remote network services.

Read the full analysis on IntelFusions