Logging Configuration Changes on Linux Host — Detection Rule

Detect changes of syslog daemons configuration files

Read the full analysis on IntelFusions