<commit_before>sysctl:
  exec_shield:
    data:
      'CentOS-6':
        - 'kernel.exec-shield':
            tag: 'CIS-1.6.2'
            match_output: '1'
    description: 'Configure ExecShield (Scored)'
    alert: email
    trigger: state

  randomize_va_space:
    data:
      'CentOS-6':
        - 'kernel.randomize_va_space':
            tag: 'CIS-1.6.3'
            match_output: '2'
      'CentOS Linux-7':
        - 'kernel.randomize_va_space':
            tag: 'CIS-1.6.2'
            match_output: '2'
    description: 'Enable Randomized Virtual Memory Region Placement (Scored)'
    alert: email
    trigger: state

  ip_forwarding:
    data:
      'CentOS-6':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-4.1.1'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-4.1.1'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-7.1.1'
            match_output: '0'
    description: 'Disable IP Forwarding (Scored)'
    alert: email
    trigger: state

  send_packet_redirect:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-7.1.2'
            match_output: '0'
        - 'net.ipv4.conf.all.send_redirects'
            tag: 'CIS-7.1.2'
            match_output: '0'
    description: 'Disable Send Packet Redirect (Scored)'
    alert: email
    trigger: state

  source_routed_packet_acceptance:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-7.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-7.2.1'
            match_output: '0'
    description: 'Disable Source Routed Packet Acceptance (Scored)'
    alert: email
    trigger: state

  icmp_redirect_acceptance:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-7.2.2'
            match_output: '0'
    description: 'Disable ICMP Redirect Acceptance'
    alert: email
    trigger: state

  log_suspicious_packets:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.log_martian':
            tag: 'CIS-4.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.log_martian':
            tag: 'CIS-4.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.log_martian':
            tag: 'CIS-7.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-7.2.4'
            match_output: '1'
    description: 'Log Suspicious Activity (Scored)'
    alert: email
    trigger: state

  ignore_broadcast_requests:
    data:
      'CentOS-6':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-4.2.5'
            match_output: '1'
      'CentOS Linux-7':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-4.2.5'
            match_output: '1'
      'Ubuntu-14.04':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-7.2.5'
            match_output: '1'
    description: 'Enable Ignore Broadcast Requests (Scored)'
    alert: email<commit_msg>Fixed typo<commit_after>sysctl:
  exec_shield:
    data:
      'CentOS-6':
        - 'kernel.exec-shield':
            tag: 'CIS-1.6.2'
            match_output: '1'
    description: 'Configure ExecShield (Scored)'
    alert: email
    trigger: state

  randomize_va_space:
    data:
      'CentOS-6':
        - 'kernel.randomize_va_space':
            tag: 'CIS-1.6.3'
            match_output: '2'
      'CentOS Linux-7':
        - 'kernel.randomize_va_space':
            tag: 'CIS-1.6.2'
            match_output: '2'
    description: 'Enable Randomized Virtual Memory Region Placement (Scored)'
    alert: email
    trigger: state

  ip_forwarding:
    data:
      'CentOS-6':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-4.1.1'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-4.1.1'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.ip_forward':
            tag: 'CIS-7.1.1'
            match_output: '0'
    description: 'Disable IP Forwarding (Scored)'
    alert: email
    trigger: state

  send_packet_redirect:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-4.1.2'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.default.send_redirects':
            tag: 'CIS-7.1.2'
            match_output: '0'
        - 'net.ipv4.conf.all.send_redirects':
            tag: 'CIS-7.1.2'
            match_output: '0'
    description: 'Disable Send Packet Redirect (Scored)'
    alert: email
    trigger: state

  source_routed_packet_acceptance:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-4.2.1'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.accept_source_route':
            tag: 'CIS-7.2.1'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_source_route':
            tag: 'CIS-7.2.1'
            match_output: '0'
    description: 'Disable Source Routed Packet Acceptance (Scored)'
    alert: email
    trigger: state

  icmp_redirect_acceptance:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
        - 'net.ipv4.conf.default.accept_redirects':
            tag: 'CIS-4.2.2'
            match_output: '0'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.accept_redirects':
            tag: 'CIS-7.2.2'
            match_output: '0'
    description: 'Disable ICMP Redirect Acceptance'
    alert: email
    trigger: state

  log_suspicious_packets:
    data:
      'CentOS-6':
        - 'net.ipv4.conf.all.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
      'CentOS Linux-7':
        - 'net.ipv4.conf.all.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-4.2.4'
            match_output: '1'
      'Ubuntu-14.04':
        - 'net.ipv4.conf.all.log_martians':
            tag: 'CIS-7.2.4'
            match_output: '1'
        - 'net.ipv4.conf.default.log_martians':
            tag: 'CIS-7.2.4'
            match_output: '1'
    description: 'Log Suspicious Activity (Scored)'
    alert: email
    trigger: state

  ignore_broadcast_requests:
    data:
      'CentOS-6':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-4.2.5'
            match_output: '1'
      'CentOS Linux-7':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-4.2.5'
            match_output: '1'
      'Ubuntu-14.04':
        - 'net.ipv4.icmp_echo_ignore_broadcasts':
            tag: 'CIS-7.2.5'
            match_output: '1'
    description: 'Enable Ignore Broadcast Requests (Scored)'
    alert: email
{'fraction_non_alphanumeric': 0.1409506210861308, 'fraction_numerical': 0.04024227492043938, 'mean_word_length': 1.600640683395622, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '332869', 'n_tokens_mistral': 3653, 'n_tokens_neox': 3610, 'n_words': 562}