|
owenb -> GFI EventsManager 8 ReportPack build 20080408 (15.Apr.2009 7:55:08 AM)
|
Changes in this build include:
- Added support for events 536,537 for logon failure reports (and Vista equivalents).
- Event 536 Logon Failure : Netlogon component is not active
- Event 537 Logon Failure : other reasons.
- Added NEW reports for "User Activity" monitoring
- "Failed logon count on each computer"
- "Top 10 accounts which failed to logon"
- Ported and integrated the following reports required for compliancy analysis including PCI
- 10.2.1 All individual access to cardholder data - when data is stored in files
- 10.2.2 All actions taken by any individual with root or administrative privileges
- 10.2.3 Access to all audit trails
- 10.2.4 Invalid logical access attempts
- 10.2 5 Use of identification and authentication mechanisms
- 10.2.6 Initialization of the audit logs
- 10.2.7 Creation and deletion of system-level objects
- 10.4 Time synchronization monitoring
|
|
|
|