Search and filter across all detection sources
13 rules
ASA: Privilege changed.
Auditd: group ID changed
Auditd: user ID changed
PAM: Login session closed.
PAM: Login session opened.
Solaris: Login session succeeded.
Solaris: User successfully changed UID.
PIX: Privilege changed.
Auditd: user becomes root
Auditd: user-space account addition ended abnormally.
Auditd: user-space account deletion ended abnormally.
Auditd: user-space account modification ended abnormally.
Auditd: account login attempt ended abnormally.