File tree Expand file tree Collapse file tree 3 files changed +515
-23
lines changed
docs/1secure/configuration Expand file tree Collapse file tree 3 files changed +515
-23
lines changed Original file line number Diff line number Diff line change @@ -42,12 +42,105 @@ System Audit Policies.
42
42
43
43
** Step 3 –** Configure the following audit policies.
44
44
45
- | Policy Subnode | Policy Name | Audit Events |
46
- | --------------------------- | ----------------------------------------------- | ----------------------------------------------------------------------------- |
47
- | Object Access | - Audit File System - Audit Handle Manipulation | "Success" and/or "Failure" depending on the type of events you want to track. |
48
- | - Audit Detailed File Share | "Failure" | |
49
- | - Audit File Share | "Success" | |
50
- | Policy Change | - Audit Policy Change | "Success" |
51
- | Logon/Logoff | - Logon | "Success" |
52
- | - Logoff | "Success" | |
53
- | System | - Security State Change | "Success" |
45
+ <table>
46
+ <thead>
47
+ <tr>
48
+ <th>
49
+ <p>Policy Subnode</p>
50
+ </th>
51
+ <th>
52
+ <p>Policy Name</p>
53
+ </th>
54
+ <th>
55
+ <p>Audit Events</p>
56
+ </th>
57
+ </tr>
58
+ </thead>
59
+ <tbody>
60
+ <tr>
61
+ <td rowspan="3">
62
+ <p>Object Access</p>
63
+ </td>
64
+ <td>
65
+ <ul>
66
+ <li>Audit File System</li>
67
+ <li>Audit Handle Manipulation</li>
68
+ </ul>
69
+ </td>
70
+ <td>
71
+ <p>"Success" and/or "Failure" depending on the type of events you want to track.</p>
72
+ </td>
73
+ </tr>
74
+ <tr>
75
+ <td>
76
+ <ul>
77
+ <li>Audit Detailed File Share</li>
78
+ </ul>
79
+ </td>
80
+ <td>
81
+ <p>"Failure"</p>
82
+ </td>
83
+ </tr>
84
+ <tr>
85
+ <td>
86
+ <ul>
87
+ <li>
88
+ <p>Audit File Share</p>
89
+ </li>
90
+ </ul>
91
+ </td>
92
+ <td>
93
+ <p>"Success"</p>
94
+ </td>
95
+ </tr>
96
+ <tr>
97
+ <td>
98
+ <p>Policy Change</p>
99
+ </td>
100
+ <td>
101
+ <ul>
102
+ <li>Audit Policy Change</li>
103
+ </ul>
104
+ </td>
105
+ <td>
106
+ <p>"Success"</p>
107
+ </td>
108
+ </tr>
109
+ <tr>
110
+ <td rowspan="2">
111
+ <p>Logon/Logoff</p>
112
+ </td>
113
+ <td>
114
+ <ul>
115
+ <li>Logon</li>
116
+ </ul>
117
+ </td>
118
+ <td>
119
+ <p>"Success"</p>
120
+ </td>
121
+ </tr>
122
+ <tr>
123
+ <td>
124
+ <ul>
125
+ <li>Logoff</li>
126
+ </ul>
127
+ </td>
128
+ <td>
129
+ <p>"Success"</p>
130
+ </td>
131
+ </tr>
132
+ <tr>
133
+ <td>
134
+ <p>System</p>
135
+ </td>
136
+ <td>
137
+ <ul>
138
+ <li>Security State Change</li>
139
+ </ul>
140
+ </td>
141
+ <td>
142
+ <p>"Success"</p>
143
+ </td>
144
+ </tr>
145
+ </tbody>
146
+ </table>
You can’t perform that action at this time.
0 commit comments