| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| 그룹 추가(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 사용자 추가(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.User | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 그룹에 사용자 추가(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.User.To.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 실패한 콘솔 로그인(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Console.Login.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 성공한 콘솔 로그인(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Console.Login.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 그룹 삭제(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 사용자 삭제(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.User | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 그룹에서 사용자 삭제(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.User.From.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 실패한 암호 변경(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Password.Change.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 성공한 암호 변경(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Password.Change.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 실패한 ssh 로그인(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Ssh.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 성공한 ssh 로그인(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Ssh.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 실패한 su(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Su.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 성공한 su(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Su.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 실패한 sudo(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 잘못된 sudo(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Invalid | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| 성공한 sudo(Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |