| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Grup Ekleme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Kullanıcı Ekleme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.User | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Kullanıcıyı Gruba Ekleme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Adding.User.To.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarısız Konsol Oturumu Açma (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Console.Login.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarılı Konsol Oturumu Açma (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Console.Login.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Grup Silme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Kullanıcı Silme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.User | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Kullanıcıyı Gruptan Silme (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Deleting.User.From.Group | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarısız Parola Değişimi (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Password.Change.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarılı Parola Değişimi (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Password.Change.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarısız SSH oturumu açma (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Ssh.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarılı SSH oturumu açma (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Ssh.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarısız SU (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Su.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarılı SU (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Su.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarısız SUDO (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Failed | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Geçersiz SUDO (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Invalid | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |
| Başarılı SUDO (Red Hat Enterprise Linux Server 5) | Microsoft.ACS.Linux.RHEL.5.Sudo.Succeeded | Microsoft.ACS.Linux.RHEL.5.ACSEndPoint | EventCollection | True | False |