ACS(RedHat 6) 모듈 관리 팩용 언어 팩

Microsoft.ACS.Linux.RHEL.6 :: 7.7.1124.0 (Management Pack)

UNIX/Linux(RedHat 6) 컴퓨터에서 감사 가능한 syslog를 수집하고 이를 보안 이벤트 로그에 기록하는 관리 팩입니다.

요약

Red Hat Enterprise Linux Server 릴리스 6 ACS 관리 팩은 Red Hat Enterprise Linux Server 릴리스 6 운영 체제에서 감사 가능한 syslog를 수집하여 Windows 보안 이벤트 로그에 기록하는 방법을 제공합니다.

Management Pack Elements

Show Management Pack References

TypeDefinitions

EntityTypes

ClassType (1)

Monitoring

Discovery (1)
Rule (17)

Classes (1)

System.Entity

System.ConfigItem

System.LogicalEntity

System.LocalApplication

Microsoft.Unix.LocalApplication

Microsoft.ACS.Unix.ACSEndPoint

Microsoft.ACS.Linux.RHEL.6.ACSEndPoint

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	RHEL 6 ACS 끝점	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	Microsoft.ACS.Unix.ACSEndPoint	False	True	False	False	False	Public

Discoveries (1)

	DisplayName	ID	Target	Enabled
	Red Hat Enterprise Linux Server 릴리스 6 ACS 끝점 검색	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint.Discovery	Microsoft.ACS.Unix.ACSEndPoint	True

Rules (17)

	DisplayName	ID	Target	Category	Enabled	Alert Generate
	그룹 추가(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Adding.Group	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	사용자 추가(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Adding.User	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	그룹에 사용자 추가(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Adding.User.To.Group	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	실패한 콘솔 로그인(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Console.Login.Failed	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	성공한 콘솔 로그인(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Console.Login.Succeeded	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	그룹 삭제(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Deleting.Group	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	사용자 삭제(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Deleting.User	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	그룹에서 사용자 삭제(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Deleting.User.From.Group	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	실패한 암호 변경(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Password.Change.Failed	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	성공한 암호 변경(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Password.Change.Succeeded	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	실패한 ssh 로그인(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Ssh.Failed	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	성공한 ssh 로그인(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Ssh.Succeeded	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	실패한 su(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Su.Failed	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	성공한 su(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Su.Succeeded	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	실패한 sudo(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Sudo.Failed	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	잘못된 sudo(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Sudo.Invalid	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False
	성공한 sudo(Red Hat Enterprise Linux Server 6)	Microsoft.ACS.Linux.RHEL.6.Sudo.Succeeded	Microsoft.ACS.Linux.RHEL.6.ACSEndPoint	EventCollection	True	False