| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| 그룹 추가(범용 Linux) | Microsoft.ACS.Linux.Universal.Adding.Group | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 사용자 추가(범용 Linux) | Microsoft.ACS.Linux.Universal.Adding.User | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 그룹에 사용자 추가(범용 Linux) | Microsoft.ACS.Linux.Universal.Adding.User.To.Group | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 실패한 콘솔 로그인(범용 Linux) | Microsoft.ACS.Linux.Universal.Console.Login.Failed | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 성공적인 콘솔 로그인(범용 Linux) | Microsoft.ACS.Linux.Universal.Console.Login.Succeeded | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 그룹 삭제(범용 Linux) | Microsoft.ACS.Linux.Universal.Deleting.Group | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 사용자 삭제(범용 Linux) | Microsoft.ACS.Linux.Universal.Deleting.User | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 그룹에서 사용자 삭제(범용 Linux) | Microsoft.ACS.Linux.Universal.Deleting.User.From.Group | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 실패한 암호 변경(범용 Linux) | Microsoft.ACS.Linux.Universal.Password.Change.Failed | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 성공적인 암호 변경(범용 Linux) | Microsoft.ACS.Linux.Universal.Password.Change.Succeeded | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 실패한 ssh 로그인(범용 Linux) | Microsoft.ACS.Linux.Universal.Ssh.Failed | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 성공적인 ssh 로그인(범용 Linux) | Microsoft.ACS.Linux.Universal.Ssh.Succeeded | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 실패한 su(범용 Linux) | Microsoft.ACS.Linux.Universal.Su.Failed | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 성공적인 su(범용 Linux) | Microsoft.ACS.Linux.Universal.Su.Succeeded | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 실패한 sudo(범용 Linux) | Microsoft.ACS.Linux.Universal.Sudo.Failed | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 잘못된 sudo(범용 Linux) | Microsoft.ACS.Linux.Universal.Sudo.Invalid | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |
| 성공적인 sudo(범용 Linux) | Microsoft.ACS.Linux.Universal.Sudo.Succeeded | Microsoft.ACS.Linux.Universal.ACSEndPoint | EventCollection | False | False |