ACS (Solaris 10) Modules Management Pack (Microsoft.ACS.Solaris.10)

Microsoft.ACS.Solaris.10 :: 7.6.1064.0 (Management Pack)

This is the management pack to collect auditable syslogs from UNIX/Linux (Solaris 10) computer and write them to Security Event Log.

Summary

The Solaris 5.10 ACS Management Pack provides the means of collecting auditable syslogs from Solaris 5.10 Operating Systems and write them to the Windows Security Event Log.

Management Pack Elements

Classes (1)

System.Entity

System.ConfigItem

System.LogicalEntity

System.LocalApplication

Microsoft.Unix.LocalApplication

Microsoft.ACS.Unix.ACSEndPoint

Microsoft.ACS.Solaris.10.ACSEndPoint

	DisplayName	ID	Base Class	Abstract	Hosted	Singleton	Group	Extension	Accessibility
	Solaris 10 ACS Endpoint	Microsoft.ACS.Solaris.10.ACSEndPoint	Microsoft.ACS.Unix.ACSEndPoint	False	True	False	False	False	Public

Discoveries (1)

	DisplayName	ID	Target	Enabled
	Discover Sun 5.10 ACS Endpoint	Microsoft.ACS.Solaris.10.ACSEndPoint.Discovery	Microsoft.ACS.Unix.ACSEndPoint	True

Rules (10)

DisplayName	ID	Target	Category	Enabled	Alert Generate
Successful Console login (Solaris 10)	Microsoft.ACS.Solaris.10.Console.Login.Succeeded	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Failed ssh login (Solaris 10)	Microsoft.ACS.Solaris.10.Ssh.Failed	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Invalid ssh login (Solaris 10)	Microsoft.ACS.Solaris.10.Ssh.Invalid	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Successful ssh login (Solaris 10)	Microsoft.ACS.Solaris.10.Ssh.Succeeded	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Failed su (Solaris 10)	Microsoft.ACS.Solaris.10.Su.Failed	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Successful su (Solaris 10)	Microsoft.ACS.Solaris.10.Su.Succeeded	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Failed sudo with one or two times try (password) (Solaris 10)	Microsoft.ACS.Solaris.10.Sudo.Conversation.Failure	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Failed sudo (Solaris 10)	Microsoft.ACS.Solaris.10.Sudo.Failed	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Invalid sudo (Solaris 10)	Microsoft.ACS.Solaris.10.Sudo.Invalid	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False
Successful sudo (Solaris 10)	Microsoft.ACS.Solaris.10.Sudo.Succeeded	Microsoft.ACS.Solaris.10.ACSEndPoint	EventCollection	False	False