ACS (Solaris 10) Modules Management Pack

Microsoft.ACS.Solaris.10 :: 7.7.1124.0 (Management Pack)

This is the management pack to collect auditable syslogs from UNIX/Linux (Solaris 10) computer and write them to Security Event Log.

Summary

The Solaris 5.10 ACS Management Pack provides the means of collecting auditable syslogs from Solaris 5.10 Operating Systems and write them to the Windows Security Event Log.

Management Pack Elements

Classes (1)

 DisplayNameIDBase ClassAbstractHostedSingletonGroupExtensionAccessibility
Microsoft.ACS.Solaris.10.ACSEndPointSolaris 10 ACS EndpointMicrosoft.ACS.Solaris.10.ACSEndPointMicrosoft.ACS.Unix.ACSEndPointFalseTrueFalseFalseFalsePublic

Discoveries (1)

 DisplayNameIDTargetEnabled
Microsoft.ACS.Solaris.10.ACSEndPoint.DiscoveryDiscover Sun 5.10 ACS EndpointMicrosoft.ACS.Solaris.10.ACSEndPoint.DiscoveryMicrosoft.ACS.Unix.ACSEndPointTrue

Rules (10)

 DisplayNameIDTargetCategoryEnabledAlert Generate
Microsoft.ACS.Solaris.10.Console.Login.SucceededSuccessful Console login (Solaris 10)Microsoft.ACS.Solaris.10.Console.Login.SucceededMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Ssh.FailedFailed ssh login (Solaris 10)Microsoft.ACS.Solaris.10.Ssh.FailedMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Ssh.InvalidInvalid ssh login (Solaris 10)Microsoft.ACS.Solaris.10.Ssh.InvalidMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Ssh.SucceededSuccessful ssh login (Solaris 10)Microsoft.ACS.Solaris.10.Ssh.SucceededMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Su.FailedFailed su (Solaris 10)Microsoft.ACS.Solaris.10.Su.FailedMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Su.SucceededSuccessful su (Solaris 10)Microsoft.ACS.Solaris.10.Su.SucceededMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Sudo.Conversation.FailureFailed sudo with one or two times try (password) (Solaris 10)Microsoft.ACS.Solaris.10.Sudo.Conversation.FailureMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Sudo.FailedFailed sudo (Solaris 10)Microsoft.ACS.Solaris.10.Sudo.FailedMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Sudo.InvalidInvalid sudo (Solaris 10)Microsoft.ACS.Solaris.10.Sudo.InvalidMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.10.Sudo.SucceededSuccessful sudo (Solaris 10)Microsoft.ACS.Solaris.10.Sudo.SucceededMicrosoft.ACS.Solaris.10.ACSEndPointEventCollectionFalseFalse