| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Logon com Êxito no Console (Solaris 11) | Microsoft.ACS.Solaris.11.Console.Login.Succeeded | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Logon ssh com Falha (Solaris 11) | Microsoft.ACS.Solaris.11.Ssh.Failed | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Logon ssh Inválido (Solaris 11) | Microsoft.ACS.Solaris.11.Ssh.Invalid | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Logon ssh com Êxito (Solaris 11) | Microsoft.ACS.Solaris.11.Ssh.Succeeded | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Su com Falha (Solaris 11) | Microsoft.ACS.Solaris.11.Su.Failed | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Su com Êxito (Solaris 11) | Microsoft.ACS.Solaris.11.Su.Succeeded | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Sudo com falha e uma ou duas tentativas (senha) (Solaris 11) | Microsoft.ACS.Solaris.11.Sudo.Conversation.Failure | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Sudo com Falha (Solaris 11) | Microsoft.ACS.Solaris.11.Sudo.Failed | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Sudo Inválido (Solaris 11) | Microsoft.ACS.Solaris.11.Sudo.Invalid | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |
| Sudo com Êxito (Solaris 11) | Microsoft.ACS.Solaris.11.Sudo.Succeeded | Microsoft.ACS.Solaris.11.ACSEndPoint | EventCollection | False | False |