ACS (Solaris 11) Modules Management Pack

Microsoft.ACS.Solaris.11 :: 7.6.1064.0 (Management Pack)

This is the management pack to collect auditable syslogs from UNIX/Linux (Solaris 11) computer and write them to Security Event Log.

Summary

The Solaris 5.11 ACS Management Pack provides the means of collecting auditable syslogs from Solaris 5.11 Operating Systems and write them to the Windows Security Event Log.

Management Pack Elements

Classes (1)

 DisplayNameIDBase ClassAbstractHostedSingletonGroupExtensionAccessibility
Microsoft.ACS.Solaris.11.ACSEndPointSolaris 11 ACS EndpointMicrosoft.ACS.Solaris.11.ACSEndPointMicrosoft.ACS.Unix.ACSEndPointFalseTrueFalseFalseFalsePublic

Discoveries (1)

 DisplayNameIDTargetEnabled
Microsoft.ACS.Solaris.11.ACSEndPoint.DiscoveryDiscover Sun 5.11 ACS EndpointMicrosoft.ACS.Solaris.11.ACSEndPoint.DiscoveryMicrosoft.ACS.Unix.ACSEndPointTrue

Rules (10)

 DisplayNameIDTargetCategoryEnabledAlert Generate
Microsoft.ACS.Solaris.11.Console.Login.SucceededSuccessful Console login (Solaris 11)Microsoft.ACS.Solaris.11.Console.Login.SucceededMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Ssh.FailedFailed ssh login (Solaris 11)Microsoft.ACS.Solaris.11.Ssh.FailedMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Ssh.InvalidInvalid ssh login (Solaris 11)Microsoft.ACS.Solaris.11.Ssh.InvalidMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Ssh.SucceededSuccessful ssh login (Solaris 11)Microsoft.ACS.Solaris.11.Ssh.SucceededMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Su.FailedFailed su (Solaris 11)Microsoft.ACS.Solaris.11.Su.FailedMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Su.SucceededSuccessful su (Solaris 11)Microsoft.ACS.Solaris.11.Su.SucceededMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Sudo.Conversation.FailureFailed sudo with one or two times try (password) (Solaris 11)Microsoft.ACS.Solaris.11.Sudo.Conversation.FailureMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Sudo.FailedFailed sudo (Solaris 11)Microsoft.ACS.Solaris.11.Sudo.FailedMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Sudo.InvalidInvalid sudo (Solaris 11)Microsoft.ACS.Solaris.11.Sudo.InvalidMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse
Microsoft.ACS.Solaris.11.Sudo.SucceededSuccessful sudo (Solaris 11)Microsoft.ACS.Solaris.11.Sudo.SucceededMicrosoft.ACS.Solaris.11.ACSEndPointEventCollectionFalseFalse