Daily Security Audit (HR dept.)

 

DescriptionDaily security audit
Creation date2008-10-02 03:00:00
Period2008-10-01 00:00:00 - 2008-10-01 23:59:59

 

Stats conditionObject access per host (graph)
DescriptionServer x Object x User(count)
HostObject AccessedUser (count)
Count
File Server 1C:\SmartOn Client\pass\nSop.dll0
\BalanceSheet-sample.txt2
\\FILESERVER1\BalanceSheet.doc11
\\FILESERVER1\ClientDb.xls12
Client PC1C:\SmartOn Client\pass\nSop.dll3
\BalanceSheet-sample.txt0
\\FILESERVER1\BalanceSheet.doc0
\\FILESERVER1\ClientDb.xls5

 

Image: stats-graph03_600x400.png

 

Stats conditionObject access per application
DescriptionApplication x Server x Object x User
ApplicationServerObjectUser
a.satot.tanaka
VISUACTClient PC1C:\SmartOn Client\pass\nSop.dll00
\BalanceSheet-sample.txt00
\\FILESERVER1\BalanceSheet.doc00
\\FILESERVER1\ClientDb.xls23
File Server 1C:\SmartOn Client\pass\nSop.dll00
\BalanceSheet-sample.txt11
\\FILESERVER1\BalanceSheet.doc47
\\FILESERVER1\ClientDb.xls48
SmartOnClient PC1C:\SmartOn Client\pass\nSop.dll30
\BalanceSheet-sample.txt00
\\FILESERVER1\BalanceSheet.doc00
\\FILESERVER1\ClientDb.xls00
File Server 1C:\SmartOn Client\pass\nSop.dll00
\BalanceSheet-sample.txt00
\\FILESERVER1\BalanceSheet.doc00
\\FILESERVER1\ClientDb.xls00

 

Sensor policyPotential security breach detection
DescriptionCapturing potential illegal access to sensitive data (3 or more failed connections within 1 minute on predefined ports)
Entries3
Sensor policyTimestampLog message
Potential security breach detection2008-10-01 02:13:002008-10-01 02:13:00 192.168.7.101 (security.alert) Illegal access on port 139
Potential security breach detection2008-10-01 02:13:172008-10-01 02:13:17 192.168.7.101 (security.alert) Illegal access on port 139
Potential security breach detection2008-10-01 02:13:452008-10-01 02:13:45 192.168.7.101 (security.alert) Illegal access on port 139