Many organizations are subject to regulations that mandate the collection and analysis of specific types of events for detecting and responding to suspicious activity. This content pack supports and simplifies your organization's efforts to meet GIODO compliance requirements, offering out-of-the-box configuration of the views you need to ensure compliance.
Content Pack Components
Views
- GIODO - Abnormal System Shutdown
- GIODO - Account Lockouts
- GIODO - Admin User Account Changes
- GIODO - All Domain Account Logon Events
- GIODO - All Domain Acct Logon Failures
- GIODO - All Domain Acct Logon Successes
- GIODO - All Group Account Changes
- GIODO - All NT4 Domain Acct Logon Success
- GIODO - All Policy Changes
- GIODO - All User Account Changes
- GIODO - All Windows Events
- GIODO - Audit Policy Changes
- GIODO - Domain Admin Account Logon Failure
- GIODO - Domain Admin Account Logon Success
- GIODO - Domain Admins-Admin Group Account Change
- GIODO - Domain Admins-Admin Group Change
- GIODO - Domain Trust Rel Policy Changes
- GIODO - Event Log Full
- GIODO - Logon Logoff Summary
- GIODO - Normal System Startup-Shutdown
- GIODO - Password Changes and Resets
- GIODO - Security Log Resets
- GIODO - Srv Wkst Account Lockouts
- GIODO - Srv Wkst Admin Acct Logon Failure
- GIODO - Srv Wkst All Logon Failures
- GIODO - Srv Wkst All Logon Logoff Events
- GIODO - Srv Wkst All Logon Logoff Success
- GIODO - Term Srv All Logon Logoff Success
- GIODO - Term Srv All Session Discon-Recon
- GIODO - User Account Creation or Deletion
- GIODO - User Account Password Changes
- GIODO - User Rights Policy Changes
Required Products
- McAfee Enterprise Security Manager (ESM) 11.x, 10.x
Content pack demo
Content packs are available directly inside the McAfee Enterprise Security Manager user interface. Watch the video to discover how to access your content pack and get started.
Watch Video
Download Content Pack
Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.
Read Article