Overview

Many organizations are subject to regulations that mandate the collection and analysis of specific types of events for the purpose of detecting and responding to suspicious activity. This content pack supports and simplifies your organization's efforts to meet ISO 27002 compliance requirements, offering out-of-the-box configuration of the views and reports you need to ensure compliance.

Content Pack Components

Views
  • ISO 27002 - Abnormal System Shutdown
  • ISO 27002 - Account Lockouts
  • ISO 27002 - Admin User Account Changes
  • ISO 27002 - All Domain Account Logon Events
  • ISO 27002 - All Domain Acct Logon Failures
  • ISO 27002 - All Domain Acct Logon Successes
  • ISO 27002 - All Group Account Changes
  • ISO 27002 - All NT4 Domain Acct Logon Success
  • ISO 27002 - All Policy Changes
  • ISO 27002 - All User Account Changes
  • ISO 27002 - All Windows Events
  • ISO 27002 - Audit Policy Changes
  • ISO 27002 - Domain Admin Account Logon Failure
  • ISO 27002 - Domain Admin Account Logon Success
  • ISO 27002 - Domain Admins-Admin Grp Acct Chg
  • ISO 27002 - Domain Admins-Admin Grp Chg
  • ISO 27002 - Domain Trust Rel Policy Changes
  • ISO 27002 - Event Log Full
  • ISO 27002 - Logon Logoff Summary
  • ISO 27002 - Normal System Startup-Shutdown
  • ISO 27002 - Password Changes and Resets
  • ISO 27002 - Security Log Resets
  • ISO 27002 - Srv Wkst Account Lockouts
  • ISO 27002 - Srv Wkst Admin Acct Logon Failure
  • ISO 27002 - Srv Wkst All Logon Failures
  • ISO 27002 - Srv Wkst All Logon Logoff Events
  • ISO 27002 - Srv Wkst All Logon Logoff Success
  • ISO 27002 - Term Srv All Logon Logoff Success
  • ISO 27002 - Term Srv All Session Discon-Recon
  • ISO 27002 - User Account Creation or Deletion
  • ISO 27002 - User Account Password Changes
  • ISO 27002 - User Rights Policy Changes

Required Products

  • McAfee Enterprise Security Manager (ESM) 10.0.x
  • McAfee Advanced Correlation Engine (ACE) 10.0.x

Download Content Pack

Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.

Read Article

Explore

Find other content packs and partner integrations.

See All

Free Trial

Interested in McAfee Enterprise Security Manager?

Register for Free Trial