Many organizations are subject to regulations that mandate the collection and analysis of specific types of events for the purpose of detecting and responding to suspicious activity. This content pack supports and simplifies your organization's efforts to meet BASEL II compliance requirements, enabling visibility into your compliance status and ensuring accurate reporting for audits.
Content Pack Components
Views
- BAS - Abnormal System Shutdown
- BAS - Account Lockouts
- BAS - Admin User Account Changes
- BAS - All Domain Account Logon Events
- BAS - All Domain Acct Logon Failures
- BAS - All Domain Acct Logon Successes
- BAS - All Group Account Changes
- BAS - All NT4 Domain Acct Logon Success
- BAS - All Policy Changes
- BAS - All User Account Changes
- BAS - All Windows Events
- BAS - Audit Policy Changes
- BAS - Domain Admin Account Logon Failure
- BAS - Domain Admin Account Logon Success
- BAS - Domain Admins-Admin Grp Acct Chg
- BAS - Domain Admins-Admin Grp Chg
- BAS - Domain Trust Rel Policy Changes
- BAS - Event Log Full
- BAS - Logon Logoff Summary
- BAS - Normal System Startup-Shutdown
- BAS - Password Changes and Resets
- BAS - Security Log Resets
- BAS - Srv Wkst Account Lockouts
- BAS - Srv Wkst Admin Acct Logon Failures
- BAS - Srv Wkst All Logon Failures
- BAS - Srv Wkst All Logon Logoff Events
- BAS - Srv Wkst All Logon Logoff Success
- BAS - Term Srv All Logon Logoff Success
- BAS - Term Srv All Session Discon-Recon
- BAS - User Account Creation or Deletion
- BAS - User Account Password Changes
- BAS - User Rights Policy Changes
Required Products
- McAfee Enterprise Security Manager (ESM) 11.x, 10.x
Content pack demo
Content packs are available directly inside the McAfee Enterprise Security Manager user interface. Watch the video to discover how to access your content pack and get started.
Watch Video
Download Content Pack
Registered ServicePortal users can log in to access the Knowledge Center for further documentation or to download the content pack file manually.
Read Article