Article |
Compliance aspect |
Reports |
16.3, 13.6 |
Logons |
- Successful User Logons
- Successful User Logoffs
- Unsuccessful User Logons
- Terminal Service Session
|
12, 13, 19.3, 30.4, 30.6, 20.5 |
Object accesses |
- Object Accessed
- Object Created
- Object Modified
- Object Deleted
- Object Handled
|
16.3, 18.1, 19.3, 30.6 |
User accesses |
|
16.3, 18.1, 19.3, 30.6 |
Policy changes |
- User Policy Changes
- Domain Policy Changes
- Audit Policy Changes
|
20.2, 20.3 |
Firewall logons |
- FortiNet Failed Logons
- FortiNet Failed VPN Logons
- SonicWall Failed VPN Logons
- SonicWall Denied Connections
- PaloAlto Failed Logons
- PaloAlto Denied Connections
- Huawei Failed Logons
- Huawei Denied Connection
|
20.2, 20.3, 20.10 |
Firewall attacks |
- FortiNet Possible Attacks
- FortiNet Critical Attacks
- SonicWall Critical Attacks
- SonicWall Website Traffic
- PaloAlto Possible Attacks
- PaloAlto Critical Attacks
- Huawei Possible Attacks
|
20.2, 20.3, 20.10 |
Firewall attacks |
- FortiNet Possible Attacks
- FortiNet Critical Attacks
- SonicWall Critical Attacks
- SonicWall Website Traffic
- PaloAlto Possible Attacks
- PaloAlto Critical Attacks
- Huawei Possible Attacks
|
18.1, 20.1, 20.3 |
Firewall configurations |
- FortiNet Configuration Changes
- FortiNet Commands Failed
|
16.3, 30.6 |
Account logon |
- Successful User Account Validation
- Unsuccessful User Account Validation
|
18.1 |
Account management |
- User Account Changes
- Computer Account Changes
- User Group Changes
|
12, 13, 19.3, 30.4, 30.6, 20.5 |
Microsoft SQL/Oracle DDL changes |
- Microsoft SQL Database Created
- Microsoft SQL Database Deleted
- Microsoft SQL Table Created
- Microsoft SQL Table Dropped
- Microsoft SQL Procedure Created
- Microsoft SQL Procedure Deleted
- Microsoft SQL Schema Dropped
- Microsoft SQL Schema Modified
- Oracle Database Created
- Oracle Database Deleted
- Oracle Table Deleted
- Oracle Table Modified
- Oracle Procedure Created
- Oracle Procedure Deleted
- Oracle Cluster Deleted
- Oracle Cluster Modified
|
12, 13, 19.3, 30.4, 30.6, 20.5 |
Microsoft SQL/Oracle DML changes |
- Microsoft SQL Table Updated
- Microsoft SQL Table Deleted
- Microsoft SQL Execute Command
- Microsoft SQL Receive Command
- Microsoft SQL Schema Updated
- Microsoft SQL Schema Deleted
- Oracle Table Inserted
- Oracle Table Deleted
- Oracle Procedure Altered
- Oracle Trigger Created
- Oracle Trigger Deleted
|
12, 13, 19.3, 30.4, 30.6, 20.5 |
Microsoft SQL/Oracle security changes |
- Privilege Abuse
- Unauthorized Copy
- Account Lockouts
- SQL Injection
- Denial of Service
- Oracle SQL Injection
- Oracle Failed Logons
- Oracle Account Lockouts
- Oracle Denial of Service
|
12, 13, 19.3, 30.4, 30.6, 20.5 |
Printer reports |
- Printer Documents Printed
- Printer Documents Deleted
- Printer Paused Documents
- Printer Corrupted Documents
- Printer Insufficient Privilege to Print
|