Contents x
    Audited commands
    • 3 minutes to read
    • Print
    • Dark
      Light
    • PDF
    Contents

    Audited commands

    • 3 minutes to read
    • Print
    • Dark
      Light
    • PDF
    Article summary

    This document provides information about the Audited commands report screen, which shows the list of commands that have been registered to be audited during a session.

    Paths to access

    1. On senhasegura, in the navigation bar, hover over the Products menu and select PAM Core.
    2. In the side menu, select Management > Sessions > Audited commands.

    or

    1. On senhasegura, in the navigation bar, hover over the Products menu and select User Behavior.
    2. In the side menu, select Management > Audited commands.

    Actions menu

    ItemTypeDescription
    ActionsDropdown menuDisplays the options for registering new commands, Print report, Export CSV and Schedule report.
    New global commandButtonDirects to the Global command screen.
    New command by credentialButtonDirects to the Command by credential screen.
    New command by deviceButtonDirects to the Command by device screen.
    New command by groupButtonDirects to the Command by group screen.

    Search Fields

    ItemTypeDescription
    IDText fieldFilters the audited commands by their identification code within senhasegura.
    NameText fieldFilters the audited commands by the identification name of the command registered within senhasegura.
    CommandText fieldFilters the audited commands by the registered command. Example: passwd
    CriticalityDropdown menuFilters the audited commands by their criticality level. The options are Low, Medium, and High**.** Clear the field to enable the All option.
    TypeDropdown menuFilters the audited commands by their registration rule type. The options are Credential, Device, Global and Group.
    Session typeDropdown menuFilters the audited commands by the type of session that was registered. The options are All, Terminal and Database.
    StatusDropdown menuFilters audited commands by their activation state. The options are Enabled and Disabled. Clear the field to enable the All option.

    Report fields

    • ID.
    • Name.
    • Command.
    • Criticality.
    • Type.
    • Session type.
    • Action during session: the action that happens in the session as a result of executing the command.
    • Occurrences: the number of times the command must be used for the chosen action to occur.
    • Score: the score assigned to the command in the registration that defines its criticality.
    • Status.
    • Actions:
      • Edit: open the Command registration screen by credential, device, group, or global, according to the type specified in the command, to make the desired changes. The Enabled field is only available on the edit screens.
      • View audit history: open the Event log report screen.
    Info

    By default, the report displays 30 records per screen. To go to the next screen, click the forward button at the end of the report.

    Event log screen

    This section provides information about the Event log report screen, which lists the audited commands that were used during a session.

    Search fields

    ItemTypeDescription
    IDText fieldFilters the audited commands by their identification code within senhasegura.
    CommandDropdown menuFilters the audited commands by their name.
    CriticalityDropdown menuFilters the audited commands by their criticality level. The options are Low, Medium, and High. Clear the field to enable the All option.
    Action of sessionDropdown menuFilters the audited commands by the action that occurred when using the command. The options are Allow, Lock, Interrupt, and Force.
    Local userText fieldFilters the audited commands by the name of the user who used the command.
    Audited commandText fieldFilters the audited commands by the registered command. Example: passwd
    Typed commandText fieldFilters the audited commands by the line where they were entered by the user.
    Event dateDate pickerFilters the audited commands by the period they were used.

    Report fields

    • ID.
    • Command.
    • Score.
    • Criticality.
    • Action during session.
    • Local user.
    • Audited command.
    • Typed command.
    • Event date.
    • Executed in: the exact time the command was used.
    Was this article helpful?
    What's Next
    Digital sovereignty is a fundamental right for citizens, institutions, and society. That’s why we work every day.
    Connect With Us
    SENHASEGURA
    LEARN
    EXPLORE
    Copyright © senhasegura. All Rights Reserved