GPG13 reports and corresponding controls
The following section lists the GPG13 reports and the corresponding controls.
| Sr. no | Report Name | Compliance Mapping |
|---|---|---|
| 1 | GPG13: Accepted VPN Connections - RADIUS | PMC2, PMC3, PMC6 |
| 2 | GPG13: Account Activities on UNIX Servers | PMC4, PMC7, PMC9 |
| 3 | GPG13: Account Activities on Windows Servers | PMC4, PMC7, PMC9 |
| 4 | GPG13: Accounts Changed on NetApp Filer | PMC5 |
| 5 | GPG13: Accounts Changed on UNIX Servers | PMC7 |
| 6 | GPG13: Accounts Changed on Windows Servers | PMC7 |
| 7 | GPG13: Accounts Created on NetApp Filer | PMC5 |
| 8 | GPG13: Accounts Created on NetApp Filer Audit | PMC5 |
| 9 | GPG13: Accounts Created on Sidewinder | PMC3, PMC5 |
| 10 | GPG13: Accounts Created on Symantec Endpoint Protection | PMC3, PMC5 |
| 11 | GPG13: Accounts Created on UNIX Servers | PMC7 |
| 12 | GPG13: Accounts Created on Windows Servers | PMC7 |
| 13 | GPG13: Accounts Deleted on NetApp Filer | PMC5 |
| 14 | GPG13: Accounts Deleted on NetApp Filer Audit | PMC5 |
| 15 | GPG13: Accounts Deleted on Sidewinder | PMC3, PMC5 |
| 16 | GPG13: Accounts Deleted on Symantec Endpoint Protection | PMC3, PMC5 |
| 17 | GPG13: Accounts Deleted on UNIX Servers | PMC7 |
| 18 | GPG13: Accounts Deleted on Windows Servers | PMC7 |
| 19 | GPG13: Active Connections for Cisco ASA | PMC3, PMC5, PMC6 |
| 20 | GPG13: Active Connections for Cisco FWSM | PMC3, PMC5, PMC6 |
| 21 | GPG13: Active Connections for Cisco PIX | PMC3, PMC5, PMC6 |
| 22 | GPG13: Active Directory System Changes | PMC4 |
| 23 | GPG13: Active VPN Connections for Cisco VPN Concentrators | PMC3, PMC6 |
| 24 | GPG13: Active VPN Connections for Nortel Contivity | PMC3, PMC6 |
| 25 | GPG13: Active VPN Connections for RADIUS | PMC3, PMC6 |
| 26 | GPG13: Administrator Logins on Windows Servers | PMC7, PMC9 |
| 27 | GPG13: Allowed URLs by Source IPs | PMC2 |
| 28 | GPG13: Allowed URLs by Source IPs - F5 BIG-IP TMOS | PMC2 |
| 29 | GPG13: Allowed URLs by Source IPs - Microsoft IIS | PMC2 |
| 30 | GPG13: Allowed URLs by Source Users | PMC2 |
| 31 | GPG13: Allowed URLs by Source Users - F5 BIG-IP TMOS | PMC2 |
| 32 | GPG13: Allowed URLs by Source Users - Microsoft IIS | PMC2 |
| 33 | GPG13: Applications Under Attack | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 34 | GPG13: Applications Under Attack - Cisco IOS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 35 | GPG13: Applications Under Attack - FireEye MPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 36 | GPG13: Applications Under Attack - ISS SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 37 | GPG13: Applications Under Attack - SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 38 | GPG13: Applications Under Attack - Sourcefire Defense Center | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 39 | GPG13: Attackers by Service | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 40 | GPG13: Attackers by Service - Cisco IOS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 41 | GPG13: Attackers by Service - FireEye MPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 42 | GPG13: Attackers by Service - ISS SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 43 | GPG13: Attackers by Service - SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 44 | GPG13: Attackers by Service - Sourcefire Defense Center | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 45 | GPG13: Attackers by Signature | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 46 | GPG13: Attackers by Signature - Cisco IOS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 47 | GPG13: Attackers by Signature - FireEye MPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 48 | GPG13: Attackers by Signature - ISS SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 49 | GPG13: Attackers by Signature - SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 50 | GPG13: Attackers by Signature - Sourcefire Defense Center | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 51 | GPG13: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 52 | GPG13: Attacks Detected - Cisco IOS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 53 | GPG13: Attacks Detected - HIPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 54 | GPG13: Attacks Detected - ISS SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 55 | GPG13: Attacks Detected - SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 56 | GPG13: Attacks Detected - Sourcefire Defense Center | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 57 | GPG13: Bandwidth Usage by User | PMC2 |
| 58 | GPG13: Blocked URLs by Source IPs | PMC2 |
| 59 | GPG13: Blocked URLs by Source IPs - F5 BIG-IP TMOS | PMC2 |
| 60 | GPG13: Blocked URLs by Source IPs - Microsoft IIS | PMC2 |
| 61 | GPG13: Blocked URLs by Source Users | PMC2 |
| 62 | GPG13: Blocked URLs by Source Users - F5 BIG-IP TMOS | PMC2 |
| 63 | GPG13: Blocked URLs by Source Users - Microsoft IIS | PMC2 |
| 64 | GPG13: Check Point Configuration Changes | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 65 | GPG13: Check Point Management Station Login | PMC3, PMC5 |
| 66 | GPG13: Check Point Objects Created | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 67 | GPG13: Check Point Objects Deleted | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 68 | GPG13: Check Point Objects Modified | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 69 | GPG13: Check Point SIC Revoked | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 70 | GPG13: Cisco ESA: Attacks by Event ID | PMC3, PMC4, PMC5, PMC6 |
| 71 | GPG13: Cisco ESA: Attacks by Threat Name | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 72 | GPG13: Cisco ESA: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 73 | GPG13: Cisco ESA: Scans | PMC3, PMC4, PMC5, PMC6 |
| 74 | GPG13: Cisco ESA: Updated | PMC3, PMC4, PMC5, PMC6 |
| 75 | GPG13: Cisco ISE, ACS Accounts Created | PMC3, PMC4, PMC5, PMC6 |
| 76 | GPG13: Cisco ISE, ACS Accounts Removed | PMC3, PMC4, PMC5, PMC6 |
| 77 | GPG13: Cisco ISE, ACS Configuration Changes | PMC3, PMC4, PMC5, PMC6 |
| 78 | GPG13: Cisco ISE, ACS Password Changes | PMC3, PMC5, PMC6 |
| 79 | GPG13: Cisco Line Protocol Status Changes | PMC3, PMC4, PMC6 |
| 80 | GPG13: Cisco Link Status Changes | PMC3, PMC4, PMC6, PMC9 |
| 81 | GPG13: Cisco Peer Reset/Reload | PMC3, PMC4, PMC6 |
| 82 | GPG13: Cisco Peer Supervisor Status Changes | PMC3, PMC4, PMC6 |
| 83 | GPG13: Cisco PIX, ASA, FWSM Failover Disabled | PMC3, PMC4, PMC5, PMC6 |
| 84 | GPG13: Cisco PIX, ASA, FWSM Failover Performed | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 85 | GPG13: Cisco PIX, ASA, FWSM Policy Changed | PMC3, PMC4, PMC5, PMC6 |
| 86 | GPG13: Cisco Routers and Switches Restart | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 87 | GPG13: Cisco Switch Policy Changes | PMC3, PMC4, PMC5, PMC6 |
| 88 | GPG13: Creation and Deletion of System Level Objects: AIX Audit | PMC4, PMC5, PMC7 |
| 89 | GPG13: Creation and Deletion of System Level Objects: DB2 Database | PMC4, PMC5, PMC7 |
| 90 | GPG13: Creation and Deletion of System Level Objects: HP-UX Audit | PMC4, PMC5, PMC7 |
| 91 | GPG13: Creation and Deletion of System Level Objects: Oracle | PMC4, PMC5, PMC7 |
| 92 | GPG13: Creation and Deletion of System Level Objects: Solaris BSM | PMC4, PMC5, PMC7 |
| 93 | GPG13: Creation and Deletion of System Level Objects: SQL Server | PMC4, PMC5, PMC7 |
| 94 | GPG13: Creation and Deletion of System Level Objects: Windows | PMC4, PMC7 |
| 95 | GPG13: DB2 Database Backup Failed | PMC4, PMC7, PMC8 |
| 96 | GPG13: DB2 Database Configuration Changes | PMC4, PMC5, PMC7 |
| 97 | GPG13: DB2 Database Failed Logins | PMC5, PMC7 |
| 98 | GPG13: DB2 Database Restore Failed | PMC4, PMC5, PMC7, PMC8 |
| 99 | GPG13: DB2 Database Stop and Start Events | PMC4, PMC5, PMC7 |
| 100 | GPG13: DB2 Database Successful Logins | PMC5, PMC7 |
| 101 | GPG13: DB2 Database User Additions and Deletions | PMC5, PMC7 |
| 102 | GPG13: Decru DataFort Cryptographic Key Events | PMC5, PMC7 |
| 103 | GPG13: Decru DataFort Zeroization Events | PMC2, PMC3, PMC5, PMC7 |
| 104 | GPG13: Denied Connections - Cisco IOS | PMC2, PMC3, PMC5, PMC6 |
| 105 | GPG13: Denied Connections - Cisco NXOS | PMC2, PMC3, PMC5, PMC6 |
| 106 | GPG13: Denied Connections - Cisco Router | PMC2, PMC3, PMC5, PMC6 |
| 107 | GPG13: Denied Connections - F5 BIG-IP TMOS | PMC2, PMC3, PMC5, PMC6 |
| 108 | GPG13: Denied Connections - Sidewinder | PMC2, PMC3, PMC6 |
| 109 | GPG13: Denied Connections - VMware vShield | PMC2, PMC3, PMC6 |
| 110 | GPG13: Denied Connections by IP Addresses - Check Point | PMC2, PMC3, PMC5, PMC6 |
| 111 | GPG13: Denied Connections by IP Addresses - Cisco ASA | PMC2, PMC3, PMC5, PMC6 |
| 112 | GPG13: Denied Connections by IP Addresses - Cisco FWSM | PMC2, PMC3, PMC5, PMC6 |
| 113 | GPG13: Denied Connections by IP Addresses - Cisco PIX | PMC2, PMC3, PMC5, PMC6 |
| 114 | GPG13: Denied Connections by IP Addresses - Nortel | PMC2, PMC3, PMC6 |
| 115 | GPG13: Denied Inbound Connections - Check Point | PMC2, PMC3, PMC5, PMC6 |
| 116 | GPG13: Denied Inbound Connections - Cisco ASA | PMC2, PMC3, PMC5, PMC6 |
| 117 | GPG13: Denied Inbound Connections - Cisco FWSM | PMC2, PMC3, PMC5, PMC6 |
| 118 | GPG13: Denied Inbound Connections - Cisco PIX | PMC2, PMC3, PMC5, PMC6 |
| 119 | GPG13: Denied Inbound Connections - Juniper Firewall | PMC2, PMC3, PMC5, PMC6 |
| 120 | GPG13: Denied Outbound Connections - Check Point | PMC2, PMC3, PMC5 |
| 121 | GPG13: Denied Outbound Connections - Cisco ASA | PMC2, PMC3, PMC5 |
| 122 | GPG13: Denied Outbound Connections - Cisco FWSM | PMC2, PMC3, PMC5 |
| 123 | GPG13: Denied Outbound Connections - Cisco PIX | PMC2, PMC3, PMC5 |
| 124 | GPG13: Denied Outbound Connections - Juniper Firewall | PMC2, PMC3, PMC5 |
| 125 | GPG13: Denied VPN Connections - RADIUS | PMC2, PMC3, PMC6 |
| 126 | GPG13: DHCP Granted/Renewed Activities on Microsoft DHCP | PMC4, PMC6 |
| 127 | GPG13: DHCP Granted/Renewed Activities on VMware vShield | PMC4, PMC6 |
| 128 | GPG13: DNS Server Error | PMC4 |
| 129 | GPG13: Domain activities on Symantec Endpoint Protection | PMC4, PMC5 |
| 130 | GPG13: Escalated Privilege Activities on Servers | PMC4, PMC7 |
| 131 | GPG13: ESX Accounts Activities | PMC4 |
| 132 | GPG13: ESX Accounts Created | PMC4 |
| 133 | GPG13: ESX Accounts Deleted | PMC4 |
| 134 | GPG13: ESX Failed Logins | PMC4 |
| 135 | GPG13: ESX Group Activities | PMC4 |
| 136 | GPG13: ESX Kernel log daemon terminating | PMC4, PMC9 |
| 137 | GPG13: ESX Kernel logging Stop | PMC4 |
| 138 | GPG13: ESX Syslogd Restart | PMC4 |
| 139 | GPG13: F5 BIG-IP TMOS Login Failed | PMC3, PMC5 |
| 140 | GPG13: F5 BIG-IP TMOS Login Successful | PMC3, PMC5 |
| 141 | GPG13: F5 BIG-IP TMOS Password Changes | PMC3, PMC5 |
| 142 | GPG13: F5 BIG-IP TMOS Ports Denied Access | PMC3, PMC5, PMC6 |
| 143 | GPG13: F5 BIG-IP TMOS Restarted | PMC3, PMC4, PMC5, PMC9 |
| 144 | GPG13: Failed Logins | PMC5, PMC6, PMC7 |
| 145 | GPG13: Failed Windows Events Summary | PMC4 |
| 146 | GPG13: Files Accessed on NetApp Filer Audit | PMC4, PMC5 |
| 147 | GPG13: Files Accessed on Servers | PMC4, PMC5 |
| 148 | GPG13: Files Accessed through Juniper SSL VPN (Secure Access) | PMC2, PMC3, PMC4, PMC6 |
| 149 | GPG13: Files Accessed through PANOS | PMC2, PMC3, PMC4, PMC5, PMC6 |
| 150 | GPG13: Files Accessed Through Pulse Connect Secure | PMC2, PMC3, PMC4, PMC6 |
| 151 | GPG13: Files Downloaded via Proxy | PMC2, PMC4 |
| 152 | GPG13: Files Downloaded via Proxy - Blue Coat | PMC2, PMC4 |
| 153 | GPG13: Files Downloaded via Proxy - Cisco WSA | PMC2, PMC4 |
| 154 | GPG13: Files Downloaded via Proxy - Microsoft IIS | PMC2, PMC4 |
| 155 | GPG13: Files Downloaded via the Web | PMC2, PMC4 |
| 156 | GPG13: Files Downloaded via the Web - F5 BIG-IP TMOS | PMC2, PMC4 |
| 157 | GPG13: Files Downloaded via the Web - Microsoft IIS | PMC2, PMC4 |
| 158 | GPG13: Files Uploaded via Proxy | PMC2, PMC4 |
| 159 | GPG13: Files Uploaded via Proxy - Blue Coat | PMC2, PMC4 |
| 160 | GPG13: Files Uploaded via Proxy - Cisco WSA | PMC2, PMC4 |
| 161 | GPG13: Files Uploaded via Proxy - Microsoft IIS | PMC2, PMC4 |
| 162 | GPG13: Files Uploaded via the Web | PMC2, PMC4 |
| 163 | GPG13: Files Uploaded via the Web - F5 BIG-IP TMOS | PMC2, PMC4 |
| 164 | GPG13: Files Uploaded via the Web - Microsoft IIS | PMC2, PMC4 |
| 165 | GPG13: FireEye MPS: Attacks by Event ID | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 166 | GPG13: FireEye MPS: Attacks by Threat Name | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 167 | GPG13: FireEye MPS: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 168 | GPG13: FortiOS DLP Attacks Detected | PMC4, PMC5, PMC6, PMC9 |
| 169 | GPG13: FortiOS: Attacks by Event ID | PMC4, PMC5, PMC6, PMC9 |
| 170 | GPG13: FortiOS: Attacks by Threat Name | PMC4, PMC5, PMC6, PMC9 |
| 171 | GPG13: FortiOS: Attacks Detected | PMC4, PMC5, PMC6, PMC9 |
| 172 | GPG13: Group Activities on NetApp Filer Audit | PMC4, PMC5 |
| 173 | GPG13: Group Activities on Symantec Endpoint Protection | PMC4, PMC5, PMC6 |
| 174 | GPG13: Group Activities on UNIX Servers | PMC7 |
| 175 | GPG13: Group Activities on Windows Servers | PMC7 |
| 176 | GPG13: Groups Created on UNIX Servers | PMC7 |
| 177 | GPG13: Groups Created on Windows Servers | PMC7 |
| 178 | GPG13: Groups Deleted on UNIX Servers | PMC7 |
| 179 | GPG13: Groups Deleted on Windows Servers | PMC7 |
| 180 | GPG13: Guardium SQL Guard Audit Configuration Changes | PMC4, PMC5, PMC7 |
| 181 | GPG13: Guardium SQL Guard Audit Data Access | PMC4, PMC5, PMC7 |
| 182 | GPG13: Guardium SQL Guard Audit Logins | PMC5, PMC7 |
| 183 | GPG13: Guardium SQL Guard Audit Startup or Shutdown | PMC5, PMC7, PMC9 |
| 184 | GPG13: Guardium SQL Guard Configuration Changes | PMC4, PMC5, PMC7 |
| 185 | GPG13: Guardium SQL Guard Data Access | PMC4, PMC5, PMC7 |
| 186 | GPG13: Guardium SQL Guard Logins | PMC5, PMC7 |
| 187 | GPG13: Guardium SQL Guard Startup or Shutdown | PMC5, PMC7, PMC9 |
| 188 | GPG13: HP NonStop Audit Configuration Changes | PMC4, PMC5, PMC7 |
| 189 | GPG13: HP NonStop Audit Login Failed | PMC5, PMC7 |
| 190 | GPG13: HP NonStop Audit Login Successful | PMC5, PMC7 |
| 191 | GPG13: HP NonStop Audit Object Access | PMC4, PMC5, PMC7 |
| 192 | GPG13: HP NonStop Audit Object Changes | PMC4, PMC5, PMC7 |
| 193 | GPG13: HP NonStop Audit Permissions Changed | PMC4, PMC5, PMC7 |
| 194 | GPG13: i5/OS Access Control List Modifications | PMC4, PMC5, PMC7 |
| 195 | GPG13: i5/OS Audit Configuration Changes | PMC4, PMC5, PMC7 |
| 196 | GPG13: i5/OS Internet Security Management Events | PMC4, PMC5, PMC9 |
| 197 | GPG13: i5/OS Key Ring File Events | PMC7 |
| 198 | GPG13: i5/OS Network Authentication Events | PMC5, PMC6, PMC7 |
| 199 | GPG13: i5/OS Object Access | PMC4, PMC5, PMC7 |
| 200 | GPG13: i5/OS Object Creation and Deletion | PMC7 |
| 201 | GPG13: i5/OS Restore Events | PMC8 |
| 202 | GPG13: i5/OS Server Security User Information Actions | PMC4, PMC5, PMC7 |
| 203 | GPG13: i5/OS System Management Changes | PMC4, PMC5 |
| 204 | GPG13: i5/OS User Profile Creation, Modification, or Restoration | PMC5, PMC7, PMC8 |
| 205 | GPG13: Juniper Firewall Escalated Privilege | PMC3, PMC5, PMC6 |
| 206 | GPG13: Juniper Firewall Policy Changed | PMC3, PMC4, PMC5, PMC6 |
| 207 | GPG13: Juniper Firewall Reset Accepted | PMC3, PMC5, PMC6 |
| 208 | GPG13: Juniper Firewall Reset Imminent | PMC3, PMC5, PMC6 |
| 209 | GPG13: Juniper Firewall Restarted | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 210 | GPG13: Juniper Firewall VPN Tunnel Status Change | PMC3, PMC4, PMC5, PMC6 |
| 211 | GPG13: Juniper SSL VPN (Secure Access) Policy Changed | PMC3, PMC4, PMC6 |
| 212 | GPG13: Juniper SSL VPN (Secure Access) Successful Logins | PMC3, PMC6 |
| 213 | GPG13: Juniper SSL VPN Successful Logins | PMC3, PMC6 |
| 214 | GPG13: Last Activities Performed by Administrators | PMC4, PMC5, PMC7 |
| 215 | GPG13: Last Activities Performed by All Users | PMC4, PMC5, PMC7 |
| 216 | GPG13: Logins by Authentication Type | PMC5, PMC7 |
| 217 | GPG13: LogLogic DSM Configuration Changes | PMC4, PMC5, PMC10 |
| 218 | GPG13: LogLogic DSM Data Access | PMC5, PMC10 |
| 219 | GPG13: LogLogic DSM Logins | PMC5 |
| 220 | GPG13: LogLogic DSM Startup or Shutdown | PMC5 |
| 221 | GPG13: LogLogic File Retrieval Errors | PMC4, PMC5, PMC10 |
| 222 | GPG13: LogLogic Management Center Account Activities | PMC5 |
| 223 | GPG13: LogLogic Management Center Backup Activities | PMC5 |
| 224 | GPG13: LogLogic Management Center Login | PMC5 |
| 225 | GPG13: LogLogic Management Center Restore Activities | PMC4, PMC5 |
| 226 | GPG13: LogLogic Message Routing Errors | PMC4, PMC5, PMC10 |
| 227 | GPG13: LogLogic Universal Collector Configuration Changes | PMC4, PMC5, PMC10 |
| 228 | GPG13: McAfee AntiVirus: Attacks by Event ID | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 229 | GPG13: McAfee AntiVirus: Attacks by Threat Name | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 230 | GPG13: McAfee AntiVirus: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 231 | GPG13: Microsoft Operations Manager - Failed Windows Events | PMC4, PMC5, PMC7, PMC8 |
| 232 | GPG13: Microsoft Operations Manager - Windows Accounts Activities | PMC4, PMC5, PMC7 |
| 233 | GPG13: Microsoft Operations Manager - Windows Accounts Changed | PMC5, PMC7 |
| 234 | GPG13: Microsoft Operations Manager - Windows Accounts Created | PMC5, PMC7 |
| 235 | GPG13: Microsoft Operations Manager - Windows Accounts Enabled | PMC5, PMC7 |
| 236 | GPG13: Microsoft Operations Manager - Windows Events by Users | PMC5, PMC7 |
| 237 | GPG13: Microsoft Operations Manager - Windows Events Summary | PMC5, PMC7 |
| 238 | GPG13: Microsoft Operations Manager - Windows Password Changes | PMC5, PMC7 |
| 239 | GPG13: Microsoft Operations Manager - Windows Permissions Modified | PMC5, PMC7 |
| 240 | GPG13: Microsoft Operations Manager - Windows Policies Modified | PMC5, PMC7 |
| 241 | GPG13: Microsoft Operations Manager - Windows Servers Restarted | PMC4, PMC5, PMC9 |
| 242 | GPG13: Microsoft Sharepoint Content Deleted | PMC4, PMC5 |
| 243 | GPG13: Microsoft Sharepoint Content Updates | PMC4, PMC5 |
| 244 | GPG13: Microsoft Sharepoint Permissions Changed | PMC4, PMC5, PMC7 |
| 245 | GPG13: Microsoft Sharepoint Policy Add, Remove, or Modify | PMC4, PMC5, PMC7 |
| 246 | GPG13: Microsoft SQL Server Backup Failed | PMC4, PMC5, PMC7, PMC8 |
| 247 | GPG13: Microsoft SQL Server Configuration Changes | PMC4, PMC5, PMC7 |
| 248 | GPG13: Microsoft SQL Server Data Access | PMC5, PMC7 |
| 249 | GPG13: Microsoft SQL Server Database Failed Logins | PMC5, PMC7 |
| 250 | GPG13: Microsoft SQL Server Database Permission Events | PMC5, PMC7 |
| 251 | GPG13: Microsoft SQL Server Database Successful Logins | PMC5, PMC7 |
| 252 | GPG13: Microsoft SQL Server Database User Additions and Deletions | PMC5, PMC7 |
| 253 | GPG13: Microsoft SQL Server Password Changes | PMC5, PMC7 |
| 254 | GPG13: Microsoft SQL Server Restore Failed | PMC4, PMC5, PMC7, PMC8 |
| 255 | GPG13: Microsoft SQL Server Schema Corruption | PMC4, PMC5, PMC7, PMC9 |
| 256 | GPG13: Microsoft SQL Server Shutdown by Reason | PMC5, PMC7 |
| 257 | GPG13: Most Active Email Senders - Exchange 2000/2003 | PMC5 |
| 258 | GPG13: Most Active Ports Through Firewall - Check Point | PMC3, PMC5 |
| 259 | GPG13: Most Active Ports Through Firewall - Cisco ASA | PMC3, PMC5 |
| 260 | GPG13: Most Active Ports Through Firewall - Cisco FWSM | PMC3, PMC5 |
| 261 | GPG13: Most Active Ports Through Firewall - Cisco PIX | PMC3, PMC5 |
| 262 | GPG13: Most Active Ports Through Firewall - Fortinet | PMC3, PMC5 |
| 263 | GPG13: Most Active Ports Through Firewall - Juniper Firewall | PMC3, PMC5 |
| 264 | GPG13: Most Active Ports Through Firewall - Nortel | PMC3, PMC5 |
| 265 | GPG13: NetApp Filer Audit Accounts Enabled | PMC5 |
| 266 | GPG13: NetApp Filer Audit Group Members Added | PMC5 |
| 267 | GPG13: NetApp Filer Audit Group Members Deleted | PMC5 |
| 268 | GPG13: NetApp Filer Audit Login Failed | PMC5 |
| 269 | GPG13: NetApp Filer Audit Login Successful | PMC5 |
| 270 | GPG13: NetApp Filer Audit Logs Cleared | PMC5 |
| 271 | GPG13: NetApp Filer Audit Policies Modified | PMC4, PMC5 |
| 272 | GPG13: NetApp Filer File Activity | PMC5 |
| 273 | GPG13: NetApp Filer Login Failed | PMC5 |
| 274 | GPG13: NetApp Filer Login Successful | PMC5 |
| 275 | GPG13: NetApp Filer Password Changes | PMC5 |
| 276 | GPG13: NetApp Filer Snapshot Error | PMC4, PMC5, PMC8 |
| 277 | GPG13: Network Traffic per Rule - Check Point | PMC2, PMC3, PMC5 |
| 278 | GPG13: Network Traffic per Rule - Juniper Firewall | PMC2, PMC3, PMC5 |
| 279 | GPG13: Network Traffic per Rule - Nortel | PMC2, PMC3, PMC5 |
| 280 | GPG13: Oracle Database Configuration Changes | PMC2 PMC3 PMC4 PMC5 PMC7 |
| 281 | GPG13: Oracle Database Data Access | PMC5, PMC7 |
| 282 | GPG13: Oracle Database Failed Logins | PMC5, PMC7 |
| 283 | GPG13: Oracle Database Permission Events | PMC5, PMC7 |
| 284 | GPG13: Oracle Database Shutdown | PMC5, PMC7, PMC9 |
| 285 | GPG13: Oracle Database Successful Logins | PMC5, PMC7 |
| 286 | GPG13: Oracle Database User Additions and Deletions | PMC5, PMC7 |
| 287 | GPG13: PANOS: Attacks by Event ID | PMC3, PMC4, PMC5, PMC6 |
| 288 | GPG13: PANOS: Attacks by Threat Name | PMC3, PMC4, PMC5, PMC6 |
| 289 | GPG13: PANOS: Attacks Detected | PMC3, PMC4, PMC5, PMC6 |
| 290 | GPG13: Password Changes on Windows Servers | PMC7 |
| 291 | GPG13: Peer Servers and Status | PMC2, PMC4 |
| 292 | GPG13: Peer Servers and Status - Blue Coat | PMC2, PMC4 |
| 293 | GPG13: Peer Servers and Status - Cisco WSA | PMC2, PMC4 |
| 294 | GPG13: Peer Servers and Status - Microsoft IIS | PMC2, PMC4 |
| 295 | GPG13: Periodic Review of Log Reports | PMC4, PMC5, PMC7 |
| 296 | GPG13: Periodic Review of User Access Logs | PMC4, PMC5, PMC7 |
| 297 | GPG13: Permissions Modified on Windows Servers | PMC4, PMC5, PMC7 |
| 298 | GPG13: Policies Modified on Windows Servers | PMC4, PMC5, PMC7 |
| 299 | GPG13: Ports Allowed Access - Check Point | PMC2, PMC3, PMC5 |
| 300 | GPG13: Ports Allowed Access - Cisco ASA | PMC2, PMC3, PMC5 |
| 301 | GPG13: Ports Allowed Access - Cisco FWSM | PMC2, PMC3, PMC5 |
| 302 | GPG13: Ports Allowed Access - Cisco IOS | PMC2, PMC3, PMC5 |
| 303 | GPG13: Ports Allowed Access - Cisco Netflow | PMC2, PMC3, PMC5 |
| 304 | GPG13: Ports Allowed Access - Cisco PIX | PMC2, PMC3, PMC5 |
| 305 | GPG13: Ports Allowed Access - F5 BIG-IP TMOS | PMC2, PMC3, PMC5 |
| 306 | GPG13: Ports Allowed Access - Fortinet | PMC2, PMC3, PMC5 |
| 307 | GPG13: Ports Allowed Access - Juniper Firewall | PMC2, PMC3, PMC5 |
| 308 | GPG13: Ports Allowed Access - Juniper JunOS | PMC2, PMC3, PMC5 |
| 309 | GPG13: Ports Allowed Access - Juniper RT Flow | PMC2, PMC3, PMC5 |
| 310 | GPG13: Ports Allowed Access - Nortel | PMC2, PMC3, PMC5 |
| 311 | GPG13: Ports Allowed Access - PANOS | PMC2, PMC3, PMC5 |
| 312 | GPG13: Ports Allowed Access - Sidewinder | PMC2, PMC3, PMC5 |
| 313 | GPG13: Ports Allowed Access - VMware vShield | PMC2, PMC3, PMC5 |
| 314 | GPG13: Ports Denied Access - Check Point | PMC2, PMC3, PMC5, PMC6 |
| 315 | GPG13: Ports Denied Access - Cisco ASA | PMC2, PMC3, PMC5, PMC6 |
| 316 | GPG13: Ports Denied Access - Cisco FWSM | PMC2, PMC3, PMC5, PMC6 |
| 317 | GPG13: Ports Denied Access - Cisco IOS | PMC2, PMC3, PMC5, PMC6 |
| 318 | GPG13: Ports Denied Access - Cisco PIX | PMC2, PMC3, PMC5, PMC6 |
| 319 | GPG13: Ports Denied Access - Cisco Router | PMC2, PMC3, PMC5, PMC6 |
| 320 | GPG13: Ports Denied Access - Fortinet | PMC2, PMC3, PMC5, PMC6 |
| 321 | GPG13: Ports Denied Access - Juniper Firewall | PMC2, PMC3, PMC5, PMC6 |
| 322 | GPG13: Ports Denied Access - Juniper JunOS | PMC2, PMC3, PMC5, PMC6 |
| 323 | GPG13: Ports Denied Access - Juniper RT Flow | PMC2, PMC3, PMC5, PMC6 |
| 324 | GPG13: Ports Denied Access - Nortel | PMC2, PMC3, PMC5, PMC6 |
| 325 | GPG13: Ports Denied Access - PANOS | PMC2, PMC3, PMC5, PMC6 |
| 326 | GPG13: Ports Denied Access - Sidewinder | PMC2, PMC3, PMC5, PMC6 |
| 327 | GPG13: Ports Denied Access - VMware vShield | PMC2, PMC3, PMC5, PMC6 |
| 328 | GPG13: Pulse Connect Secure Failed Logins | PMC3, PMC6 |
| 329 | GPG13: Pulse Connect Secure Policy Change | PMC3, PMC4, PMC6 |
| 330 | GPG13: Pulse Connect Secure successful logins | PMC3, PMC6 |
| 331 | GPG13: RACF Accounts Created | PMC5, PMC7 |
| 332 | GPG13: RACF Accounts Deleted | PMC5, PMC7 |
| 333 | GPG13: RACF Accounts Modified | PMC5, PMC7 |
| 334 | GPG13: RACF Failed Logins | PMC5, PMC6 |
| 335 | GPG13: RACF Files Accessed | PMC4, PMC5 |
| 336 | GPG13: RACF Password Changed | PMC5 |
| 337 | GPG13: RACF Permissions Changed | PMC5 |
| 338 | GPG13: RACF Process Started | PMC5 |
| 339 | GPG13: RACF Successful Logins | PMC5, PMC7 |
| 340 | GPG13: Root Logins | PMC7 |
| 341 | GPG13: Sensors Generating Alerts | PMC2, PMC3, PMC5, PMC6 |
| 342 | GPG13: Sensors Generating Alerts - Cisco IOS | PMC2, PMC3, PMC5, PMC6 |
| 343 | GPG13: Sensors Generating Alerts - FireEye MPS | PMC2, PMC3, PMC5, PMC6 |
| 344 | GPG13: Sensors Generating Alerts - ISS SiteProtector | PMC2, PMC3, PMC5, PMC6 |
| 345 | GPG13: Sensors Generating Alerts - SiteProtector | PMC2, PMC3, PMC5, PMC6 |
| 346 | GPG13: Sensors Generating Alerts - Sourcefire Defense Center | PMC2, PMC3, PMC5, PMC6 |
| 347 | GPG13: Servers Under Attack | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 348 | GPG13: Servers Under Attack - Cisco IOS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 349 | GPG13: Servers Under Attack - FireEye MPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 350 | GPG13: Servers Under Attack - HIPS | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 351 | GPG13: Servers Under Attack - ISS SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 352 | GPG13: Servers Under Attack - SiteProtector | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 353 | GPG13: Servers Under Attack - Sourcefire Defense Center | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 354 | GPG13: Sidewinder Configuration Changes | PMC2, PMC3, PMC4, PMC5, PMC6 |
| 355 | GPG13: Source of Attacks | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 356 | GPG13: Source of Attacks - Cisco IOS | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 357 | GPG13: Source of Attacks - FireEye MPS | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 358 | GPG13: Source of Attacks - HIPS | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 359 | GPG13: Source of Attacks - ISS SiteProtector | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 360 | GPG13: Source of Attacks - SiteProtector | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 361 | GPG13: Source of Attacks - Sourcefire Defense Center | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 362 | GPG13: Successful Logins | PMC2 PMC3 PMC7 |
| 363 | GPG13: Sybase ASE Database Backup and Restoration | PMC4, PMC5, PMC7, PMC8 |
| 364 | GPG13: Sybase ASE Database Configuration Changes | PMC4, PMC5, PMC7 |
| 365 | GPG13: Sybase ASE Database Create Events | PMC5, PMC7 |
| 366 | GPG13: Sybase ASE Database Data Access | PMC5, PMC7 |
| 367 | GPG13: Sybase ASE Database Drop Events | PMC5, PMC7 |
| 368 | GPG13: Sybase ASE Database Startup or Shutdown | PMC5, PMC7 |
| 369 | GPG13: Sybase ASE Database User Additions and Deletions | PMC5, PMC7 |
| 370 | GPG13: Sybase ASE Failed Logins | PMC5, PMC7 |
| 371 | GPG13: Sybase ASE Successful Logins | PMC5, PMC7 |
| 372 | GPG13: Symantec AntiVirus: Attacks by Threat Name | PCM2PMC3, PMC4, PMC5, PMC6, PMC9 |
| 373 | GPG13: Symantec AntiVirus: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 374 | GPG13: Symantec AntiVirus: Scans | PMC3, PMC5, PMC6 |
| 375 | GPG13: Symantec AntiVirus: Updated | PMC3, PMC4, PMC5, PMC6 |
| 376 | GPG13: Symantec Endpoint Protection Configuration Changes | PMC3, PMC4, PMC5, PMC6 |
| 377 | GPG13: Symantec Endpoint Protection Password Changes | PMC3, PMC5, PMC6 |
| 378 | GPG13: Symantec Endpoint Protection Policy Add, Remove, or Modify | PMC3, PMC5, PMC6 |
| 379 | GPG13: Symantec Endpoint Protection: Attacks by Threat Name | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 380 | GPG13: Symantec Endpoint Protection: Attacks Detected | PMC3, PMC4, PMC5, PMC6, PMC9 |
| 381 | GPG13: Symantec Endpoint Protection: Scans | PMC3, PMC5, PMC6 |
| 382 | GPG13: Symantec Endpoint Protection: Updated | PMC3, PMC4, PMC5, PMC6 |
| 383 | GPG13: TIBCO ActiveMatrix Administrator Failed Logins | PMC7 |
| 384 | GPG13: TIBCO ActiveMatrix Administrator Permission Changes | PMC4, PMC7 |
| 385 | GPG13: TIBCO ActiveMatrix Administrator Successful Logins | PMC7 |
| 386 | GPG13: TIBCO Administrator Password Changes | PMC7 |
| 387 | GPG13: TIBCO Administrator Permission Changes | PMC7 |
| 388 | GPG13: TrendMicro Control Manager: Attacks Detected | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 389 | GPG13: TrendMicro Control Manager: Attacks Detected by Threat Name | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 390 | GPG13: TrendMicro OfficeScan: Attacks Detected | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 391 | GPG13: TrendMicro OfficeScan: Attacks Detected by Threat Name | PMC2, PMC3, PMC4, PMC5, PMC6, PMC9 |
| 392 | GPG13: Tripwire Modifications, Additions, and Deletions | PMC2 PMC3 PMC4 PMC5 PMC7 |
| 393 | GPG13: Trusted Domain Deleted on Windows Servers | PMC7 |
| 394 | GPG13: Unauthorized Logins | PMC2, PMC6 |
| 395 | GPG13: Unencrypted Logins | PMC2, PMC6 |
| 396 | GPG13: Unencrypted Network Services - Check Point | PMC3, PMC6 |
| 397 | GPG13: Unencrypted Network Services - Cisco ASA | PMC3, PMC6 |
| 398 | GPG13: Unencrypted Network Services - Cisco FWSM | PMC3, PMC6 |
| 399 | GPG13: Unencrypted Network Services - Cisco IOS | PMC3, PMC6 |
| 400 | GPG13: Unencrypted Network Services - Cisco Netflow | PMC3, PMC6 |
| 401 | GPG13: Unencrypted Network Services - Cisco PIX | PMC3, PMC6 |
| 402 | GPG13: Unencrypted Network Services - F5 BIG-IP TMOS | PMC3, PMC6 |
| 403 | GPG13: Unencrypted Network Services - Fortinet | PMC3, PMC6 |
| 404 | GPG13: Unencrypted Network Services - Juniper Firewall | PMC3, PMC6 |
| 405 | GPG13: Unencrypted Network Services - Juniper JunOS | PMC3, PMC6 |
| 406 | GPG13: Unencrypted Network Services - Juniper RT Flow | PMC3, PMC6 |
| 407 | GPG13: Unencrypted Network Services - Nortel | PMC3, PMC6 |
| 408 | GPG13: Unencrypted Network Services - PANOS | PMC3, PMC6 |
| 409 | GPG13: Unencrypted Network Services - Sidewinder | PMC3, PMC6 |
| 410 | GPG13: Unencrypted Network Services - VMware vShield | PMC3, PMC6 |
| 411 | GPG13: UNIX Failed Logins | PMC7 |
| 412 | GPG13: Users Created on Servers | PMC7 |
| 413 | GPG13: Users Removed from Servers | PMC7 |
| 414 | GPG13: Users Using the Proxies | PMC2 |
| 415 | GPG13: Users Using the Proxies - Blue Coat | PMC2 |
| 416 | GPG13: Users Using the Proxies - Cisco WSA | PMC2 |
| 417 | GPG13: Users Using the Proxies - Microsoft IIS | PMC2 |
| 418 | GPG13: vCenter Change Attributes | PMC4 |
| 419 | GPG13: vCenter Datastore Events | PMC8 |
| 420 | GPG13: vCenter Modify Firewall Policy | PMC3, PMC4 |
| 421 | GPG13: vCenter Orchestrator Change Attributes | PMC4, PMC7 |
| 422 | GPG13: vCenter Orchestrator Data Move | PMC7 |
| 423 | GPG13: vCenter Orchestrator Datastore Events | PMC7, PMC8 |
| 424 | GPG13: vCenter Orchestrator Failed Logins | PMC7 |
| 425 | GPG13: vCenter Orchestrator Virtual Machine Created | PMC7 |
| 426 | GPG13: vCenter Orchestrator Virtual Machine Deleted | PMC7 |
| 427 | GPG13: vCenter Orchestrator Virtual Machine Shutdown | PMC7 |
| 428 | GPG13: vCenter Orchestrator Virtual Machine Started | PMC7 |
| 429 | GPG13: vCenter Shutdown or Restart of ESX Server | PMC4, PMC9 |
| 430 | GPG13: vCenter Successful Logins | PMC7 |
| 431 | GPG13: vCenter User Permission Change | PMC7 |
| 432 | GPG13: vCenter Virtual Machine Created | PMC7 |
| 433 | GPG13: vCenter Virtual Machine Deleted | PMC7 |
| 434 | GPG13: vCenter Virtual Machine Shutdown | PMC7 |
| 435 | GPG13: vCenter Virtual Machine Started | PMC7 |
| 436 | GPG13: vCloud Failed Logins | PMC7 |
| 437 | GPG13: vCloud Organization Created | PMC7 |
| 438 | GPG13: vCloud Organization Deleted | PMC7 |
| 439 | GPG13: vCloud Organization Modified | PMC7 |
| 440 | GPG13: vCloud Successful Logins | PMC7 |
| 441 | GPG13: vCloud User Created | PMC7 |
| 442 | GPG13: vCloud User Deleted or Removed | PMC7 |
| 443 | GPG13: vCloud vApp Created, Modified, or Deleted | PMC7 |
| 444 | GPG13: vCloud vDC Created, Modified, or Deleted | PMC7 |
| 445 | GPG13: VPN Connection Average Bandwidth | PMC3 |
| 446 | GPG13: VPN Connection Average Duration | PMC3 |
| 447 | GPG13: VPN Connection Disconnect Reasons | PMC2 PMC3 |
| 448 | GPG13: VPN Connections by Users | PMC2 PMC3 |
| 449 | GPG13: VPN Denied Connections by Users | PMC2 PMC3 |
| 450 | GPG13: VPN Sessions by Destination IPs | PMC2 PMC3 |
| 451 | GPG13: VPN Sessions by Source IPs | PMC2 PMC3 |
| 452 | GPG13: VPN Sessions by Users | PMC2 PMC3 |
| 453 | GPG13: VPN Users Accessing Corporate Network | PMC2 PMC3 |
| 454 | GPG13: vShield Edge Configuration Changes | PMC3, PMC4, PMC5, PMC6 |
| 455 | GPG13: Web Access from All Users | PMC2 PMC3 |
| 456 | GPG13: Web Access from All Users - F5 BIG-IP TMOS | PMC2 PMC3 |
| 457 | GPG13: Web Access from All Users - Fortinet | PMC2 PMC3 |
| 458 | GPG13: Web Access from All Users - Microsoft IIS | PMC2 PMC3 |
| 459 | GPG13: Web Access from All Users - PANOS | PMC2 PMC3 |
| 460 | GPG13: Web Access to Applications | PMC2 PMC3 |
| 461 | GPG13: Web Access to Applications - F5 BIG-IP TMOS | PMC2 |
| 462 | GPG13: Web Access to Applications - Fortinet | PMC2 |
| 463 | GPG13: Web Access to Applications - Microsoft IIS | PMC2 |
| 464 | GPG13: Web Access to Applications - PANOS | PMC2 |
| 465 | GPG13: Web URLs Visited | PMC2 |
| 466 | GPG13: Web URLs Visited - F5 BIG-IP TMOS | PMC2 |
| 467 | GPG13: Web URLs Visited - Fortinet | PMC2 |
| 468 | GPG13: Web URLs Visited - Microsoft IIS | PMC2 |
| 469 | GPG13: Web URLs Visited - PANOS | PMC2 |
| 470 | GPG13: Web URLs Visited via Proxy | PMC2 |
| 471 | GPG13: Web URLs Visited via Proxy - Blue Coat | PMC2 |
| 472 | GPG13: Web URLs Visited via Proxy - Cisco WSA | PMC2 |
| 473 | GPG13: Web URLs Visited via Proxy - Microsoft IIS | PMC2 |
| 474 | GPG13: Windows Accounts Enabled | PMC7 |
| 475 | GPG13: Windows Audit Logs Cleared | PMC7 |
| 476 | GPG13: Windows Events by Users | PMC7 |
| 477 | GPG13: Windows Events Summary | PMC4, PMC7, PMC8 |
| 478 | GPG13: Windows Group Members Added | PMC7 |
| 479 | GPG13: Windows Group Members Deleted | PMC7 |
| 480 | GPG13: Windows New Services Installed | PMC4, PMC7 |
| 481 | GPG13: Windows Programs Accessed | PMC4, PMC7 |
| 482 | GPG13: Windows Servers Restarted | PMC4, PMC9 |
| 483 | GPG13: Windows Software Update Successes | PMC4 |
Copyright © Cloud Software Group, Inc. All rights reserved.
