macos:openbsm
OpenBSM audit trail (deprecated by Apple)
- Host type
- macOS
- Techniques
- 2
- Rules listed
- 0
- Events
- 8
Techniques
Rules
No vendor rule names this event or source directly.
Events
Recommended (8)
- class:aaauthentication and authorization
- class:adadministrative actions
- class:ex (failure)program execution
- class:fd (failure)file deletion
- class:fmfile attribute modification
- class:fr (failure)file read
- class:fw (failure)file write
- class:lologin and logout