135 lines
5.0 KiB
Plaintext
135 lines
5.0 KiB
Plaintext
<AuditLog>
|
|
|
|
<Group AppId="16" Name="Security">
|
|
<Event Name="AMT Provisioning Started" EventId="0" />
|
|
<Event Name="AMT Provisioning Completed" EventId="1"/>
|
|
<Event Name="ACL Entry Added" EventId="2"/>
|
|
<Event Name="ACL Entry Modified" EventId="3"/>
|
|
<Event Name="ACL Entry Removed" EventId="4"/>
|
|
<Event Name="ACL Access with invalid credentials" EventId="5"/>
|
|
<Event Name="ACL Entry Enabled" EventId="6"/>
|
|
<Event Name="TLS State Changed" EventId="7"/>
|
|
<Event Name="TLS Server Certificate Set" EventId="8"/>
|
|
<Event Name="TLS Server Certificate Removed" EventId="9"/>
|
|
<Event Name="TLS Trusted Root Certificate Added" EventId="10"/>
|
|
<Event Name="TLS Trusted Root Certificate Removed" EventId="11"/>
|
|
<Event Name="TLS Pre-Shared Key Set" EventId="12"/>
|
|
<Event Name="Kerberos Settings Modified" EventId="13"/>
|
|
<Event Name="Kerberos Master Key Modified" EventId="14"/>
|
|
<Event Name="Flash Wear-Out Counters Reset" EventId="15"/>
|
|
<Event Name="Power Package Modified" EventId="16"/>
|
|
<Event Name="Set Realm Authentication Mode" EventId="17"/>
|
|
<Event Name="Upgrade Client to Admin" EventId="18"/>
|
|
</Group>
|
|
|
|
<Group AppId="17" Name="PowerControl">
|
|
<Event Name="Performed Power-Up" EventId="0"/>
|
|
<Event Name="Performed Power-Down" EventId="1"/>
|
|
<Event Name="Performed Power-Cycle" EventId="2"/>
|
|
<Event Name="Performed Reset" EventId="3"/>
|
|
<Event Name="Set Boot Options" EventId="4"/>
|
|
</Group>
|
|
|
|
<Group AppId="18" Name="Redirection">
|
|
<Event Name="IDE-R Session Opened" EventId="0"/>
|
|
<Event Name="IDE-R Session Closed" EventId="1"/>
|
|
<Event Name="IDE-R Enabled" EventId="2"/>
|
|
<Event Name="DE-R Disabled" EventId="3"/>
|
|
<Event Name="SoL Session Opened" EventId="4"/>
|
|
<Event Name="SoL Session Closed" EventId="5"/>
|
|
<Event Name="SoL Enabled" EventId="6"/>
|
|
<Event Name="SoL Disabled" EventId="7"/>
|
|
<Event Name="KVM Session Started" EventId="8"/>
|
|
<Event Name="KVM Session ended" EventId="9"/>
|
|
<Event Name="KVM Enabled" EventId="10"/>
|
|
<Event Name="KVM Disabled" EventId="11"/>
|
|
<Event Name="VNC Password Failed 3 Times" EventId="12"/>
|
|
</Group>
|
|
|
|
<Group AppId="19" Name="FirmwareUpdate">
|
|
<Event Name="Firmware Update started" EventId="0"/>
|
|
<Event Name="Firmware Updated Failed" EventId="1"/>
|
|
</Group>
|
|
|
|
<Group AppId="20" Name="AccessMonitor">
|
|
<Event Name="Security Audit Log Cleared" EventId="0"/>
|
|
<Event Name="Security Audit policy modified" EventId="1"/>
|
|
<Event Name="Security Audit Log Disabled" EventId="2"/>
|
|
<Event Name="Security Audit Log Enabled" EventId="3"/>
|
|
<Event Name="Security Audit Log Exported" EventId="4"/>
|
|
<Event Name="Security Audit Log Recovered" EventId="5"/>
|
|
</Group>
|
|
|
|
<Group AppId="21" Name="NetworkTime">
|
|
<Event Name="AMT Time Set" EventId="0"/>
|
|
</Group>
|
|
|
|
<Group AppId="22" Name="NetworkAdministration">
|
|
<Event Name="TCP/IP Parameters Set" EventId="0"/>
|
|
<Event Name="Host Name Set" EventId="1"/>
|
|
<Event Name="Domain Name Set" EventId="2"/>
|
|
<Event Name="VLAN Parameters Set" EventId="3"/>
|
|
<Event Name="Link Policy Set" EventId="4"/>
|
|
<Event Name="IPv6 parameters set" EventId="5"/>
|
|
</Group>
|
|
|
|
<Group AppId="23" Name="StorageAdministration">
|
|
<Event Name="Global Storage Attributes Set" EventId="0"/>
|
|
<Event Name="Storage Enterprise Modified" EventId="1"/>
|
|
<Event Name="Storage Allocation Modified" EventId="2"/>
|
|
<Event Name="Storage Write Operation" EventId="3"/>
|
|
</Group>
|
|
|
|
<Group AppId="24" Name="EventManager">
|
|
<Event Name="Alert Subscribed" EventId="0"/>
|
|
<Event Name="Alert Unsubscribed" EventId="1"/>
|
|
<Event Name="Event Log Cleared" EventId="2"/>
|
|
<Event Name="Event Log Frozen" EventId="3"/>
|
|
</Group>
|
|
|
|
<Group AppId="25" Name="SystemDefense">
|
|
<Event Name="SD Filter Added" EventId="0"/>
|
|
<Event Name="SD Filter Removed" EventId="1"/>
|
|
<Event Name="SD Policy Added" EventId="2"/>
|
|
<Event Name="SD Policy Removed" EventId="3"/>
|
|
<Event Name="SD Default Policy Set" EventId="4"/>
|
|
<Event Name="SD Heuristics Option Set" EventId="5"/>
|
|
<Event Name="SD Heuristics State Cleared" EventId="6"/>
|
|
</Group>
|
|
|
|
<Group AppId="26" Name="AgentPresence">
|
|
<Event Name="Agent Watchdog Added" EventId="0"/>
|
|
<Event Name="Agent Watchdog Removed" EventId="1"/>
|
|
<Event Name="Agent Watchdog Action set" EventId="2"/>
|
|
</Group>
|
|
|
|
<Group AppId="27" Name="Wireless">
|
|
<Event Name="Wireless profile Added" EventId="0"/>
|
|
<Event Name="Wireless profile Removed" EventId="1"/>
|
|
<Event Name="Wireless profile Updated" EventId="2"/>
|
|
</Group>
|
|
|
|
<Group AppId="28" Name="EACs">
|
|
<Event Name="EAC Posture Signer SET" EventId="0"/>
|
|
<Event Name="EAC Enabled" EventId="1"/>
|
|
<Event Name="EAC Disabled" EventId="2"/>
|
|
<Event Name="EAC Posture State update" EventId="3"/>
|
|
<Event Name="EAC Set Options" EventId="4"/>
|
|
</Group>
|
|
|
|
<Group AppId="29" Name="KVM">
|
|
<Event Name="KVM Opt-in Enabled" EventId="0"/>
|
|
<Event Name="KVM Opt-in Disabled" EventId="1"/>
|
|
<Event Name="KVM Password Changed" EventId="2"/>
|
|
<Event Name="KVM Consent Succeeded" EventId="3"/>
|
|
<Event Name="KVM Consent Failed" EventId="4"/>
|
|
</Group>
|
|
|
|
<ParamTypes>
|
|
<ValueMap/>
|
|
<UInt32/>
|
|
<DateTime/>
|
|
</ParamTypes>
|
|
|
|
</AuditLog>
|