Automatic Root Authorization Bypass

Classification

Rule Name

Rule Type

Classification

Common Event

Automatic Root Authorization Bypass

Base Rule

Operations : Information

Authorization Received

Mapping with LogRhythm Schema  

Device Key in Log Message

LogRhythm Schema

Data Type

N/A

<severity>

Text/String

N/A

<process>

Text/String

N/A

<processid>

Number

N/A

<command>

Text/String

N/A

<object>

Text/String

N/A

<login>

Text/String