Unix_Chkpwd Authentication

Classification

Rule Name	Rule Type	Common Event	Classification
Unix_Chkpwd Authentication	Base Rule	User Logon Failure : Bad Username	Authentication Failure
Unix_Chkpwd Failed Superuser Login	Sub Rule	User Logon Failure	Authentication Failure
Unix_Chkpwd Failed Authentication	Sub Rule	User Logon Failure	Authentication Failure

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<process>	Text\String
N/A	<login>	Text\String

×