Userhelper Messages

Classification

Rule Name	Rule Type	Common Event	Classification
Userhelper Messages	Base Rule	Authentication Activity	Authentication Success
Authorization Granted	Sub Rule	Authentication Activity	Authentication Success
Could Not Authenticate	Sub Rule	User Logon Failure : Bad Password	Authentication Failure

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<login>	Text\String
N/A	<account>	Text\String
N/A	<Session>	Text\String
N/A	<process>	Text\String
N/A	<processid>	Number
N/A	<object>	Text\String

×