Description of critical Events in Security-Audit-Logs

[former_member639618]

Iam looking for a description of why specific events are classed as critical and what those Logs record exactly.

I haven't been able to find any in the Forums or elsewhere on the Internet.

Does anyone know where I can find something?

[ivan-ae]

My reply definitely comes very late though your query reads very familiar to me. SAL alerts are not always carrying a realistic severity scoring. Often singular alerts are harmless, only when put in context with other events (not necessarily logged in the audit log!) a series of actions unfolds an exploit. PM me in case you require intelligence to be put into your audit logging...