Auditable events

Auditable events

Auditable event data types
    Common data for auditable events
    Object data for auditable events

Fixed events

Selectable events
    Access control events
        Discretionary access control (DAC) events
        Directory and file access events
        Directory and file creation events
        Symbolic link events
        Change of path events
    System administration events
        Privileged events
    Line printer system events
    Interprocess communication (IPC) events
    Process control events
    User authentication events
    I/O control events
    Dynamic loadable module (DLM) events
    Processor binding events
    Processor state events

Event classes

Deciding which events to audit