Skip to main content

SOX users

Purpose: Allows investigation of all suspicious user activity that falls under SOX definition.

Executable: soxusers

Table 1. SOX users report search criteria

Criteria

Description

Report type

Select the report type:

  • User states Select this option to only show state transitions such as user creation/deletion, enable/disable/ locked/unlocked.

    Out-of-band changes for user enable/disable, lock/unlock are not supported.

  • User attributes Select this option to only show user attribute updates operations.

  • User passwords Select this option to only show user password updates operations.

User ID

Type the user ID of the user or users for whom you want to include in the report. Alternatively, you can search for one or more user IDs. All users are included by default.

Threshold value

Type a number to define the threshold. The default value is 1.

Time range

Choose a time range .

Self requests only

Select this option to show operations that users do for themselves.

Successful requests only

Select this option to show operations that have become effective.

Summarize report

Select this option to summarize the report.

This option groups items in order to reduce the number of rows and shows only counts by users.



In this section: