Appendix D
System Rules and Reports
Activity: Backdoor - Top Event Types
Activity: Backdoor - Top Hosts.
•
This report ranks the hosts that respond to backdoor connection attempts. This means that the hosts
are likely infected and running backdoors.
Activity: Backdoor - Top Hosts.
•
Activity: Backdoor - Top Hosts
Activity: CS-MARS Host Mitigation - Failure - All Events.
•
This report lists failed CS-MARS mitigation attempts - these can result from improper network
connectivity or device access credentials.
Activity: CS-MARS Host Mitigation - Failure - All Events.
•
This report lists failed CS-MARS mitigation attempts - these can result from improper network
connectivity or device access credentials.
•
Activity: CS-MARS Host Mitigation - Success - All Events.
This report lists successful mitigations from CS-MARS.
Activity: CS-MARS Host Mitigation - Success - All Events.
•
This report lists successful mitigations from CS-MARS.
Activity: Database Login Failures - All Events.
•
This report lists the event details for all database login failure events.
Activity: Database Login Failures - All Events.
•
Activity: Database Login Failures - All Events
•
Activity: Database Login Failures - Top Servers.
This report ranks the database servers by the number of login failures.
Activity: Database Login Failures - Top Servers.
•
Activity: Database Login Failures - Top Servers
Activity: Database Login Failures - Top Users.
•
This report ranks the users by the number of login failures.
Activity: Database Login Failures - Top Users.
•
Activity: Database Login Failures - Top Users
•
Activity: Database Login Successes - All Events.
This report lists event details for all successful database login events.
Activity: Database Login Successes - All Events.
•
Activity: Database Login Successes - All Events
Activity: Database Login Successes - Top Servers.
•
This report ranks the database server hosts by the number of successful logins.
Activity: Database Login Successes - Top Servers.
•
Activity: Database Login Successes - Top Servers
Activity: Database Login Successes - Top Users.
•
This report ranks the database users by the number of successful logins.
78-17020-01
User Guide for Cisco Security MARS Local Controller
List of System Reports
D-17