Compliance Reports: Report Dependencies for the NWDB Reports
This article introduces dependencies for using the Core Compliance Reports that run against the NetWitness Database (NWDB) and tells you how to implement the reports with the dependencies.
The following table provides the report rules, lists, and application rules required when using the different Core Compliance reports in RSA NetWitness.
- SA Report Template: Access to Compliance Data - Detail
- Dependencies: Access to Compliance Data Details
- Column 3: Compliance\Compliance Data
- Column 4: Alm:cardholder-data
- SA Report Template: Access to Compliance Data - Top 25
- Dependencies: Access to Compliance Data Summary
- SA Report Template: Account Management
- Dependencies: Accounts Modified, Accounts Deleted, Accounts Created
- Column 3:
- Column 4:
- SA Report Template: Accounts Created
- Dependencies: Accounts Created
- Column 3:
- Column 4: Account:created
- SA Report Template: Accounts Deleted
- Dependencies: Accounts Deleted
- Column 3:
- Column 4: Account:deleted
- SA Report Template: Accounts Disabled
- Dependencies: Accounts Disabled
- Column 3:
- Column 4: account:account-disabled
- SA Report Template: Accounts Modified
- Dependencies: Accounts Modified
- Column 3:
- Column 4: Account:modified
- SA Report Template: Admin Access to Compliance Systems - Detail
- Dependencies: Admin Access to Compliance Systems Details
- Column 3: Logs\Administrative Users
- Column 4: account:logon-success
- SA Report Template: Admin Access to Compliance Systems - Top 25
- Dependencies: Admin Access to Compliance Systems Summary
- Column 3: Compliance\Compliance Systems
- SA Report Template: Antivirus Signature Update
- Dependencies: Antivirus Signature Update
- Column 3:
- Column 4: Av:signature-update
- SA Report Template: Change in Audit Settings
- Dependencies: Change in Audit Settings
- Column 3:
- Column 4: config:change-audit-setting
- SA Report Template: Encryption Failures
- Dependencies: Encryption Failures
- Column 3:
- Column 4: encryption:failures
- SA Report Template: Escalation of Privileges - Detail
- Dependencies: Successful Escalation of Privileges Details
- Column 3:
- Column 4: access:privilege-escalation-success
- SA Report Template: Escalation of Privileges - Top 25
- Dependencies: Successful Escalation of Privileges Summary
- Column 3:
- SA Report Template: Failed Escalation of Privileges - Detail
- Dependencies: Failed Escalation of Privileges Details
- Column 3:
- Column 4: access:privilege-escalation-failure
- SA Report Template: Failed Escalation of Privileges - Top 25
- Dependencies: Failed Escalation of Privileges Summary
- Column 3:
- SA Report Template: Failed Remote Access - Detail
- Dependencies: Failed Remote Access Details
- Column 3:
- Column 4: access:remote-failure
- SA Report Template: Failed Remote Access - Top 25
- Dependencies: Failed Remote Access Summary
- Column 3:
- SA Report Template: Firewall Configuration Changes
- Dependencies: Firewall Configuration Changes
- Column 3:
- Column 4: config:fw-config-changesconfigconfigconfig
- SA Report Template: Firmware Changes Wireless Devices
- Dependencies: Firmware Changes on Wireless Devices
- Column 3:
- Column 4: config:firmware-config-changesconfigconfigconfig
- SA Report Template: Group Management
- Dependencies: Group Management
- Column 3:
- Column 4: account:group-management
- SA Report Template: Inbound Network Traffic - Top 25
- Dependencies: Inbound Network Traffic
- Column 3:
- Column 4: alm:inbound-network-traffic
- SA Report Template: Key Generation and Changes
- Dependencies: Encryption Key Generation and Changes
- Column 3:
- Column 4: encryption:key-gen-and-changes
- SA Report Template: Logon Failures - Detail
- Dependencies: Logon Failures Details
- Column 3:
- Column 4: account:logon-failure
- SA Report Template: Logon Failures - Top 25
- Dependencies: Logon Failures Summary
- Column 3:
- SA Report Template: Outbound Network Traffic - Top 25
- Dependencies: Outbound Network Traffic
- Column 3:
- Column 4: alm:outbound-network-traffic
- SA Report Template: Password Changes - Detail
- Dependencies: Password Changes
- Column 3:
- Column 4: account:password-change
- SA Report Template: Password Changes - Top 25
- Dependencies: Password Changes Summary
- Column 3:
- SA Report Template: Router Configuration Changes
- Dependencies: Router Configuration Changes
- Column 3:
- Column 4: config:router-change
- SA Report Template: Successful Remote Access - Detail
- Dependencies: Successful Remote Access Details
- Column 3:
- Column 4: access:remote-success
- SA Report Template: Successful Remote Access - Top 25
- Dependencies: Successful Remote Access Summary
- Column 3:
- SA Report Template: Successful Use of Encryption
- Dependencies: Successful Use of Encryption
- Column 3:
- Column 4: encryption:success
- SA Report Template: System Clock Synchronization
- Dependencies: System Clock Synchronization
- Column 3:
- Column 4: alm:system-clock-synch
- SA Report Template: User Access Revoked
- Dependencies: User Access Revoked
- Column 3:
- Column 4: access:user-access-revoked
- SA Report Template: User Access to Compliance Systems - Detail
- Dependencies: User Access to Compliance Systems Details
- Column 3: Logs\Administrative Users
- Column 4: account:logon-success
- SA Report Template: User Access to Compliance Systems - Top 25
- Dependencies: User Access to Compliance Systems Summary
- Column 3: Compliance\Compliance Systems
- SA Report Template: User Session Terminated - Top 25
- Dependencies: User Session Terminated Summary
- Column 3:
- Column 4: Account:logout
You are here
Table of Contents > Compliance Reports: Report Dependencies for the NWDB Reports