Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)

• To: Craig Ozancin <cozancin@axent.com>, cve-editorial-board-list@lists.mitre.org
• Subject: Re: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
• From: Adam Shostack <adam@NETECT.COM>
• Date: Tue, 27 Jul 1999 16:19:15 -0400
• In-Reply-To: <8A34CE6287D8D211AB0600A0C9D182232C50E7@Raven.rockville.axent.com>; from Craig Ozancin on Tue, Jul 27, 1999 at 04:22:22PM -0400
• References: <8A34CE6287D8D211AB0600A0C9D182232C50E7@Raven.rockville.axent.com>
• Reply-To: adam@NETECT.COM
• Sender: owner-cve-editorial-board-list@lists.mitre.org

| Candidate: CAN-1999-0575
| Announced: 19990721
| Assigned: 19990607
| Category: CF
|
| A Windows NT system's user audit policy does not log an event success
| or failure, e.g. for Logon and Logoff, File and Object Access, Use of
| User Rights, User and Group Management, Security Policy Changes,
| Restart, Shutdown, and System, and Process Tracking.
|
| VOTE: Recast
|
| It is far less interesting what a user does successfully that what they
| attempt and fail at.

I don't agree.  Its very interesting, for example, if someone from
bindview.com logs into Axent.com.  In fact, it may be more interesting
than someone failing.

Adam

• References:
  • RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
    • From: Craig Ozancin <cozancin@axent.com>

• Prev by Date: RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
• Next by Date: RE: PROPOSAL: Cluster 20 - DESIGN (27 candidates)
• Prev by thread: RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
• Next by thread: RE: PROPOSAL: Cluster 19 - NTCONFIG (13 candidates)
• Index(es):
  • Date
  • Thread