IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  "Accepted password for User" event name

    Posted 08/07/20 08:57 PM
    Hello, 

    I saw in qradar, this  event name "Accepted password for user". The log source witch generated this event is a linux server.

    I would like to understand that means this event. 

    Thank you for you in davance for your answer

    Regards,

    ------------------------------
    Fatou NDIAYE
    ------------------------------


  • 2.  RE: "Accepted password for User" event name

    Posted 08/10/20 10:28 AM
    As I could see, it was mapped to High Level / Low Level category  = AUTHENTICATION / AUTH SERVER LOGIN SUCCEEDED

    ------------------------------
    Dusan VIDOVIC
    ------------------------------