IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  "Accepted password for User" event name

    Posted Fri August 07, 2020 08:57 PM
    Hello, 

    I saw in qradar, this  event name "Accepted password for user". The log source witch generated this event is a linux server.

    I would like to understand that means this event. 

    Thank you for you in davance for your answer

    Regards,

    ------------------------------
    Fatou NDIAYE
    ------------------------------


  • 2.  RE: "Accepted password for User" event name

    Posted Mon August 10, 2020 10:28 AM
    As I could see, it was mapped to High Level / Low Level category  = AUTHENTICATION / AUTH SERVER LOGIN SUCCEEDED

    ------------------------------
    Dusan VIDOVIC
    ------------------------------