Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

How does Tripwire for Servers track “who made the change?

April 26, 2017servers track tripwire

0

Posted

How does Tripwire for Servers track “who made the change?

1 Answer

0

Posted

Tripwire for Servers tracks the identity of who made the change by correlating the information from the operating system’s event and audit log with the change information that is detected by Tripwire for Servers. It uses this information to provide the identity of who made a certain change. Since we rely on the operating system to gather this information, the product only captures the “who” information from the operating systems that track this. Linux and FreeBSD do not track this information. This feature is called Event Log Correlation.