Audit Successful and Unsuccessful Logon AttemptsID: oval:org.secpod.oval:def:54001 | Date: (C)2019-04-05 (M)2023-07-04 |
Class: COMPLIANCE | Family: macos |
An attacker might attempt to log in as an authorized user, through stolen credentials, unpatched exploits, or brute force attempts to guess a valid username and password. If a user is attempting to log in to a system at an unusual time, or if there are many failed attempts, there is a possibility that the system is the target of an attack. Auditing logon events mitigates this risk by recording all logon attempts, successful and unsuccessful, to the system.
Platform: |
Apple Mac OS X 10.14 |