Monitoring AIP Superusers

%3CLINGO-SUB%20id%3D%22lingo-sub-1055628%22%20slang%3D%22en-US%22%3EMonitoring%20AIP%20Superusers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1055628%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20we%20use%20MCAS%20to%20generate%20an%20alert%20when%20an%20AIP%20SuperUser%20changes%20the%20permissions%20on%20protected%20files%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1055628%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EData%20Protection%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1104307%22%20slang%3D%22en-US%22%3ERe%3A%20Monitoring%20AIP%20Superusers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1104307%22%20slang%3D%22en-US%22%3EHi%20Dean%2C%3CBR%20%2F%3E%3CBR%20%2F%3EDo%20you%20have%20an%20example%20on%20such%20events%20in%20MCAS%20%3F%20Do%20you%20see%20something%20allowing%20it%20its%20identification%20in%20the%20JSON%20data%20%3F%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1106053%22%20slang%3D%22en-US%22%3ERe%3A%20Monitoring%20AIP%20Superusers%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1106053%22%20slang%3D%22en-US%22%3ENo%2C%20i%20have%20not%20been%20able%20to%20find%20anything%20which%20is%20why%20I'm%20asking%20if%20it%20is%20even%20possible.%3C%2FLINGO-BODY%3E
Respected Contributor

Can we use MCAS to generate an alert when an AIP SuperUser changes the permissions on protected files?

2 Replies
Hi Dean,

Do you have an example on such events in MCAS ? Do you see something allowing it its identification in the JSON data ?

Thanks
No, i have not been able to find anything which is why I'm asking if it is even possible.