SecurTrac Administration Guide

SecurTrac Log Details

SecurTrac^TM provides detailed audit logs to monitor all user activity, e-mail and document fields configured by the administrator. In addition, it provides logs to keep track of Notes.ini file modifications and detect any possible intrusion. The log information can be stored in a Central Log Database (SCTLOG.NSF) or user defined log database.

The following sections describe the logs for each of the different SecurTrac monitors in the SecurTrac Log Database (SCTLOG.NSF).

MAIL MONITOR

Log	Description
Open Log	Shows audit information about e-mail being opened(read).
Illegal Open Log	Shows audit information for illegal attempts by users to open another person's e-mail
Sent Log	Shows audit information about sending e-mail
Receive Log	Shows audit information about receiving e-mail
Update Log Empty Trash Log	Shows audit information about updating e-mail Shows audit information about deleting e-mail
Undeliver Log	Shows audit information of for undelivered e-mail
Route Log	Shows audit information about routing of e-mail
Delegation Change Log	Shows audit information about the delegation of a user's mail database
ACL Change Log	Shows audit information about any ACL changes to mail databases being monitored
Bulk Action Log	Shows audit information of all events that match the user defined bulk action criteria
Statistics	Shows statistics of user's mail activities which includes Send, Receive, Delegation Profile changes and ACL changes

DATABASE MONITOR

View	Description
Document Change Log	Shows audit information about any open, create, update and delete actions for documents in databases being monitored
Design Elements Change Log	Shows audit information about any design changes for databases being monitored
ACL Change Log	Shows audit information about any ACL changes for databases being monitored
Agent Log	Shows audit information about any Agent activities for databases being monitored
Bulk Action Log	Shows audit information for all events that match the user defined bulk action criteria
Statistics	Shows the statistics of all activities being preformed on the monitored database. This includes open, create, update and delete actions, as well as both Design element changes and ACL changes.

DOMINO DIRECTORY MONITOR

View	Description
Document Change Log	Shows audit information about create, update and delete actions in documents of the Domino Directory being monitored.
Design Elements Change Log	Shows audit information about any design changes to the Domino Directory.
ACL Change Log	Shows audit information about any ACL changes to the Domino Directory.
Bulk Action Log	Shows audit information for all events that match the user defined bulk action criteria.
Statistics	Shows the statistics of all activities being preformed on the Domino Directory. This includes open, create, update and delete actions, as well as both Design element changes and ACL changes.

NOTES.INI LOG

The NOTES.INI log provides detailed audit information about the modification of the NOTES.INI file by any person. Information includes last modified time, check sum value, and most importantly, the updated content of the NOTES.INI file will be recorded. A copy of the entire notes.ini file is also captured and is accessible via the log.

INTRUSION DETECTION LOG

Intrusion detection log provides detailed audit information about any malicious events and potential attack from hackers

There is also a Bulk Action Log and Intrusion Detection Statistics which show audit information for all events that match the user defined bulk action criteria and the statistics of monitored intrusion activities.

USER ACTIVITY LOG

The User Activity log provides detailed information about user activities including database open/close, view open and document open/create/update/delete actions

SCHEDULED REPORT

There are two types of scheduled reports: Database ACL Audit report and Log Summary reports.

-------------------------------------------------------------------------------------------------------------------------------------------