AIX Auditing

Description

The AIX Auditing Subsystem provides comprehensive event monitoring of security events that occur on an AIX system.  AIX auditing is important for detecting security attacks in real-time as well as using it as a forensics repository in the case of a breach.  AIX Auditing is a fundamental layer of defense needed whem deploying your Defense in Depth strategy to protect your organizations most critical assets.

Features

1. Provides the ability to detect events not possible with other tooling
2. Provides comprehensive event monitoring
3. Provides the ability to filter the event stream to the precise set of events you most care about
4. Provides the ability to save on CPU and Disk by utilizing RBAC-based auditing

Service

See: AIX Auditing Workshop Flyer