HIDS 9701

From Atomicorp Wiki
Revision as of 14:53, 17 December 2013 by Mshinn (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Rule ID

9706

Status

Active rule currently published


Description

This rule reports when dovecot has reported that a user has disconnected from a session. This rules does not block anything, and you should not disable this rule. This rule is used by other rules to determine if a users account may have been compromised, and is also used for auditing purposes.

This rule does not shun the offending IP by default and will not block the user. It has no adverse impact the user.

False Positives

None.


Tuning Recommendations

None.

Retrieved from "https://wiki.atomicorp.com/wiki/index.php?title=HIDS_9701&oldid=4339"
Personal tools