Audit trails provide basic information that can be traced back from the entire trace of an event to its origin, usually the original creation of the record. This may include user activity, access to data, login attempts, administrator activities, or automated system activity. The audit record contains company-defined elements, including:<br>What is the event<br>Which user, system or application initiated the event (this information may include IP addresses and device types)<br>The date and time this event occurred<br><br>Some audit trails look more closely at actions in some applications to record more events than simple systems or applications to launch. These logs can identify elements such as specific changes to the database or the information it contains, and can also detect improper web browsing or e-mail usage. Many IT departments have more than one audit trail that can be defined by a system, application, or event. Highlighting unusual activity or usage that is considered "different" can start an investigation. Accurate and well-defined audit trails provide evidence for finding answers and solving problems.
đang được dịch, vui lòng đợi..
