Re: [Fed-Talk] DC, talk, Audit Explorer
Re: [Fed-Talk] DC, talk, Audit Explorer
- Subject: Re: [Fed-Talk] DC, talk, Audit Explorer
- From: "O'Donnell, Dan" <email@hidden>
- Date: Mon, 18 Jun 2012 16:48:17 +0000
- Thread-topic: [Fed-Talk] DC, talk, Audit Explorer
How to make Audit Explorer gain and use elevated privileges so as to
access the audit system for configuration, reading, etc?
How to make Audit Explorer get access to Terminal or the CLI?
-----Original Message-----
From: Todd Heberlein <email@hidden>
Date: Monday, June 18, 2012 8:09 AM
To: "email@hidden" <email@hidden>
Subject: [Fed-Talk] DC, talk, Audit Explorer
>Hi guys,
>
>I'm in Washington DC to give a talk at Apple Federal tomorrow (I didn't
>even know Apple had such a thing).
>
>If anyone wants a copy of the slides, let me know and I can forward them
>to you (let me know if you prefer Keynote or PDF). The title of the talk
>is "Apple's BSM Auditing and Audit Explorer". I'll also be posting it on
>my web site when I get back next week.
>
>Also, I should have some free time here this week, so if anyone wants to
>get together to talk about their auditing requirements, complaints about
>Audit Explorer, wish lists, or whatever, shoot me an email.
>
>And as I usually do when I give a talk, I've dropped the price to Audit
>Explorer in the Mac App Store. So if you want to grab it, it is 99 cents
>through the end of the month. Feel free to send me complaints, wishes,
>etc. (I already have a very long list of my own, but I appreciate
>feedback to add a things I've missed or bump things up on the priority
>list).
>
>Next week when I get back I will also post on my site the latest
>filtering rules I use on my Lion systems as well as the shell scripts,
>PHP scripts, and launchd configurations I use to automatically process
>and aggregate my logs files on a server. I am a PHP novice, so before you
>use any of the scripts you might want to have an internal expert vet them.
>
>Cheers,
>
>Todd
>
> _______________________________________________
>Do not post admin requests to the list. They will be ignored.
>Fed-talk mailing list (email@hidden)
>Help/Unsubscribe/Update your Subscription:
>
>This email sent to email@hidden
__________________________________________________________________________
This email message is for the sole use of the intended recipient(s) and
may contain confidential information. Any unauthorized review, use,
disclosure or distribution is prohibited. If you are not the intended
recipient, please contact the sender by reply email and destroy all copies
of the original message.
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden