I have dashboard that doesn't exist on the internet. It shows the user session activities on the dashboard for windows, gateway, and Linux. It also shows the activities via interactive actions show privilege escalation and process running. This was created to answer external audit asks based NIST 800 -53.
Would dashboard qualify for the contest or any of the super session on the .conf on the main conference floor? (I had to mask environment information)
Here is the windows audit GPO required to monitor the session correctly.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.