User Access Logs - Unidentified User
I have needed to investigate for unauthorised user access by an employee and found the <Session Security Report> which is somewhat useful.
However, when I check the log it contains entries for (SYSTEM) as the UserID which is confusing and not so helpful.
What is also concerning is that this unidentified (SYSTEM) user seemed to have access to files at unusual hours.
Does anyone else have any experience of this?
Can anyone help me understand how to intepret this?
Hi MCSydney,
Aside from the information provided in the journal security audit report, if there are reports being printed or exported. The security audit report primarily focuses on providing transparency regarding user activities within the system, such as login attempts, data modifications, and other relevant actions.
Feel free to post again anytime if you require further assistance.
If my response has answered your inquiry, please click "Accept as Solution" to assist other users in finding this information.Best regards,
Doreen