NEW_USER

This alert is triggered if a new user registers on the monitored network and starts using a software service.

Characteristics

Name: New user detected

Type: new objects

Status (default): disabled

Detector: SQL-based

Message

“New user *user* (*IP_address*) connected to: *software_service_name* running on server: *IP_address* (*DNS_name*).”

“Usage: *usage* B. User agent: *agent* .”

Detector parameter

This alert has no parameters.