General Data Protection Regulation (GDPR) Compliance Reports

Enterprises located in the EU or handling EU citizens' personal data, will need to comply with the General Data Protection and Regulation (GDPR). The GDPR comes into effect on May 25, 2018. This compliance mandate governs the security of personal data at all its various stages—at rest, in use, and in transit. It also outlines that enterprises must get explicit consent before collecting individuals' personal data and insists that enterprises deploy technical measures to:

• Audit data access and flow across their entire network.
• Detect data breaches within 72 hours of their occurrence.
• Conduct proper post-breach activities such as generating an incident report or automatically remediating a breach.

EventLog Analyzer can help enterprises meet the GDPR's data security requirements with its reporting and search features. With predefined GDPR report templates, EventLog Analyzer helps security administrators and data protection officers audit all activities happening in systems that store personal data and changes to the personal data itself. It can also help your enterprise submit review reports to supervisory authorities.

ARTICLE 5(1B,1F), 32(1D) - Object Access

• Object Accessed
• Object Created
• Object Modified
• Object Deleted
• Object Handled

ARTICLE 5 (1B,1F) - Logon

• Successful User Logons
• Successful User Logoffs
• Unsuccessful User Logons
• Terminal Service Session
• Logon Reports
• Local Logon Logoff Reports

ARTICLE 5 (1B,1F) - Policy Changes

• User Policy Changes
• Domain Policy Changes
• Audit Policy Changes
• Policy Changes

ARTICLE 5 (1B,1F) - Account Logon

• Successful User Account Validation
• Unsuccessful User Account Validation

ARTICLE 5 (1B,1F) - User Access

• Individual User Action

ARTICLE 32(1B) - Account Management

• User Account Changes
• Computer Account Changes
• User Group Changes
• Account Creation
• User Management
• Group Management
• Computer Management
• OU Management
• GPO Management

ARTICLE 5(1D,1F),32(1B,1D) - MSSQL DDL Changes

• MSSQL Database Created
• MSSQL Database Deleted
• MSSQL Database Modified
• MSSQL Table Created
• MSSQL Table Dropped
• MSSQL Table Modified
• MSSQL Procedure Created
• MSSQL Procedure Deleted
• MSSQL Procedure Modified
• MSSQL Schema Created
• MSSQL Schema Dropped
• MSSQL Schema Modified

ARTICLE 5(1D,1F),32(1B,1D)- MSSQL DML Changes

• MSSQL Selected Table
• MSSQL Inserted Table
• MSSQL Updated Table
• MSSQL Deleted Table
• MSSQL Execute Command
• MSSQL Receive Command
• MSSQL Selected Schema
• MSSQL Inserted Schema
• MSSQL Updated Schema
• MSSQL Deleted Schema

ARTICLE 5(1B,1F) 32(1D) - MSSQL Security Changes

• Privilege Abuse
• Unauthorized Copy
• Account Lockouts
• Storage Media Exposure
• SQL Injection
• Denial Of Service

ARTICLE 5(1F),32(1D) - MSSQL Account Changes

• MSSQL User Created
• MSSQL User Deleted
• MSSQL User Modified
• MSSQL Login Created
• MSSQL Login Deleted
• MSSQL Login Modified
• MSSQL Role Created
• MSSQL Role Deleted
• MSSQL Role Modified
• MSSQL Credentials Created
• MSSQL Credentials Deleted
• MSSQL Credentials Modified
• MSSQL Enabled Users
• MSSQL Disabled Users

ARTICLE 5(1D,1F),32(1B,1D) - ORACLE DDL Changes

• ORACLE Database Created
• ORACLE Database Deleted
• ORACLE Database Modified
• ORACLE Table Created
• ORACLE Table Deleted
• ORACLE Table Modified
• ORACLE Procedure Created
• ORACLE Procedure Deleted
• ORACLE Procedure Modified
• ORACLE Cluster Created
• ORACLE Cluster Deleted
• ORACLE Cluster Modified

ARTICLE 5(1D,1F),32(1B,1D) - ORACLE DML Changes

• ORACLE Selected Table
• ORACLE Inserted Table
• ORACLE Updated Table
• ORACLE Deleted Table
• ORACLE Altered Procedure
• ORACLE Executed Procedure
• ORACLE Trigger Created
• ORACLE Trigger Deleted
• ORACLE Trigger Modified

ARTICLE 5(1B,1F) 32(1D) - ORACLE Security Changes

• ORACLE SQL Injection
• ORACLE Connect Events
• ORACLE Failed Logons
• ORACLE Account Lockouts
• ORACLE Expired Password
• ORACLE Denial Of Service

ARTICLE 5(1F),32(1D) - ORACLE Account Changes

• ORACLE Profile Created
• ORACLE Profile Deleted
• ORACLE Profile Modified
• ORACLE User Created
• ORACLE User Deleted
• ORACLE User Modified
• ORACLE Role Created
• ORACLE Role Deleted
• ORACLE Role Modified
• ORACLE Granted Roles
• ORACLE System Grant
• ORACLE System Revoke

ARTICLE 5(1D,1F),32(1B,1D) - Printer Auditing

• Documents Printed
• Documents Deleted
• Timed out Documents
• Moved Documents
• Resumed Documents
• Paused Documents
• Corrupted Documents
• Changed Documents
• Insufficient Privilege to Print

ARTICLE 32(1D,2) - Firewall Reports

• Firewall Denied Connections
• Firewall Attack Reports
• Firewall Logons
• Firewall Failed Logons
• VPN Logons
• VPN Failed Logons