Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: LEM Rule Assistance

$
0
0

This is doable, and you may want to check out this video because I give more details on making e-mail templates and how they work:

 

 

But generally speaking, a template structured like this:

 

User $DestinationLogonID has been added to the $GroupName group.  This change was made by $SourceAccount.

 

A rule correlating off NewGroupMember events would have the information you want to create this e-mail.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>