| Event Id | 3264 |
| Source | Intrusion |
| Description | Intrusion detected: Unthoruzed user It is highly possible that user is persistantly trying to access file and operation is not allowed. |
| Event Information | This event is logged by Eventcorrelator as part of the Default Instrution Detection Alarm feature ,User is persistantly Trying to access resources which not permitted. It is highly possible that user is persistantly trying to access file and operation is not allowed. It must be verified that Which user and from which system he is trying to access the resources. Generate a report using eventTracker console->view histroy->select event id 560 connections and select the involved computer name. Analyse the report from where file access is originated and who is the user. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.