Can anyone assist me in identifying who has local account login credentials (username and password)? I know how to cut off local account access to ISC and believe resetting identity might work, but I’m unsure who currently has local account access.
Hi @ganesh-kandel5050, local access mean logging into your ISC environment. check the access logs to see who has recently logged in. you can also integrate logs from ISC to splunk or any logging tools. this way it enables audit information or user activity data can be extracted from splunk
That’s not what OP is asking though.
Log only gives you people who has logged in, not necessarily “who has local account login credentials (username and password)”. (i.e. Difference of having something vs using something)
1 Like
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.