Dear All,
Would like to understand if it is possible to turn on audit logging for Symantec ATP ?
Have went through the Installation Guide and also the Administration Guide, but are not able to find any information to turn on audit logging for the Symantec ATP.
The requirement here is to have a means to collect logs on events like login events, power on/off event, system events, and etc. I believe this is a common security requirements especially for a security-centric appliance.
Understand that it is possible to connect to syslog server and start piping syslog, however it seems like the syslogs only contains ATP Events (e.g.: conviction events, alerts, etc).
So, is there any way to turn on audit logging for Symantec ATP ?
Thank you.
Regards,
W.L