- Login Window (Ventana de inicio de sesión)
- Este evento se genera cuando un usuario inicia sesión a través de la ventana de inicio de sesión.
- Log Level (Nivel de registro)
- 1
- Requiere ajuste detallado.
- No
Ejemplo de AUE_lw_login
Este es un ejemplo de registro de telemetría para un evento de ventana de inicio de sesión.
{
"header": {
"time_seconds_epoch": 1657752188,
"time_milliseconds_offset": 495,
"version": 11,
"event_modifier": 0,
"event_id": 45021,
"event_name": "AUE_lw_login"
},
"host_info": {
"serial_number": "C03WG0H4HDTS",
"host_name": "Test_MacBook_Pro",
"osversion": "Version 12.4 (Build 21F79)",
"host_uuid": "8891C1E2-0AC0-4E4A-844B-EA491B14D115"
},
"identity": {
"signer_id": "com.apple.loginwindow",
"team_id_truncated": false,
"signer_id_truncated": false,
"cd_hash": "9f06a97a1b8eeb2f488e0465dd0b5b9b6dd31d48",
"team_id": "",
"signer_type": 1
},
"key": "E560C408-C6F8-45A9-A40A-4358125EA4FA",
"return": {
"error": 0,
"description": "success",
"return_value": 0
},
"subject": {
"responsible_process_id": 142,
"process_name": "/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow",
"terminal_id": {
"type": 4,
"ip_address": "0.0.0.0",
"port": 50331650
},
"effective_group_id": 0,
"user_id": 501,
"process_id": 142,
"effective_group_name": "wheel",
"effective_user_name": "root",
"user_name": "jamf",
"group_id": 20,
"group_name": "staff",
"audit_id": 501,
"audit_user_name": "jamf",
"process_hash": "19aa27e28d0b3dc526fd3d70852f73c0e7c5bb94",
"effective_user_id": 0,
"session_id": 100003,
"responsible_process_name": "/System/Library/CoreServices/loginwindow.app/Contents/MacOS/loginwindow"
}
}