ATM_ID: 1E8AECD9-80A2-1014-90C1-42B356619FB6 ID: PUQE_CFT-Atlantis_1.0/Skylight/SANITY/FS_41.006_Embedded_Device_Security/21919 TESTCASE_HEADLINE: Audit Log Entry ID 85 - McAfee Security Event - Integrity Control - Read GROUP: FEATURE: SUB_FEATURE: INPUT: 1. Admin must be logged-in into the device 2. McAfee Embedded Control must be set to Integrity Control. (Properties>Security>McAfee Embedded Control) PROCEDURE: 1. Via the CWIS navigate to the McAfee Embedded Control page. (Properties>Security>McAfee Embedded Control) 2. Export the audit log and open it with notepad,Wordpad or excel. OUTPUT: Audit log entry from around the time the test button was clicked is displayed indicating that a McAfee Security Event has occured. It should contain the following standard information: Entry # Date of the event Time of the event The following event specific information: Event ID - 85 Event Description - McAfee Security Event and the Following Entry Data: Device Name (ex. WorkCentre 7556) Device Serial Number (ex. AAA123456) Type - "Read" Breach Message (ex. Xerox Security prevented attempt to modify file 'test_read_event' by process mcafee_embedded_control_test (For more information please go to www.xerox.com/security)) PROCESS: PRIORITY: TEST_TYPE: LOE: 10 RESOURCE_HW: RESOURCE_CONSUMEABLES: RESOURCE_MEDIA: SKILL_SET: TEST_CASE_TYPE: TESTCASE_SOURCE: SPEC: [41.006.025] (FT-14212) [D2.2-*] CCSFEAT15284, [41.006.025.1] (FT-14212) [D2.2-*] CCSFEAT15284.1 SPEC_VERSION: 1.0045 SPEC_TAG: The customer will be notified only of the following security events; no other events shall be reported: Attempt to read a read protected area ATM_OWNER: ASSOCIATED_TESTCASES: TRAINING: TESTCASE_VERSION: TESTCASE_STATE: TESTCASE_PLATFORM: TESTCASE_PRODUCT: TESTCASE_APPROVALS: CDATE: 1485514520 MDATE: 1485514520 MUSER: w4y5ghrv AUTHOR: w4y5ghrv ATM_MCOMMENTS: Imported from spreadsheet HISTORY: ATM_LOCKED: ATM_REQLINK: 9B99DC88-8099-1014-95D0-6A7457619FB6 ATM_REQCOUNT: 1 FILENAME: FILEDESC: FILES: QA_TEAM: APPROVE_QE: APPROVED_QE: APPROVE_SE: APPROVED_SE: APPROVE_SPAR: APPROVED_SPAR: MFF: PLANNEDTIMESTAFF: IMPLEMENTED: DATA_LOGIC: AUTOMATABLE_NOTAUTOMATABLE: TC_WEIGHTAGE: