ATM_ID: 4CDA9647-6D18-1014-9560-36AD56619FB6 ID: Security_Sanity/Securty_Testcase_FPR/Security_Testcases/20259 TESTCASE_HEADLINE: Audit Log Entry ID 85 - McAfee Security Event - Enhanced Security - Modify GROUP: FEATURE: SUB_FEATURE: INPUT: PROCEDURE: Process # Test Procedure Expected Results 1. 1. Via the CWIS navigate to the McAfee Embedded Control page. (Properties>Security>McAfee Embedded Control) 2. Export the audit log and open it with notepad Verify that an Audit log entry from around the time the test button was clicked is displayed indicating that a McAfee Security Event has occured. It should contain the following standard information: Entry # Date of the event Time of the event The following event specific information: Event ID - 85 Event Description - McAfee Security Event and the Following Entry Data: Device Name (ex. WorkCentre 7556) Device Serial Number (ex. AAA123456) Type - "Modify" Breach Message (ex. Xerox Security prevented attempt to modify file 'test_modify_event' by process mcafee_embedded_control_test (For more information please go to www.xerox.com/security)) 2. wordpad 3. or excel. PROCESS: PRIORITY: TEST_TYPE: LOE: RESOURCE_HW: RESOURCE_CONSUMEABLES: RESOURCE_MEDIA: SKILL_SET: TEST_CASE_TYPE: TESTCASE_SOURCE: SPEC: SPEC_VERSION: SPEC_TAG: ATM_OWNER: ASSOCIATED_TESTCASES: TRAINING: TESTCASE_VERSION: TESTCASE_STATE: TESTCASE_PLATFORM: TESTCASE_PRODUCT: TESTCASE_APPROVALS: CDATE: 1476784746 MDATE: 1476784746 MUSER: q50yrg15 AUTHOR: q50yrg15 ATM_MCOMMENTS: Imported from spreadsheet HISTORY: ATM_LOCKED: ATM_REQLINK: ATM_REQCOUNT: 0 FILENAME: FILEDESC: FILES: QA_TEAM: APPROVE_QE: APPROVED_QE: APPROVE_SE: APPROVED_SE: APPROVE_SPAR: APPROVED_SPAR: MFF: PLANNEDTIMESTAFF: IMPLEMENTED: DATA_LOGIC: AUTOMATABLE_NOTAUTOMATABLE: TC_WEIGHTAGE: