SAP LogServ - HANA DB - Deactivation of Audit Trail
Identifies deactivation of HANA DB audit log. Source Action: Deactivate Audit Log in HANA DB security defnitions. *Data Sources: SAP LogServ - HANA DB (Syslog)*
Detection logic
Detection requirements
- Log source product
- saplogserv
- Log source service
- syslog
MITRE ATT&CK mappings
Not mapped to ATT&CK.
No references are available for this detection.
From the source
- At source
- Open at source
- Upstream identifier
- 8fb9fb88-693f-4906-8be2-4bb9771418fc
- Tagged by the source as
- DefenseEvasionLateralMovementPersistence
Licence
- Published under
- MIT LicenseRead the licence
- Attribution
- Required
- Obtained under
- MITRead the origin licence
Authorship
- Published
- Sep 1, 2026
- Version
- 1