Hi, I think type 65 (ICF delete activity) is the one you're looking for.
Gerrit. "Chiam, Susan Mee-Shia" <[EMAIL PROTECTED]> Verzonden door: IBM Mainframe Discussion List <[email protected]> 21-07-2005 13:09 Antwoord a.u.b. aan IBM Mainframe Discussion List <[email protected]> Aan [email protected] Cc Onderwerp SMF records Hi listers, What SMF records should I be looking if I want to find if someone has deleted an alias for a user? I have downloaded DAF and it is not giving me what I want to find (for security team). Any ideas? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify the system manager. ********************************************************************** ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
