On Mon, 5 Jan 2015 07:21:28 -0800, Charles Mills wrote: >> For TSO, you can probe for known user ids, but you will see a lot of LOGON >> and IEA989I message in the SYSLOG. > >Only if you set a specific SLIP trap for this condition. > In the video cited:
>On Jan 2, 2015, at 3:31 PM, Mark Regan wrote: >> >> Black Hat 2013 - Mainframes: The Past Will Come to Haunt You, by a >> Philip Young and it's about an hour long. >> >> http://youtu.be/uL65zWrofvk ... the speaker opined that such probing is less likely to be detected by Security than by Operations as a spike in CPU usage. -- gil ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
