Capture non-Endevor updates ?

[John Scott]

Has anyone done this ?

For Endevor controlled datasets I mean those libraries updated by Endevor processors at plus the the remote target libraries updated by Endevor shipment.

Yes, dataset security will ensure only Endevor updates these members but looking for belt and braces report of compromises !

PDSMAN can cut SMF updates at member name and report user but may not be useable for PDSE and may not report every kind of access ?

Reporting members without an Endevor footprint could be a check but not tell me the culprit plus valid pre-Endevor modules without footprints would appear as false exceptions ?   

 

[Vaclav Brunnhofer]

Hi John,

Are you aware of a product called CA Compliance Event Manager 6.0, which is included in the Endevor package on support.broadcom.com? Every Endevor customer is eligible for a limited licence of this product, that allows you to monitor data set access. It is meant exactly for cases like yours, when you need to monitor the access on top of the regular security. In case you'd be interested, I will contact the team that could guide you through the inital steps. 

Vaclav