sap security audit log configuration change

Google SecOps@GoogleSecOps

•updated Apr 20, 2026•0•0•3

Detects unauthorized modifications to the SAP Security Audit Log configuration by monitoring specific SAP system message codes (AUE, AUF, AUI, AUJ, FU0, E05) associated with audit trail changes, excluding known administrative accounts.