Recognises privileged access not logged
A privileged role with no log source covering its sessions.
Can AI do this?
Not settled yet The benchmark tested this, but the models' answers do not settle yet whether they master it. 0 of 4 models in the current benchmark master it.
| Model | Tier | Probability of mastery | Status |
|---|---|---|---|
| gemini-4-argon | Flagship | 66% | Not shown |
| gemini-3.5-flash-lite | Low cost | 68% | Not shown |
| gpt-6-luna | Low cost | 64% | Not shown |
| claude-haiku-5-5 | Low cost | 69% | Not shown |
Mastered means a probability of at least 90% that the model has this knobit, estimated from its graded answers. “Not shown” means the answers do not settle it either way. How the models are tested.
What it looks like in practice
Expected result: The role and the log source it needs
How it is assessed: Flags the deficient case and passes the acceptable one. Deficient: RL-006 DBA: no log source lists privileged_login for AS-001 Acceptable: LS for DBA sessions on every database
Also known as: Privileged access not logged
Related knobits
Builds on
All 16 knobits of Monitor and audit access.
Source: Review checklist 05-monitoring-audit, row 1 (27002 8.15; PCI 10.2.1.2)