• Type: CUSTOMER
• Severity:  WARNING
• Protection against: HACKING

This Customer Check signals when the password of the Emergency Admin has been changed.

Why this check?

The Emergency Admin account exists to be used only in emergencies. It is appropriate that the use and modifications of that account are monitored. Therefore, we also look at password changes. These can happen for legitimate reasons but may also indicate misuse.

What possible outcomes does the check have?

This check has two possible outcomes. In Attic, this is reflected as follows:

• Okay: No changes since the last check.
• Warning: The password of the Emergency Admin has been changed.

How should this be followed up?

If the output is Warning, we advise double-checking the changes. If you suspect that the change is unauthorized, please contact us for further steps.