A brute-force attack is being attempted on the HANA Database targeting the 'SYSTEM' user and other critical users through password trial attempts.
The 'SYSTEM' user is the most powerful account on the HANA DB, so activities and password changes made by this user should be closely monitored.
Defencemore OCA's H003 control lists all failed login attempts to the system. The H006 control tracks and reports password change activities on the database. This ensures that any password change for the 'SYSTEM' user is reported, and failed login attacks are highlighted.