• Virtually all multiuser operating systems include
accounting software that collects information on user
activity.
• The advantage of using this information is that no
additional collection software is needed.
• The disadvantage is that the native audit records may
not contain the needed information or may not contain
it in a convenient form.