Detections
Analytics

MS.EXO.16.1v1 - At a minimum, the following alerts SHALL be enabled:

Information

Potentially malicious or service impacting events may go undetected without a means of detecting these events. Setting up a mechanism to alert administrators to events listed above draws attention to them to help minimize impact to users and the agency.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Any product meeting the requirements outlined in this baseline policy may be
used. If the agency uses Microsoft 365 alert policies, see the following implementation steps for
[enabling alerts](./defender.md#msdefender51v1-instructions) for additional
guidance.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4(5)

Plugin: microsoft_azure

Control ID: f4406a643f554d0fd987c4c83d55b61c81b699fff1dd3d8973d9d98a74999e9e