Detections
Analytics

MS.EXO.17.1v1 - Unified Audit logging SHALL be enabled.

Information

Responding to incidents without detailed information about activities that took place slows response actions. Enabling Unified Audit logging helps ensure agencies have visibility into user actions. Furthermore, enabling the Unified Audit log is required for government agencies by OMB M-21-31.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

See the following implementation steps for enabling [Unified Audit logging](./defender.md#msdefender61v1-instructions) for additional
guidance.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12

Plugin: microsoft_azure

Control ID: a8d46d6f2058bad199a41e7b7f4525f4f6ab8dbe19fc67b1e297d3697eb963e2