1.3.11 Audit Policy: Detailed Tracking: Process Creation

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This control defines whether the audit is activated when a process is created and the name of the program that created it.

Solution

Make sure 'Audit Policy: Detailed Tracking: Process Creation' is configured to Success (minumum).

See Also

https://workbench.cisecurity.org/files/10

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12, CCE|CCE-2002-4, CCE|CCE-2375-4

Plugin: Windows

Control ID: 4f51d6f26fb22352349bc1c9456de932c4d57a95741af77ed0f124abd1760c80