Detections
Analytics

1.1.2.4 Set 'Audit Policy: Detailed Tracking: RPC Events' to 'No Auditing'

Information

This subcategory reports remote procedure call (RPC) connection events.

Solution

Make sure 'Detailed Tracking: RPC Events' is set to no auditing.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Windows

Control ID: 50f9fc1c8a5db458d75e95c7ba924513f91acf92d754414a40f0af8a8e3aa39c