Detections
Analytics

1.1.2.8 Set 'Audit Policy: Detailed Tracking: Process Termination' to 'No Auditing'

Information

This subcategory reports when a process terminates.

Solution

Make sure 'Detailed Tracking: Process Termination' is set to no auditing.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Windows

Control ID: 4ee1a3c80accb758180a5de506134edbf27b7a14ed26ea9e22c8428c2f01a379