Detections
Analytics

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The default trace provides audit logging of database activity including account creations, privilege elevation and execution of DBCC commands.

Default trace provides valuable audit information regarding security-related activities on the server.

Solution

Run the following T-SQL command:

EXECUTE sp_configure 'show advanced options', 1;
RECONFIGURE;
EXECUTE sp_configure 'default trace enabled', 1;
RECONFIGURE;
GO
EXECUTE sp_configure 'show advanced options', 0;
RECONFIGURE;

See Also

https://workbench.cisecurity.org/benchmarks/24175

Item Details

References: CSCv7|6.2, CSCv7|6.3

Plugin: MS_SQLDB

Control ID: 72de9643f65293b2ab7696eb3d77125c973cc65f4571a6caa752df91adf32b9f