Detections
Analytics
WN25-AU-000010 - Windows Server 2025 audit records must be backed up to a different system or media than the system being audited.
Information
Protection of log data includes ensuring the log data is not accidentally lost or deleted. Audit information stored in one location is vulnerable to accidental or incidental deletion or alteration.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Establish and implement a process for backing up log data to another system or media other than the system being audited.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: AUDIT AND ACCOUNTABILITY
References: 800-53|AU-4(1), CAT|II, CCI|CCI-001851, Rule-ID|SV-278041r1180829_rule, STIG-ID|WN25-AU-000010, Vuln-ID|V-278041
Plugin: Windows
Control ID: 5ae42717afd265adf2e274c9d7ab4657ecdde279e194d8f21c076fa20130aaf4