Item Search

NameAudit NamePluginCategory
1.5.4 Configure Logging TimestampsCIS Cisco NX-OS v1.2.0 L1Cisco

AUDIT AND ACCOUNTABILITY

3.2.4 Ensure suspicious packets are logged - net.ipv4.conf.default.log_martians = 1CIS Debian 8 Server L1 v2.0.2Unix

AUDIT AND ACCOUNTABILITY

4.1.1.6 Ensure remote rsyslog messages are only accepted on designated log hostsCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

4.1.3.7 Ensure kernel module loading and unloading is collected - auditctl init_moduleCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

4.1.3.7 Ensure kernel module loading and unloading is collected - auditctl insmodCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

4.1.3.7 Ensure kernel module loading and unloading is collected - init_moduleCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

4.1.3.7 Ensure kernel module loading and unloading is collected - rmmodCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

4.1.3.9 Ensure file deletion events by users are collected - auditctl (64-bit)CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

4.2.1.5 Ensure rsyslog is not configured to receive logs from a remote clientCIS Debian 9 Workstation L1 v1.0.1Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hostsCIS Fedora 19 Family Linux Server L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hostsCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

4.2.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Fedora 28 Family Linux Server L1 v2.0.0Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

4.2.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Fedora 28 Family Linux Workstation L1 v2.0.0Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Debian Linux 10 v2.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.5 Ensure journald is not configured to send logs to rsyslogCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

5.1.1.6 Ensure rsyslog is not configured to receive logs from a remote clientCIS FreeBSD 14 v1.0.1 L1Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.7 Ensure rsyslog is not configured to receive logs from a remote clientCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.7 Ensure rsyslog is not configured to receive logs from a remote clientCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.1.7 Ensure rsyslog is not configured to receive logs from a remote clientCIS Red Hat Enterprise Linux 7 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Amazon Linux 2023 v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS Oracle Linux 7 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.1.2.1.4 Ensure journald is not configured to receive logs from a remote clientCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

5.2.1.1 Ensure auditd is installedCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

5.2.2.3 Ensure system is disabled when audit logs are fullCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

5.2.2.3 Ensure system is disabled when audit logs are fullCIS Debian Linux 10 v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

5.2.2.3 Ensure system is disabled when audit logs are fullCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.1.1.3 Ensure journald Compress is configuredCIS Amazon Linux 2 v4.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.1.1.3 Ensure journald is configured to send logs to rsyslogCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

6.1.1.3 Ensure journald is configured to send logs to rsyslogCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

6.1.1.3 Ensure journald is configured to send logs to rsyslogCIS AlmaLinux OS 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

6.1.1.3 Ensure journald is configured to send logs to rsyslogCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.1.1 Ensure auditd packages are installedCIS Debian Linux 13 v1.1.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.2.1.1 Ensure auditd packages are installedCIS Debian Linux 13 v1.1.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.2.1.3 Ensure auditing for processes that start prior to auditd is enabledCIS Ubuntu Linux 24.04 LTS v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.1.3 Ensure auditing for processes that start prior to auditd is enabledCIS Debian Linux 12 v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.2.4 Ensure system warns when audit logs are low on spaceCIS Ubuntu Linux 22.04 LTS v3.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.2.3.15 Ensure successful and unsuccessful attempts to use the chcon command are collectedCIS Amazon Linux 2 v4.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.3.23 Ensure login and logout events are collectedCIS Debian Linux 13 v1.1.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.8 Ensure That 'cloudsql.enable_pgaudit' Database Flag for each Cloud Sql Postgresql Instance Is Set to 'on' For Centralized LoggingCIS Google Cloud Platform Foundation v5.0.0 L1GCP

AUDIT AND ACCOUNTABILITY

6.3.1.1 Ensure auditd packages are installedCIS Ubuntu Linux 20.04 LTS v3.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.2.4 Ensure system warns when audit logs are low on spaceCIS Ubuntu Linux 20.04 LTS v3.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.2.4 Ensure system warns when audit logs are low on spaceCIS Ubuntu Linux 20.04 LTS v3.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3.12 Ensure login and logout events are collectedCIS Oracle Linux 8 v4.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.12 Ensure login and logout events are collectedCIS AlmaLinux OS 8 v4.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.23 Ensure login and logout events are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.4.1.1 Ensure auditd packages are installedCIS Debian Linux 11 v2.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.4.2.4 Ensure system warns when audit logs are low on spaceCIS Debian Linux 11 v2.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY