Detections
Analytics

Item Search

NameAudit NamePluginCategory
3.1 Ensure CloudTrail is enabled in all regions - IsLoggingCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
3.1 Ensure CloudTrail is enabled in all regions - IsMultiRegionTrailCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
4.1.1.2 Ensure auditd service is enabledCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.2.1.1 Ensure rsyslog Service is enabled - /etc/sysconfig/syslogCIS SUSE Linux Enterprise Server 11 L1 v2.1.0Unix
4.2.1.1 Ensure rsyslog Service is enabled - /etc/sysconfig/syslogCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
4.2.1.2 Ensure logging is configuredCIS Oracle Linux 6 Workstation L1 v1.1.0Unix
4.2.1.2 Ensure logging is configuredCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
4.2.2.2 Ensure logging is configuredCIS Distribution Independent Linux Server L1 v1.1.0Unix
4.2.3 Ensure rsyslog or syslog-ng is installedHuawei EulerOS 2 Workstation L1 v1.0Unix
4.2.3 Ensure rsyslog or syslog-ng is installedCIS Distribution Independent Linux Server L1 v1.1.0Unix
4.2.3 Ensure rsyslog or syslog-ng is installedCIS Oracle Linux 6 Server L1 v1.1.0Unix
4.2.3 Ensure rsyslog or syslog-ng is installedCIS Oracle Linux 6 Workstation L1 v1.1.0Unix
5.3 Ensure 'ETW Logging' is enabled - Default W3CCIS IIS 8.0 v1.5.0 Level 1Windows
9.1.7 (L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\domainfw.log'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.1.8 (L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.1.10 (L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.2.7 (L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\privatefw.log'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.2.8 (L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.2.10 (L1) Ensure 'Windows Firewall: Private: Logging: Log successful connections' is set to 'Yes'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 MS L1 v1.3.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BL + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BLWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BLWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Windows Server 2012 MS L1 v2.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v1.3.0Windows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L2 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L2 + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + NGWindows