Item Search

Name	Audit Name	Plugin	Category
5.2.3.4 Ensure events that modify date and time information are collected	CIS Debian Linux 10 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
5.2.3.9 Ensure discretionary access control permission modification events are collected	CIS Amazon Linux 2023 v1.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
5.2.3.9 Ensure discretionary access control permission modification events are collected	CIS Debian Linux 10 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
5.2.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Amazon Linux 2023 v1.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
5.2.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.4 Ensure events that modify date and time information are collected	CIS Amazon Linux 2 v4.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.4 Ensure events that modify date and time information are collected	CIS Debian Linux 13 v1.1.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.4 Ensure events that modify date and time information are collected	CIS Ubuntu Linux 26.04 LTS v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.4 Ensure events that modify date and time information are collected	CIS Debian Linux 12 v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.4 Ensure events that modify date and time information are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.5 Ensure events that modify sethostname and setdomainname are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.5 Ensure events that modify sethostname and setdomainname are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.5 Ensure events that modify the system's network environment are collected	CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.5 Ensure events that modify the system's network environment are collected	CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.6 Ensure events that modify /etc/issue and /etc/issue.net are collected	CIS Debian Linux 13 v1.1.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.6 Ensure events that modify /etc/issue and /etc/issue.net are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected	CIS Debian Linux 13 v1.1.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected	CIS Debian Linux 12 v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collected	CIS SUSE Linux Enterprise 16 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.8 Ensure events that modify /etc/network and /etc/networks are collected	CIS Debian Linux 12 v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.8 Ensure events that modify /etc/network and /etc/networks are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.8 Ensure events that modify the system's network environment are collected	CIS Ubuntu Linux 26.04 LTS v1.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.9 Ensure discretionary access control permission modification events are collected	CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.9 Ensure events that modify /etc/netplan are collected	CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.9 Ensure events that modify /etc/NetworkManager directory are collected	CIS Debian Linux 13 v1.1.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.18 Ensure discretionary access control permission modification events are collected	CIS Debian Linux 12 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.23 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Debian Linux 12 v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.2.3.23 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Debian Linux 12 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.4 Ensure events that modify date and time information are collected	CIS Rocky Linux 10 v1.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.5 Ensure events that modify sethostname and setdomainname are collected	CIS AlmaLinux OS 10 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.5 Ensure events that modify the system's network environment are collected	CIS Ubuntu Linux 20.04 LTS v3.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.5 Ensure events that modify the system's network environment are collected	CIS AlmaLinux OS 9 v2.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.5 Ensure events that modify the system's network environment are collected	CIS Rocky Linux 8 v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.8 Ensure events that modify /etc/sysconfig/network and /etc/NetworkManager/system-connections/ are collected	CIS Rocky Linux 10 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.8 Ensure events that modify /etc/sysconfig/network and /etc/NetworkManager/system-connections/ are collected	CIS AlmaLinux OS 10 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.9 Ensure discretionary access control permission modification events are collected	CIS Ubuntu Linux 20.04 LTS v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.9 Ensure events that modify /etc/NetworkManager directory are collected	CIS AlmaLinux OS 10 v1.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Ubuntu Linux 20.04 LTS v3.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Rocky Linux 8 v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Rocky Linux 9 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Ubuntu Linux 20.04 LTS v3.0.0 L2 Server	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.3.3.20 Ensure discretionary access control permission modification events setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr collected	CIS AlmaLinux OS 10 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY
6.3.3.26 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Rocky Linux 10 v1.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.4.3.5 Ensure events that modify the system's network environment are collected	CIS Debian Linux 11 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
6.4.3.14 Ensure events that modify the system's Mandatory Access Controls are collected	CIS Debian Linux 11 v2.0.0 L2 Workstation	Unix	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
17.7.3 Ensure 'Audit Authorization Policy Change' is set to include 'Success'	CIS Microsoft Windows 8.1 v2.4.1 L1	Windows	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT
17.7.5 Ensure 'Audit Other Policy Change Events' is set to include 'Failure'	CIS Microsoft Windows 8.1 v2.4.1 L1	Windows	AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

Detections

Analytics

Item Search