Item Search

NameAudit NamePluginCategory
3.1 Ensure detailed logging is enabledCIS NGINX v3.0.0 L1 LoadbalancerUnix

AUDIT AND ACCOUNTABILITY

3.1.3 Set Diagnostic Logging to Capture Errors and Warnings (DIAGLEVEL)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

AUDIT AND ACCOUNTABILITY

3.1.19 Ensure 'debug_pretty_print' is enabledCIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.24 Ensure 'log_line_prefix' is set correctlyCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.24 Ensure 'log_line_prefix' is set correctlyCIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.25 Ensure 'log_statement' is set correctlyCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.25 Ensure 'log_statement' is set correctlyCIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.26 Ensure 'log_timezone' is set correctlyCIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

5.1.17 Ensure sshd MaxAuthTries is configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

5.2.3 Ensure sudo log file existsCIS Red Hat Enterprise Linux 8 v4.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

5.2.4 Ensure sudo log file existsCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

5.3 Ensure Critical Packages Are AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

AUDIT AND ACCOUNTABILITY

5.4 Ensure All Export Activities Are AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

AUDIT AND ACCOUNTABILITY

5.5 Ensure The Use Of SYS* Privileges Is AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

6.1.1.2 Ensure Diagnostic Setting Captures Appropriate CategoriesCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

AUDIT AND ACCOUNTABILITY

6.1.2 Ensure sudo logging is activeCIS IBM AIX 7 v1.2.0 L2Unix

AUDIT AND ACCOUNTABILITY

6.1.2.1 Ensure that Activity Log Alert Exists for Create Policy AssignmentCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

AUDIT AND ACCOUNTABILITY

6.1.2.4 Ensure that Activity Log Alert Exists for Delete Network Security GroupCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

AUDIT AND ACCOUNTABILITY

6.1.2.9 Ensure that Activity Log Alert Exists for Create or Update Public IP Address ruleCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

AUDIT AND ACCOUNTABILITY

6.1.2.10 Ensure that Activity Log Alert Exists for Delete Public IP Address ruleCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

AUDIT AND ACCOUNTABILITY

6.2.1 Ensure 'Log_error_verbosity' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'DEFAULT' or StricterCIS Google Cloud Platform Foundation v5.0.0 L2GCP

AUDIT AND ACCOUNTABILITY

6.2.3 Ensure That the 'Log_disconnections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'CIS Google Cloud Platform Foundation v5.0.0 L1GCP

AUDIT AND ACCOUNTABILITY

6.2.6 Ensure 'Log_min_error_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'Error' or StricterCIS Google Cloud Platform Foundation v5.0.0 L1GCP

AUDIT AND ACCOUNTABILITY

6.3.2 Ensure filesystem integrity is regularly checkedCIS Oracle Linux 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.2 Ensure filesystem integrity is regularly checkedCIS Red Hat Enterprise Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3 Ensure cryptographic mechanisms are used to protect the integrity of audit toolsCIS Oracle Linux 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3 Ensure cryptographic mechanisms are used to protect the integrity of audit toolsCIS Red Hat Enterprise Linux 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3.3 Ensure events that modify the sudo log file are collectedCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.3 Ensure events that modify the sudo log file are collectedCIS AlmaLinux OS 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.6 Ensure use of privileged commands are collectedCIS Red Hat Enterprise Linux 8 v4.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.22 Ensure the running and on disk configuration is the sameCIS Red Hat Enterprise Linux 8 v4.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

7.1 Application specific loggingCIS Apache Tomcat 11 v1.0.0 L2Unix

AUDIT AND ACCOUNTABILITY

7.1 Application specific loggingCIS Apache Tomcat 9 L2 v1.2.0Unix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties filesCIS Apache Tomcat 10.1 v1.1.0 L1Unix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler exists in web applicationCIS Apache Tomcat 9 L1 v1.2.0Unix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler exists inin defaultCIS Apache Tomcat 9 L1 v1.2.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler logging is enabled in defaultCIS Apache Tomcat 10 L1 v1.1.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler logging is enabled in defaultCIS Apache Tomcat 9 L1 v1.2.0Unix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if org.apache.juli.FileHandler logging is enabled in web applicationCIS Apache Tomcat 10 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if org.apache.juli.FileHandler logging is enabled in web applicationCIS Apache Tomcat 10 L1 v1.1.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

7.2 Specify file handler in logging.properties files - check if org.apache.juli.FileHandler logging is enabled in web applicationCIS Apache Tomcat 9 L1 v1.2.0Unix

AUDIT AND ACCOUNTABILITY

7.3 Ensure className is set correctly in context.xmlCIS Apache Tomcat 10 L2 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

7.3 Ensure className is set correctly in context.xmlCIS Apache Tomcat 11 v1.0.0 L2Unix

AUDIT AND ACCOUNTABILITY

7.3 Ensure className is set correctly in context.xmlCIS Apache Tomcat 9 L2 v1.2.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

8.1.5.2 Ensure Advanced Threat Protection Alerts for Storage Accounts Are MonitoredCIS Microsoft Azure Foundations v6.0.0 L2microsoft_azure

AUDIT AND ACCOUNTABILITY

10.18 Use the logEffectiveWebXml and metadata-complete settings for deploying applications in productionCIS Apache Tomcat 10.1 v1.1.0 L1Unix

AUDIT AND ACCOUNTABILITY

17.1.3 Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)CIS Microsoft Windows Server 2019 v5.0.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY

17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

17.6.4 Ensure 'Audit Removable Storage' is set to 'Success and Failure'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

17.7.5 Ensure 'Audit Other Policy Change Events' is set to include 'Failure'CIS Microsoft Windows Server 2019 v5.0.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY