Detections
Analytics

Item Search

NameAudit NamePluginCategory
APPL-11-001029 - The macOS system must allocate audit record storage capacity to store at least one week's worth of audit records when audit records are not immediately sent to a central audit record storage facility.DISA STIG Apple macOS 11 v1r3Unix
APPL-12-001029 - The macOS system must allocate audit record storage capacity to store at least one week's worth of audit records when audit records are not immediately sent to a central audit record storage facility.DISA STIG Apple macOS 12 v1r3Unix
APPL-12-001029 - The macOS system must allocate audit record storage capacity to store at least one week's worth of audit records when audit records are not immediately sent to a central audit record storage facility.DISA STIG Apple macOS 12 v1r4Unix
APPL-13-001029 - The macOS system must allocate audit record storage capacity to store at least seven days of audit records when audit records are not immediately sent to a central audit record storage facility.DISA STIG Apple macOS 13 v1r1Unix
CASA-ND-000920 - The Cisco ASA must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements - maximumDISA STIG Cisco ASA NDM v1r3Cisco
CASA-ND-000920 - The Cisco ASA must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements - minimumDISA STIG Cisco ASA NDM v1r1Cisco
CISC-ND-000980 - The Cisco switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.DISA STIG Cisco IOS XE Switch NDM v1r1Cisco
ESXI-67-000045 - The ESXi host must enable a persistent log location for all locally stored logs.DISA STIG VMware vSphere 6.7 ESXi v1r2VMware
FGFW-ND-000105 - The FortiGate device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements. - diskfull overwriteDISA Fortigate Firewall NDM STIG v1r1FortiGate
FGFW-ND-000105 - The FortiGate device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements. - diskfull overwriteDISA Fortigate Firewall NDM STIG v1r3FortiGate
FGFW-ND-000105 - The FortiGate device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements. - max-log-file-sizeDISA Fortigate Firewall NDM STIG v1r3FortiGate
IISW-SV-000145 - The IIS 8.5 web server must use a logging mechanism that is configured to allocate log record storage capacity large enough to accommodate the logging requirements of the IIS 8.5 web server - Log PathDISA IIS 8.5 Server v1r9Windows
MD3X-00-000620 - MongoDB must allocate audit record storage capacity in accordance with site audit record storage requirements.DISA STIG MongoDB Enterprise Advanced 3.x v1r1Unix
MD4X-00-004900 - MongoDB must allocate audit record storage capacity in accordance with site audit record storage requirements.DISA STIG MongoDB Enterprise Advanced 4.x v1r1 OSUnix
Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r4 LowUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r5 ModerateUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - All ProfilesUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r5 HighUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r5 LowUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - CNSSI 1253Unix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r4 HighUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Retention to a Minimum of Seven DaysNIST macOS Monterey v1.0.0 - 800-53r4 ModerateUnix

AUDIT AND ACCOUNTABILITY

MYS8-00-009600 - The MySQL Database Server 8.0 must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.DISA Oracle MySQL 8.0 v1r4 DBMySQLDB
OL08-00-030660 - OL 8 must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.DISA Oracle Linux 8 STIG v1r4Unix
PHTN-30-000055 - The Photon operating system must configure auditd to keep five rotated log files.DISA STIG VMware vSphere 7.0 Photon OS v1r2Unix
PHTN-30-000056 - The Photon operating system must configure auditd to keep logging in the event max log file size is reached.DISA STIG VMware vSphere 7.0 Photon OS v1r2Unix
PHTN-67-000057 - The Photon operating system must configure auditd to keep five rotated log files.DISA STIG VMware vSphere 6.7 Photon OS v1r5Unix
PHTN-67-000059 - The Photon operating system must configure a cron job to rotate auditd logs daily - bashDISA STIG VMware vSphere 6.7 Photon OS v1r1Unix
PHTN-67-000059 - The Photon operating system must configure a cron job to rotate auditd logs daily - bashDISA STIG VMware vSphere 6.7 Photon OS v1r5Unix
RHEL-08-030602 - RHEL 8 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon - /etc/default/grubDISA Red Hat Enterprise Linux 8 STIG v1r9Unix
RHEL-08-030602 - RHEL 8 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon - grub2-editenvDISA Red Hat Enterprise Linux 8 STIG v1r3Unix
RHEL-08-030602 - RHEL 8 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon - grub2-editenvDISA Red Hat Enterprise Linux 8 STIG v1r8Unix
RHEL-08-030602 - RHEL 8 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon - grub2-editenvDISA Red Hat Enterprise Linux 8 STIG v1r6Unix
RHEL-08-030602 - RHEL 8 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon - grub2-editenvDISA Red Hat Enterprise Linux 8 STIG v1r7Unix
RHEL-08-030660 - RHEL 8 must allocate audit record storage capacity to store at least one week of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix
RHEL-08-030660 - RHEL 8 must allocate audit record storage capacity to store at least one week of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA Red Hat Enterprise Linux 8 STIG v1r6Unix
SLES-15-030660 - The SUSE operating system must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.DISA SLES 15 STIG v1r11Unix
SLES-15-030660 - The SUSE operating system must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility.DISA SLES 15 STIG v1r10Unix
UBTU-20-010215 - The Ubuntu operating system must allocate audit record storage capacity to store at least one weeks' worth of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA STIG Ubuntu 20.04 LTS v1r9Unix
UBTU-20-010215 - The Ubuntu operating system must allocate audit record storage capacity to store at least one weeks' worth of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA STIG Ubuntu 20.04 LTS v1r1Unix
UBTU-20-010215 - The Ubuntu operating system must allocate audit record storage capacity to store at least one weeks' worth of audit records, when audit records are not immediately sent to a central audit record storage facility.DISA STIG Ubuntu 20.04 LTS v1r10Unix
WN11-AU-000500 - The Application event log size must be configured to 32768 KB or greater.DISA Windows 11 STIG v1r4Windows
WN11-AU-000500 - The Application event log size must be configured to 32768 KB or greater.DISA Windows 11 STIG v1r2Windows
WN11-AU-000510 - The System event log size must be configured to 32768 KB or greater.DISA Windows 11 STIG v1r4Windows
WN22-CC-000270 - Windows Server 2022 Application event log size must be configured to 32768 KB or greater.DISA Windows Server 2022 STIG v1r3Windows
WN22-CC-000280 - Windows Server 2022 Security event log size must be configured to 196608 KB or greater.DISA Windows Server 2022 STIG v1r3Windows
WN22-CC-000280 - Windows Server 2022 Security event log size must be configured to 196608 KB or greater.DISA Windows Server 2022 STIG v1r4Windows
WN22-CC-000280 - Windows Server 2022 Security event log size must be configured to 196608 KB or greater.DISA Windows Server 2022 STIG v1r1Windows
WN22-CC-000290 - Windows Server 2022 System event log size must be configured to 32768 KB or greater.DISA Windows Server 2022 STIG v1r1Windows
WN22-CC-000290 - Windows Server 2022 System event log size must be configured to 32768 KB or greater.DISA Windows Server 2022 STIG v1r3Windows