Detections
Analytics

Item Search

NameAudit NamePluginCategory
1.5.1 Ensure Syslog Logging is configured - logging server/source-interfaceCIS Cisco NX-OS L2 v1.0.0Cisco
5.3.3 Ensure sudo log file existsCIS Debian Linux 11 Server L1 v1.0.0Unix
5.7.2 Enable Linux auditd loggingCIS Google Kubernetes Engine (GKE) v1.3.0 L2GCP
6.2.3 Ensure That the 'Log_disconnections' Database Flag for Cloud SQL PostgreSQL Instance Is Set to 'On'CIS Google Cloud Platform v2.0.0 L1GCP
6.2.11 Ensure 'log_executor_stats' database flag for Cloud SQL PostgreSQL instance is set to 'off'CIS Google Cloud Platform v1.1.0 L2GCP
6.2.12 Ensure 'log_statement_stats' database flag for Cloud SQL PostgreSQL instance is set to 'off'CIS Google Cloud Platform v1.1.0 L2GCP
17.1.1 Ensure 'Audit Credential Validation' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v2.0.0 L1Windows
17.1.2 Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.1.2 Ensure 'Audit Kerberos Authentication Service' is set to 'Success and Failure' (DC Only)CIS Windows Server 2012 DC L1 v2.4.0Windows
17.1.3 Ensure 'Audit Kerberos Service Ticket Operations' is set to 'Success and Failure' (DC Only)CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.2.1 Ensure 'Audit Application Group Management' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v1.4.0Windows
17.2.1 Ensure 'Audit Application Group Management' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0Windows
17.2.2 Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only)CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0Windows
17.2.2 Ensure 'Audit Computer Account Management' is set to include 'Success' (DC only) - SuccessCIS Microsoft Windows Server 2019 DC L1 v1.3.0Windows
17.2.3 Ensure 'Audit Distribution Group Management' is set to include 'Success' (DC only) - SuccessCIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.2.3 Ensure 'Audit User Account Management' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NGWindows
17.2.4 Ensure 'Audit Other Account Management Events' is set to include 'Success' (DC only)CIS Windows Server 2012 DC L1 v2.4.0Windows
17.2.6 Ensure 'Audit User Account Management' is set to 'Success and Failure'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.3.1 Ensure 'Audit PNP Activity' is set to include 'Success'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.3.1 Ensure 'Audit PNP Activity' is set to include 'Success'CIS Microsoft Windows Server 2019 DC L1 v1.3.0Windows
17.3.1 Ensure 'Audit PNP Activity' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v2.0.0 L1Windows
17.3.1 Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.2.0Windows
17.3.2 Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v1.12.0 L1Windows
17.3.2 Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v2.0.0 L1Windows
17.4.1 Ensure 'Audit Directory Service Access' is set to include 'Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.0Windows
17.4.2 Ensure 'Audit Directory Service Changes' is set to include 'Success' (DC only)CIS Windows Server 2012 DC L1 v2.4.0Windows
17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows Server 2016 DC L1 v1.4.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.3.0Windows
17.6.4 Ensure 'Audit Removable Storage' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.6.4 Ensure 'Audit Removable Storage' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NGWindows
17.7.4 Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.7.4 Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'CIS Windows Server 2012 DC L1 v2.2.0Windows
17.7.4 Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0Windows
17.7.5 Ensure 'Audit Other Policy Change Events' is set to include 'Failure'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.7.5 Ensure 'Audit Other Policy Change Events' is set to include 'Failure'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.2.0Windows
17.8.1 Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.8.1 Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'CIS Windows Server 2012 DC L1 v2.4.0Windows
17.9.1 Ensure 'Audit IPsec Driver' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.0Windows
17.9.1 Ensure 'Audit IPsec Driver' is set to 'Success and Failure'CIS Windows Server 2012 DC L1 v2.4.0Windows
17.9.1 Ensure 'Audit IPsec Driver' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0Windows
17.9.2 Ensure 'Audit Other System Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v1.12.0 L1Windows
17.9.2 Ensure 'Audit Other System Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v2.0.0 L1Windows
17.9.3 Ensure 'Audit Security State Change' is set to include 'Success'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.9.3 Ensure 'Audit Security State Change' is set to include 'Success'CIS Microsoft Windows 11 Enterprise v1.0.0 L1Windows
17.9.3 Ensure 'Audit Security State Change' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1Windows
17.9.4 Ensure 'Audit Security System Extension' is set to include 'Success'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.9.4 Ensure 'Audit Security System Extension' is set to include 'Success'CIS Microsoft Windows Server 2016 DC L1 v1.4.0Windows
17.9.4 Ensure 'Audit Security System Extension' is set to include 'Success'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0Windows
17.9.5 Ensure 'Audit System Integrity' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v1.12.0 L1Windows