Detections
Analytics

800-53|CM-11(1)

Title

ALERTS FOR UNAUTHORIZED INSTALLATIONS

Description

The information system alerts [Assignment: organization-defined personnel or roles] when the unauthorized installation of software is detected.

Reference Item Details

Related: CA-7,SI-4

Category: CONFIGURATION MANAGEMENT

Parent Title: USER-INSTALLED SOFTWARE

Family: CONFIGURATION MANAGEMENT

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.136 WN16-CC-000470WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II
1.136 WN16-CC-000470WindowsCIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II
1.137 WN19-CC-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II
1.137 WN19-CC-000440WindowsCIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II
1.137 WN22-CC-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT II
1.137 WN22-CC-000440WindowsCIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II
1.166 WN10-CC-000320WindowsCIS Microsoft Windows 10 STIG v1.0.0 CAT II
18.9.85.3 Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 2 v3.2.0
18.9.85.3 Ensure 'Prevent Internet Explorer security prompt for Windows Installer scripts' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0
DKER-EE-003460 - The Docker Enterprise log aggregation/SIEM systems must be configured to send an alert the ISSO/ISSM when unauthorized software is installed.UnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r2