Detections
Analytics

CCI|CCI-000018

Title

Automatically audit account creation actions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.41 UBTU-24-200280UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.42 UBTU-24-200290UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.43 UBTU-24-200300UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.44 UBTU-24-200310UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.45 UBTU-24-200320UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.157 UBTU-22-654130UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.158 UBTU-22-654135UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.159 UBTU-22-654140UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.160 UBTU-22-654145UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.161 UBTU-22-654150UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.222 OL08-00-030130UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.223 OL08-00-030140UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.224 OL08-00-030150UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.225 OL08-00-030160UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.226 OL08-00-030170UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.227 OL08-00-030171UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.228 OL08-00-030172UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.433 RHEL-09-654215UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.434 RHEL-09-654220UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.435 RHEL-09-654225UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.436 RHEL-09-654230UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.437 RHEL-09-654235UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.438 RHEL-09-654240UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.439 RHEL-09-654245UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
4.1.3.14 Ensure events that modify user/group information are collected - groupUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - gshadowUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - opasswdUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - passwdUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - shadowUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events.UnixDISA STIG AIX 7.x v3r1
AMLS-NM-000120 - The Arista Multilayer Switch must automatically audit account creation.AristaDISA STIG Arista MLS DCS-7000 Series NDM v1r4
APPL-14-001001 - The macOS system must be configured to audit all administrative action events.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-15-001001 - The macOS system must be configured to audit all administrative action events.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
ARST-ND-000150 - The Arista network device must be configured to audit all administrator activity.AristaDISA STIG Arista MLS EOS 4.2x NDM v2r1
ARST-ND-000150 - The Arista network device must be configured to audit all administrator activity.AristaDISA STIG Arista MLS EOS 4.x NDM v2r2
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
CASA-ND-000090 - The Cisco ASA must be configured to automatically audit account creation.CiscoDISA STIG Cisco ASA NDM v2r2
CISC-ND-000090 - The Cisco router must be configured to automatically audit account creation.CiscoDISA Cisco IOS XE Router NDM STIG v3r5
CISC-ND-000090 - The Cisco switch must be configured to automatically audit account creation.CiscoDISA Cisco IOS XE Switch NDM STIG v3r4
CISC-ND-000090 - The Cisco switch must be configured to automatically audit account creation.CiscoDISA Cisco NX OS Switch NDM STIG v3r3
CISC-ND-000090 - The Cisco switch must be configured to automatically audit account creation.CiscoDISA Cisco IOS Switch NDM STIG v3r5
CNTR-K8-000700 - Kubernetes API Server must generate audit records that identify what type of event has occurred, identify the source of the event, contain the event results, identify any users, and identify any containers associated with the event.UnixDISA STIG Kubernetes v2r4