Detections
Analytics

CCI|CCI-000130

Title

The information system generates audit records containing information that establishes what type of event occurred.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
4.1.3.8 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.8 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.10 Ensure use of privileged commands is collectedUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.19 Ensure audit all uses of the chsh command.UnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.38 Ensure audit of the su commandUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.40 Ensure audit all uses of the newgrp commandUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA STIG AIX 7.x v2r6
AMLS-NM-000190 - Arista MLS must produce audit log records containing sufficient information to establish what type of event occurred.AristaDISA STIG Arista MLS DCS-7000 Series NDM V1R2
AMLS-NM-000190 - The Arista Multilayer Switch must produce audit log records containing sufficient information to establish what type of event occurred.AristaDISA STIG Arista MLS DCS-7000 Series NDM v1r3
AOSX-12-000230 - The OS X system must initiate session audits at system startup.UnixDISA STIG Apple Mac OSX 10.12 v1r6
AOSX-15-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 V1R2
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r3
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r7
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r4
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r5
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r1
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r3
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r2
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r4
APPL-14-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 14 (Sonoma) STIG v1r2
APPNET0067 - Event tracing for Windows (ETW) for Common Language Runtime events must be enabled - applicationsWindowsDISA STIG for Microsoft Dot Net Framework 4.0 v2r1
APPNET0067 - Event tracing for Windows (ETW) for Common Language Runtime events must be enabled - machineWindowsDISA STIG for Microsoft Dot Net Framework 4.0 v2r1
APPNET0067 - Event tracing for Windows (ETW) for Common Language Runtime events must be enabled.WindowsDISA STIG for Microsoft Dot Net Framework 4.0 v2r4
APPNET0067 - Event tracing for Windows (ETW) for Common Language Runtime events must be enabled.WindowsDISA STIG for Microsoft Dot Net Framework 4.0 v2r3
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA STIG Arista MLS EOS 4.2x NDM v1r1
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r7 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r3 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r3
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r3
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r3 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r7 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events.UnixDISA STIG Apache Server 2.4 Unix Server v2r7
AS24-U2-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r1 Middleware
AS24-U2-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r2 Middleware
AS24-U2-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r2
AS24-U2-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Site v2r3