Detections
Analytics

CCI|CCI-000131

Title

Ensure that audit records containing information that establishes when the event occurred.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4 IBMW-LS-000040UnixCIS IBM WebSphere Liberty Server STIG v1.0.0 CAT II
1.4 VCEM-80-000014UnixCIS VMware vSphere 8.0 vCenter Appliance ESX Agent Manager EAM STIG v1.0.0 CAT II
1.4 VCLD-80-000010UnixCIS VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v1.0.0 CAT II
1.4 VCLU-80-000014UnixCIS VMware vSphere 8.0 vCenter Appliance Lookup Service STIG v1.0.0 CAT II
1.4 VCPF-80-000014UnixCIS VMware vSphere 8.0 vCenter Appliance Perfcharts STIG v1.0.0 CAT II
1.4 VCST-80-000014UnixCIS VMware vSphere 8.0 vCenter Appliance Secure Token Service STS STIG v1.0.0 CAT II
1.4 VCUI-80-000014UnixCIS VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v1.0.0 CAT II
1.6 CISC-ND-000280CiscoCIS Cisco IOS XR Router NDM STIG v1.0.0 CAT II
1.9 SOL-11.1-010150UnixCIS Solaris 11 SPARC STIG v1.0.0 CAT II
1.9 SOL-11.1-010150UnixCIS Solaris 11 X86 STIG v1.0.0 CAT II
1.10 CISC-ND-000280CiscoCIS Cisco IOS Switch NDM STIG v1.1.0 CAT II
1.10 CISC-ND-000280CiscoCIS Cisco IOS XE Switch NDM STIG v1.1.0 CAT II
1.13 UBTU-24-100400UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.14 UBTU-24-100410UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.24 AZLX-23-001025UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.25 AZLX-23-001030UnixCIS Amazon Linux 2023 STIG v1.0.0 CAT II
1.34 APPL-14-001003UnixCIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II
1.35 APPL-26-001003UnixCIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II
1.65 RHEL-10-200660UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.66 RHEL-10-200661UnixCIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II
1.84 OL09-00-000440UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.85 OL09-00-000441UnixCIS Oracle Linux 9 STIG v1.0.0 CAT II
1.108 SLES-15-030050UnixCIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II
1.119 UBTU-22-653010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.120 UBTU-22-653015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.229 OL08-00-030180UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.230 OL08-00-030181UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.361 ALMA-09-047100UnixCIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II
1.367 RHEL-09-653010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.368 RHEL-09-653015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
4.1.1.2 Ensure auditd service is enabled and runningUnixCIS Amazon Linux 2 STIG v2.0.1 L2 Server
4.1.1.2 Ensure auditd service is enabled and runningUnixCIS Amazon Linux 2 STIG v2.0.1 STIG
4.1.1.2 Ensure auditd service is enabled and runningUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002001 - AIX must produce audit records containing information to establish what the date, time, and type of events that occurred.UnixDISA IBM AIX 7.x STIG v3r2
ALMA-09-047100 - The audit package must be installed on AlmaLinux OS 9.UnixDISA Cloud Linux AlmaLinux OS 9 STIG v1r6
AOSX-15-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r5
APPL-14-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 14 Sonoma STIG v2r4
APPL-15-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 15 Sequoia STIG v1r7
APPL-26-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 26 Tahoe STIG v1r2
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA STIG Arista MLS EOS 4.2x NDM v2r1
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA Arista MLS EOS 4.X NDM STIG v2r2
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication eventsUnixDISA STIG Apache Server 2.4 Unix Server v3r2 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events.UnixDISA STIG Apache Server 2.4 Unix Server v3r2
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v3r4
AZLX-23-001025 - Amazon Linux 2023 must have the audit package installed.UnixDISA Amazon Linux 2023 STIG v1r3
AZLX-23-001030 - Amazon Linux 2023 must produce audit records containing information to establish what type of events occurred.UnixDISA Amazon Linux 2023 STIG v1r3
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
BIND-9X-001060 - The print-time variable for the configuration of BIND 9.x server logs must be configured to establish when (date and time) the events occurred.UnixDISA BIND 9.x STIG v3r2