CCI|CCI-000132

Title

The information system generates audit records containing information that establishes where the event occurred.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v2r3
AOSX-12-000230 - The OS X system must initiate session audits at system startup.UnixDISA STIG Apple Mac OSX 10.12 v1r6
AOSX-15-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 V1R2
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r3
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r7
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r4
APPL-12-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple macOS 12 v1r5
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r1
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r3
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r2
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r4
APPL-14-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 14 (Sonoma) STIG v1r2
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA STIG Arista MLS EOS 4.2x NDM v1r1
ARST-RT-000230 - The Arista router must be configured to produce audit records containing information to establish where the events occurred.AristaDISA STIG Arista MLS EOS 4.2x Router v1r1
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r7 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r3 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r3
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r3
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r3 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r5
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r5 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r7 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events.UnixDISA STIG Apache Server 2.4 Unix Server v2r7
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v2r2
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v2r1
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
BIND-9X-001032 - The print-category variable for the configuration of BIND 9.x server logs must be configured to record information indicating which process generated the events.UnixDISA BIND 9.x STIG v2r2
BIND-9X-001032 - The print-category variable for the configuration of BIND 9.x server logs must be configured to record information indicating which process generated the events.UnixDISA BIND 9.x STIG v1r9
BIND-9X-001032 - The print-category variable for the configuration of BIND 9.x server logs must be configured to record information indicating which process generated the events.UnixDISA BIND 9.x STIG v2r3