Detections
Analytics

CCI|CCI-000132

Title

Ensure that audit records containing information that establishes where the event occurred.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.13 UBTU-24-100400UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.14 UBTU-24-100410UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.34 APPL-14-001003UnixCIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT II
1.119 UBTU-22-653010UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.120 UBTU-22-653015UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.229 OL08-00-030180UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.230 OL08-00-030181UnixCIS Oracle Linux 8 STIG v1.0.0 CAT II
1.367 RHEL-09-653010UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.368 RHEL-09-653015UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.377 RHEL-09-653060UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
AIX7-00-002003 - AIX must produce audit records containing information to establish where the events occurred.UnixDISA STIG AIX 7.x v3r1
ALMA-09-047100 - The audit package must be installed on AlmaLinux OS 9.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r3
AOSX-15-001003 - The macOS system must initiate session audits at system startupUnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-13-001003 - The macOS system must produce audit records containing information to establish when, where, what type, the source, and the outcome for all DOD-defined auditable events and actions.UnixDISA STIG Apple macOS 13 v1r5
APPL-14-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-15-001003 - The macOS system must enable security auditing.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA STIG Arista MLS EOS 4.x NDM v2r2
ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.AristaDISA STIG Arista MLS EOS 4.2x NDM v2r1
ARST-RT-000230 - The Arista router must be configured to produce audit records containing information to establish where the events occurred.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000230 - The Arista router must be configured to produce audit records containing information to establish where the events occurred.AristaDISA STIG Arista MLS EOS 4.x Router v2r2
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication eventsUnixDISA STIG Apache Server 2.4 Unix Server v3r2 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events.UnixDISA STIG Apache Server 2.4 Unix Server v3r2
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
AS24-W1-000090 - The Apache web server must produce log records containing sufficient information to establish what type of events occurred.WindowsDISA STIG Apache Server 2.4 Windows Server v3r3
AZLX-23-001025 - Amazon Linux 2023 must have the audit package installed.UnixDISA Amazon Linux 2023 STIG v1r1
AZLX-23-001030 - Amazon Linux 2023 must produce audit records containing information to establish what type of events occurred.UnixDISA Amazon Linux 2023 STIG v1r1
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Enable Security AuditingUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
BIND-9X-001032 - The print-category variable for the configuration of BIND 9.x server logs must be configured to record information indicating which process generated the events.UnixDISA BIND 9.x STIG v2r3
CASA-ND-000280 - The Cisco ASA must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA STIG Cisco ASA NDM v2r2
CASA-VN-000510 - The Cisco ASA remote access VPN server must be configured to generate log records containing information to establish where the events occurred.CiscoDISA STIG Cisco ASA VPN v2r2
CD12-00-007100 - PostgreSQL must produce audit records containing sufficient information to establish where the events occurred.PostgreSQLDBDISA STIG Crunchy Data PostgreSQL DB v3r1
CISC-ND-000290 - The Cisco router must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS Router NDM STIG v3r5
CISC-ND-000290 - The Cisco router must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XR Router NDM STIG v3r4
CISC-ND-000290 - The Cisco router must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XE Router NDM STIG v3r5
CISC-ND-000290 - The Cisco switch must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco NX OS Switch NDM STIG v3r4
CISC-ND-000290 - The Cisco switch must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS Switch NDM STIG v3r5
CISC-ND-000290 - The Cisco switch must produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XE Switch NDM STIG v3r4
CISC-RT-000210 - The Cisco router must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XE Router RTR STIG v3r4
CISC-RT-000210 - The Cisco router must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XR Router RTR STIG v3r2
CISC-RT-000210 - The Cisco router must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS Router RTR STIG v3r3
CISC-RT-000210 - The Cisco switch must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS Switch RTR STIG v3r1
CISC-RT-000210 - The Cisco switch must be configured to produce audit records containing information to establish where the events occurred.CiscoDISA Cisco IOS XE Switch RTR STIG v3r2