Detections
Analytics

CCI|CCI-000154

Title

The information system provides the capability to centrally review and analyze audit records from multiple components within the system.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable eventsUnixDISA STIG AIX 7.x v2r8
AOSX-13-000240 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 11 v1r7
APPL-12-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 12 v1r7
APPL-13-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 13 v1r2
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-171
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - All Profiles
DKER-EE-001090 - The host operating systems auditing policies for the Docker Engine - Enterprise component of Docker Enterprise must be set - docker pathsUnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r1
DKER-EE-001090 - The host operating systems auditing policies for the Docker Engine - Enterprise component of Docker Enterprise must be set - docker servicesUnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r1
ESXI-06-100004 - The VMM must support the capability to centrally review and analyze audit records from multiple components within the system by configuring remote logging.VMwareDISA STIG VMware vSphere 6.x ESXi v1r5
ESXI-70-000004 - Remote logging for ESXi hosts must be configured.VMwareDISA STIG VMware vSphere 7.0 ESXi v1r2
EX13-CA-000055 - Exchange must have Queue monitoring configured with threshold and action.WindowsDISA Microsoft Exchange 2013 Client Access Server STIG v2r1
EX13-EG-000040 - Exchange Queue monitoring must be configured with threshold and action.WindowsDISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5
EX13-MB-000050 - Exchange Queue monitoring must be configured with threshold and action.WindowsDISA Microsoft Exchange 2013 Mailbox Server STIG v2r2
EX16-ED-000080 - Exchange Queue monitoring must be configured with threshold and action.WindowsDISA Microsoft Exchange 2016 Edge Transport Server STIG v2r4
EX16-MB-000100 - Exchange Queue monitoring must be configured with threshold and action.WindowsDISA Microsoft Exchange 2016 Mailbox Server STIG v2r4
GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.MDMMobileIron - DISA Google Android 12 COBO v1r1
GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.MDMMobileIron - DISA Google Android 12 COPE v1r1
GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.MDMAirWatch - DISA Google Android 12 COPE v1r1
GOOG-12-002800 - Google Android 12 must be configured to enable audit logging.MDMAirWatch - DISA Google Android 12 COBO v1r1
GOOG-13-002800 - Google Android 13 must be configured to enable audit logging.MDMMobileIron - DISA Google Android 13 COPE v1r1
GOOG-13-002800 - Google Android 13 must be configured to enable audit logging.MDMAirWatch - DISA Google Android 13 COBO v1r1
GOOG-13-002800 - Google Android 13 must be configured to enable audit logging.MDMAirWatch - DISA Google Android 13 COPE v1r1
GOOG-13-002800 - Google Android 13 must be configured to enable audit logging.MDMMobileIron - DISA Google Android 13 COBO v1r1
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - 800-53r4 High
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - 800-171
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - 800-53r5 High
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - All Profiles
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - 800-53r5 Moderate
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - CNSSI 1253
Monterey - Ensure System Integrity Protection is EnabledUnixNIST macOS Monterey v1.0.0 - 800-53r4 Moderate