Detections
Analytics

CCI|CCI-000164

Title

Protect audit information from unauthorized deletion.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows 7 STIG v1r32
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows 7 STIG v1r32
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements.WindowsDISA Windows 7 STIG v1r32
4.1.4.1 Ensure Audit logs are owned by root and mode 0600 or less permissiveUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r1
AOSX-09-000337 - Log files must not contain ACLs.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-09-000338 - Log folders must not contain ACLs.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-12-000336 - The OS X system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.12 v1r6
AOSX-13-000336 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-13-000336 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.13 v2r1
AOSX-13-000336 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.13 v2r3
AOSX-14-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.14 v2r1
AOSX-14-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.14 v2r4
AOSX-14-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-14-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.14 v2r5
AOSX-15-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.15 v1r8
AOSX-15-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.15 v1r5
AOSX-15-001017 - The macOS system must be configured with audit log folders set to mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.15 v1r7