Detections
Analytics

CCI|CCI-000169

Title

The information system provides audit record generation capability for the auditable events defined in AU-2 a. at organization-defined information system components.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
3.125 - Audit policy using subcategories is enabled.WindowsDISA Windows Vista STIG v6r41
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable eventsUnixDISA STIG AIX 7.x v2r8
AOSX-13-000240 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.13 v2r5
AOSX-14-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.14 v2r6
AOSX-15-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple Mac OSX 10.15 v1r10
APPL-11-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 11 v1r5
APPL-11-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 11 v1r7
APPL-12-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 12 v1r7
APPL-13-005001 - The macOS system must enable System Integrity Protection.UnixDISA STIG Apple macOS 13 v1r2
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - log_config_moduleUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6 Middleware
AS24-U1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events - LogFormatUnixDISA STIG Apache Server 2.4 Unix Server v2r6
AS24-W1-000070 - The Apache web server must generate, at a minimum, log records for system startup and shutdown, system access, and system authentication events.WindowsDISA STIG Apache Server 2.4 Windows Server v2r3
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Ensure System Integrity Protection is EnabledUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 Moderate
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - CNSSI 1253
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 High
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 Low
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r5 Low
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-53r4 Moderate
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - All Profiles
Catalina - Ensure System Integrity Protection is EnabledUnixNIST macOS Catalina v1.5.0 - 800-171
DB2X-00-000600 - DB2 must provide audit record generation capability for DoD-defined auditable events within all DBMS/database componentsIBM_DB2DBDISA STIG IBM DB2 v10.5 LUW v2r1 Database
DKER-EE-001080 - The audit log configuration level must be set to request in the Universal Control Plane (UCP) component of Docker Enterprise.UnixDISA STIG Docker Enterprise 2.x Linux/Unix UCP v2r1
DKER-EE-001090 - The host operating systems auditing policies for the Docker Engine - Enterprise component of Docker Enterprise must be set - docker pathsUnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r1
DKER-EE-001090 - The host operating systems auditing policies for the Docker Engine - Enterprise component of Docker Enterprise must be set - docker servicesUnixDISA STIG Docker Enterprise 2.x Linux/Unix v2r1
DTBC-0005 - Extensions installation must be blocklisted by default.WindowsDISA STIG Google Chrome v2r8
DTBC-0052 - Deletion of browser history must be disabled.WindowsDISA STIG Google Chrome v2r8
DTBC-0053 - Prompt for download location must be enabled.WindowsDISA STIG Google Chrome v2r8
DTBC-0055 - Download restrictions must be configured.WindowsDISA STIG Google Chrome v2r8
DTBC-0060 - Chrome Cleanup must be disabled.WindowsDISA STIG Google Chrome v2r8
DTBC-0061 - Chrome Cleanup reporting must be disabled.WindowsDISA STIG Google Chrome v2r8
DTBI300-IE11 - Configuring History setting must be set to 40 days.WindowsDISA STIG IE 11 v2r4
DTBI760-IE11 - Browser must retain history on exit.WindowsDISA STIG IE 11 v2r4
DTBI770-IE11 - Deleting websites that the user has visited must be disallowed.WindowsDISA STIG IE 11 v2r4
EP11-00-001000 - The EDB Postgres Advanced Server must be configured to provide audit record generation capability for DoD-defined auditable events within all EDB Postgres Advanced Server/database components.PostgreSQLDBEDB PostgreSQL Advanced Server v11 DB Audit v2r2
EX13-CA-000045 - Exchange Email Diagnostic log level must be set to lowest level.WindowsDISA Microsoft Exchange 2013 Client Access Server STIG v2r1
EX13-CA-000050 - Exchange must have Audit record parameters set.WindowsDISA Microsoft Exchange 2013 Client Access Server STIG v2r1
EX13-EG-000030 - The Exchange email Diagnostic log level must be set to the lowest level.WindowsDISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5
EX13-EG-000035 - Exchange Connectivity logging must be enabled.WindowsDISA Microsoft Exchange 2013 Edge Transport Server STIG v1r5