CCI|CCI-001403

Title

Automatically audit account modification actions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.41 UBTU-24-200280UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.42 UBTU-24-200290UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.43 UBTU-24-200300UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.44 UBTU-24-200310UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.45 UBTU-24-200320UnixCIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT II
1.157 UBTU-22-654130UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.158 UBTU-22-654135UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.159 UBTU-22-654140UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.160 UBTU-22-654145UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.161 UBTU-22-654150UnixCIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT II
1.433 RHEL-09-654215UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.434 RHEL-09-654220UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.435 RHEL-09-654225UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.436 RHEL-09-654230UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.437 RHEL-09-654235UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.438 RHEL-09-654240UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
1.439 RHEL-09-654245UnixCIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II
4.1.3.14 Ensure events that modify user/group information are collected - groupUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - gshadowUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - opasswdUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - passwdUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
4.1.3.14 Ensure events that modify user/group information are collected - shadowUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002016 - AIX must provide audit record generation functionality for DoD-defined auditable events.UnixDISA STIG AIX 7.x v3r1
ALMA-09-004970 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/sudoers.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-005080 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-005190 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-005300 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-005410 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-005960 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
ALMA-09-006070 - AlmaLinux OS 9 must generate audit records for all account creations, modifications, disabling, and termination events that affect the files within /etc/sudoers.d/UnixDISA CloudLinux AlmaLinux OS 9 STIG v1r2
AMLS-NM-000130 - The Arista Multilayer Switch must automatically audit account modification.AristaDISA STIG Arista MLS DCS-7000 Series NDM v1r4
APPL-14-001001 The macOS system must be configured to audit all administrative action events.UnixDISA Apple macOS 14 (Sonoma) STIG v2r3
APPL-15-001001 - The macOS system must be configured to audit all administrative action events.UnixDISA Apple macOS 15 (Sequoia) STIG v1r4
ARST-ND-000150 - The Arista network device must be configured to audit all administrator activity.AristaDISA STIG Arista MLS EOS 4.2x NDM v2r1
ARST-ND-000150 - The Arista network device must be configured to audit all administrator activity.AristaDISA STIG Arista MLS EOS 4.x NDM v2r2
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 High
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 Moderate
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - CNSSI 1253
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-171
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Low
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - All Profiles
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r4 High
Big Sur - Configure System to Audit All Administrative Action EventsUnixNIST macOS Big Sur v1.4.0 - 800-53r5 Moderate
CASA-ND-000100 - The Cisco ASA must be configured to automatically audit account modification.CiscoDISA STIG Cisco ASA NDM v2r2
CISC-ND-000100 - The Cisco router must be configured to automatically audit account modification.CiscoDISA Cisco IOS Router NDM STIG v3r4
CISC-ND-000100 - The Cisco router must be configured to automatically audit account modification.CiscoDISA Cisco IOS XE Router NDM STIG v3r4
CISC-ND-000100 - The Cisco switch must be configured to automatically audit account modification.CiscoDISA Cisco NX OS Switch NDM STIG v3r3
CISC-ND-000100 - The Cisco switch must be configured to automatically audit account modification.CiscoDISA Cisco IOS XE Switch NDM STIG v3r4
CISC-ND-000100 - The Cisco switch must be configured to automatically audit account modification.CiscoDISA Cisco IOS Switch NDM STIG v3r5