Detections
Analytics

CSCv6|16.8

Title

Monitor attempts to access deactivated accounts through audit logging.

Description

Monitor attempts to access deactivated accounts through audit logging.

Reference Item Details

Category: Account Monitoring and Control

Family: Application

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.2.48 Set 'Audit Policy: Account Logon: Credential Validation' to 'Success and Failure'WindowsCIS Windows 8 L1 v1.0.0
17.1.1 (L1) Ensure 'Audit Credential Validation' is set to 'Success and Failure'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
17.1.1 Ensure 'Audit Credential Validation' is set to 'Success and Failure'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
17.1.1 Ensure 'Audit Credential Validation' is set to 'Success and Failure'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
Audit Credential ValidationWindowsMSCT Windows Server v2004 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server v1909 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 1903 MS v1.19.9
Audit Credential ValidationWindowsMSCT Windows Server 1903 DC v1.19.9
Audit Credential ValidationWindowsMSCT Windows Server v1909 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2012 R2 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2012 R2 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server v20H2 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 1809 v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 1803 v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 v2004 v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 v1507 v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 v21H2 v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2016 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server v20H2 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server v2004 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2016 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2019 DC v1.0.0
Audit Credential ValidationWindowsMSCT Windows Server 2019 MS v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 1909 v1.0.0
Audit Credential ValidationWindowsMSCT Windows 10 1903 v1.19.9
Audit Credential ValidationWindowsMSCT Windows 10 v20H2 v1.0.0
HIPAA 164.308(a)(5)(ii)(C) - Log-in Monitoring (A) 'Credential Validation'WindowsHIPAA Windows Audit