Detections
Analytics

CSCv7|5.5

Title

Implement Automated Configuration Monitoring Systems

Description

Utilize a Security Content Automation Protocol (SCAP) compliant configuration monitoring system to verify all security configuration elements, catalog approved exceptions, and alert when unauthorized changes occur.

Reference Item Details

Category: Secure Configuration for Hardware and Software on Mobile Devices, Laptops, Workstations and Servers

Audit Items

View all Reference Audit Items

NamePluginAudit Name
17.7.1 (L1) Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success and Failure'WindowsCIS Microsoft Windows Server 2019 STIG DC STIG v1.0.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success and Failure'WindowsCIS Microsoft Windows Server 2016 STIG MS STIG v1.1.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success and Failure'WindowsCIS Microsoft Windows Server 2016 STIG DC STIG v1.1.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success and Failure'WindowsCIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2016 MS L1 v2.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 EMS Gateway v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Windows Server 2012 MS L1 v3.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Windows Server 2012 R2 MS L1 v3.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Windows Server 2012 R2 DC L1 v3.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DC
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MS
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Windows Server 2012 DC L1 v3.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 MS
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 DC
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2019 DC L1 v2.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2016 DC L1 v2.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + NG
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2019 MS L1 v2.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0
17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0
17.7.2 (L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
17.7.2 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2016 STIG DC L1 v1.1.0
17.7.2 Ensure 'Audit Audit Policy Change' is set to include 'Success'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0