Detections
Analytics

Item Search

NameAudit NamePluginCategory
4.1.7 Ensure login and logout events are collected - /var/log/faillogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - /var/log/faillogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - /var/log/lastlogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - /var/log/lastlogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - /var/log/tallylogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - /var/log/tallylogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/faillogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/faillogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/lastlogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/lastlogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/tallylogCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/tallylogCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure login and logout events are collected - faillogCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.1.8 Ensure login and logout events are collected - tallylogCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl btmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl btmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl utmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl utmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - btmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - btmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - utmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - utmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - wtmpCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.8 Ensure session initiation information is collected - wtmpCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collectedCIS SUSE Linux Enterprise Workstation 11 L2 v2.1.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collectedCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collected - auditctlCIS SUSE Linux Enterprise Workstation 11 L2 v2.1.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collected - auditctlCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.14 Ensure a log metric filter and alarm exist for VPC changes - 'alarm exists'CIS Amazon Web Services Foundations L1 1.4.0amazon_aws
4.14 Ensure a log metric filter and alarm exist for VPC changes - 'metric filter exists'CIS Amazon Web Services Foundations L1 1.4.0amazon_aws
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2016 Database L1 AWS RDS v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2017 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2019 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2019 Database L1 DB v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2016 Database L1 DB v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - AUDIT_CHANGE_GROUPCIS SQL Server 2017 Database L1 DB v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2016 Database L1 DB v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2017 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2017 Database L1 DB v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2016 Database L1 AWS RDS v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2019 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - FAILED_LOGIN_GROUPCIS SQL Server 2019 Database L1 DB v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2016 Database L1 DB v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2019 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2019 Database L1 DB v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2016 Database L1 AWS RDS v1.3.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2017 Database L1 AWS RDS v1.2.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_LOGIN_GROUPCIS SQL Server 2017 Database L1 DB v1.2.0MS_SQLDB