Detections
Analytics

Item Search

NameAudit NamePluginCategory
4.1.3.2 Ensure actions as another user are always loggedCIS Rocky Linux 8 Server L2 v1.0.0Unix
4.1.3.2 Ensure actions as another user are always loggedCIS AlmaLinux OS 9 Workstation L2 v1.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - /etc/audit/rules.d/*.rules b32CIS Oracle Linux 8 Workstation L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b32CIS Oracle Linux 8 Workstation L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b32CIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b32CIS Red Hat EL8 Workstation L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b64CIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b64CIS AlmaLinux OS 8 Workstation L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - auditctl b64CIS Oracle Linux 8 Server L2 v2.0.0Unix
4.1.3.2 Ensure actions as another user are always logged - rules.d b32CIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collectedCIS Red Hat EL9 Server L2 v1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collectedCIS AlmaLinux OS 9 Server L2 v1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collectedCIS Debian Linux 11 Workstation L2 v.1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collectedCIS Rocky Linux 8 Workstation L2 v1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collectedCIS Rocky Linux 9 Workstation L2 v1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - /etc/audit/rules.d/*.rulesCIS Oracle Linux 8 Workstation L2 v2.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - /etc/audit/rules.d/*.rulesCIS Oracle Linux 8 Server L2 v2.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - auditctlCIS Oracle Linux 8 Workstation L2 v2.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - auditctl sudo logCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - auditctl sudo logCIS AlmaLinux OS 8 Workstation L2 v2.0.0Unix
4.1.3.3 Ensure events that modify the sudo log file are collected - sudo logCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0Unix
4.1.4 Ensure login and logout events are collected - auditctl faillogCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.4 Ensure login and logout events are collected - faillogCIS Fedora 28 Family Linux Server L2 v1.0.0Unix
4.1.4 Ensure login and logout events are collected - faillogCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl btmpCIS Fedora 28 Family Linux Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl btmpCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - btmpCIS Fedora 28 Family Linux Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - wtmpCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.15 Ensure system administrator actions (sudolog) are collected - /var/log/sudo.logCIS Debian 10 Server L2 v1.0.0Unix
4.1.15 Ensure system administrator actions (sudolog) are collected - auditctl /var/log/sudo.logCIS Debian 10 Workstation L2 v1.0.0Unix
4.1.15 Ensure system administrator command executions (sudo) are collectedCIS Red Hat EL7 Workstation L2 v3.1.1Unix
4.1.15 Ensure system administrator command executions (sudo) are collectedCIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - (64 bit)CIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctlCIS Red Hat EL7 Workstation L2 v3.1.1Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctlCIS CentOS 7 v3.1.1 Server L2Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctlCIS Oracle Linux 7 Server L2 v3.1.1Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)CIS Oracle Linux 7 Workstation L2 v3.1.1Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)CIS Red Hat EL7 Workstation L2 v3.1.1Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl (64 bit)CIS CentOS 7 v3.1.2 Server L2Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl 32-bitCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - auditctl b32 actionsCIS SUSE Linux Enterprise Workstation 12 L2 v3.0.0Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - b32 actionsCIS SUSE Linux Enterprise Workstation 12 L2 v3.0.0Unix
4.1.15 Ensure system administrator command executions (sudo) are collected - rules.d 64-bitCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.16 Ensure system administrator actions (sudolog) are collectedCIS Fedora 28 Family Linux Server L2 v1.0.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collected - actionsCIS Oracle Linux 8 Workstation L2 v1.0.1Unix
4.1.16 Ensure system administrator actions (sudolog) are collected - auditctlCIS Fedora 28 Family Linux Server L2 v1.0.0Unix
4.1.16 Ensure system administrator actions (sudolog) are collected - auditctl actionsCIS Oracle Linux 8 Server L2 v1.0.1Unix
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'CIS SQL Server 2022 Database L1 DB v1.0.0MS_SQLDB
5.4 Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins' - SUCCESSFUL_DATABASE_AUTHENTICATION_GROUPCIS SQL Server 2022 Database L1 AWS RDS v1.0.0MS_SQLDB