Detections
Analytics

Item Search

NameAudit NamePluginCategory
4.1.3 Ensure events that modify date and time information are collected - auditctl /etc/localtimeCIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.3 Ensure events that modify date and time information are collected - /etc/localtimeCIS CentOS 7 v3.1.1 Server L2Unix
4.1.3 Ensure events that modify date and time information are collected - adjtimex (32-bit)CIS CentOS 7 v3.1.1 Server L2Unix
4.1.3 Ensure events that modify date and time information are collected - adjtimex (64-bit)CIS CentOS 7 v3.1.2 Server L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl adjtimexCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl adjtimex (32-bit)CIS CentOS 7 v3.1.1 Server L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl adjtimex (32-bit)CIS CentOS 7 v3.1.2 Server L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl clock_settime (32-bit)CIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl clock_settime (64-bit)CIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.3 Ensure events that modify date and time information are collected - auditctl clock_settime b64CIS Amazon Linux 2 v2.0.0 L2Unix
4.1.3 Ensure events that modify date and time information are collected - clock_settime b64CIS Amazon Linux 2 v2.0.0 L2Unix
4.1.3 Ensure events that modify date and time information are collected - localtime b64CIS Amazon Linux 2 v2.0.0 L2Unix
4.1.3.4 Ensure events that modify date and time information are collected - rules.d b64 time-changeCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.5 Ensure events that modify the system's network environment are collected - /etc/issue.netCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.5 Ensure events that modify the system's network environment are collected - auditctl /etc/issue.netCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.9 Ensure discretionary access control permission modification events are collected - b64 chown/fchown/fchownat/lchownCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.9 Ensure discretionary access control permission modification events are collected - b64 setxattr/lsetxattr/fsetxattr/removexattrCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.14 Ensure events that modify the system's Mandatory Access Controls are collected - auditctl /usr/share/selinuxCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.6 Ensure events that modify date and time information are collected - '/etc/localtime'CIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.6 Ensure events that modify date and time information are collected - 'clock_settime'CIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.6 Ensure events that modify date and time information are collected - 'clock_settime'CIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.6 Ensure events that modify date and time information are collected - clock_settime x64CIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - /etc/selinux/CIS CentOS 7 v3.1.2 Server L2Unix
4.1.6 Ensure events that modify the system's Mandatory Access Controls are collected - auditctl /etc/selinux/CIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.7 Ensure events that modify the system's Mandatory Access Controls are collected - *.rules /usr/share/selinuxCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.7 Ensure events that modify the system's Mandatory Access Controls are collected - auditctl /usr/share/selinuxCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.8 Ensure events that modify the system's network environment are collected - /etc/hostsCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.8 Ensure events that modify the system's network environment are collected - /etc/issueCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.8 Ensure events that modify the system's network environment are collected - /etc/sysconfig/networkCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.8 Ensure events that modify the system's network environment are collected - auditctl b64 sethostnameCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.8 Ensure events that modify the system's network environment are collected - b64 sethostnameCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.8 Ensure events that modify the system's network environment are collected - b64 sethostnameCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b32 chown/fchown/fchownat/lchownCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl b64 chown/fchown/lchown/fchownatCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chmod/fchmod/fchmodatCIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl chown/fchown/fchownat/lchown (64-bit)CIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl setxattr/lsetxattr/fsetxattr/removexattrCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - auditctl setxattr/lsetxattr/fsetxattr/removexattrCIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - b32 setxattr/lsetxattr/fsetxattr/removexattrCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.9 Ensure discretionary access control permission modification events are collected - b64 chmod/fchmod/fchmodatCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - b64 setxattr/lsetxattr/fsetxattr/removexattrCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.9 Ensure discretionary access control permission modification events are collected - chmod/fchmod/fchmodat (64-bit)CIS CentOS 7 v3.1.1 Server L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - chown/fchown/fchownat/lchownCIS CentOS 7 v3.1.1 Server L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - chown/fchown/fchownat/lchownCIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - chown/fchown/fchownat/lchown (64-bit)CIS CentOS 7 v3.1.1 Server L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - setxattr/lsetxattr/fsetxattr/removexattrCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - setxattr/lsetxattr/fsetxattr/removexattrCIS CentOS 7 v3.1.1 Server L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - xattr (64-bit)CIS CentOS 7 v3.1.1 Server L2Unix
4.1.9 Ensure discretionary access control permission modification events are collected - xattr (64-bit)CIS CentOS 7 v3.1.2 Server L2Unix
4.1.10 Ensure discretionary access control permission modification events are collected - auditctl b64CIS Amazon Linux 2 v1.0.0 L2Unix