Audits
Settings
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Theme
Light
Dark
Auto
Help
Plugins
Overview
Plugins Pipeline
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Release Notes
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Links
Tenable Cloud
Tenable Community & Support
Tenable University
Settings
Theme
Light
Dark
Auto
Detections
Plugins
Overview
Plugins Pipeline
Release Notes
Newest
Updated
Search
Nessus Families
WAS Families
NNM Families
LCE Families
Tenable OT Security Families
About Plugin Families
Audits
Overview
Newest
Updated
Search Audit Files
Search Items
References
Authorities
Documentation
Download All Audit Files
Policies
Overview
Search
AWS Resources
Azure Resources
GCP Resources
Kubernetes Resources
Indicators
Overview
Search
Indicators of Attack
Indicators of Exposure
Analytics
CVEs
Overview
Newest
Updated
Search
Attack Path Techniques
Overview
Search
Audits
Item Search
Audits
Item Search
Filters (1)
Description
Filename
Plugin
References
Control ID
Relevance
Description
Plugin
Filename
References (Active)
Search by References
Clear All
‹‹ Previous
Previous
Page 17 of 41
• 2033 Total
Next
Next ››
Name
Audit Name
Plugin
Category
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'
CIS Microsoft Windows Server 2008 Member Server Level 1 v3.2.0
Windows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
Windows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1
Windows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'
CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BL
Windows
2.3.11.6 Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'
CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1
Windows
4.1.3.12 Ensure login and logout events are collected
CIS AlmaLinux OS 9 Server L2 v1.0.0
Unix
4.1.3.12 Ensure login and logout events are collected - auditctl /var/run/faillock
CIS Ubuntu Linux 22.04 LTS Server L2 v.1.0.0
Unix
4.1.3.12 Ensure login and logout events are collected - auditctl faillock
CIS Oracle Linux 8 Workstation L2 v2.0.0
Unix
4.1.3.12 Ensure login and logout events are collected - auditctl lastlog
CIS Red Hat EL8 Server L2 v2.0.0
Unix
4.1.3.12 Ensure login and logout events are collected - faillock
CIS Red Hat EL8 Server L2 v2.0.0
Unix
4.1.3.12 Ensure login and logout events are collected - faillock
CIS Oracle Linux 8 Server L2 v2.0.0
Unix
4.1.7 Ensure login and logout events are collected - /var/log/faillog
CIS Oracle Linux 7 Workstation L2 v3.1.1
Unix
4.1.7 Ensure login and logout events are collected - /var/log/faillog
CIS SUSE Linux Enterprise Server 12 L2 v3.0.0
Unix
4.1.7 Ensure login and logout events are collected - /var/log/tallylog
CIS Red Hat EL7 Server L2 v3.1.1
Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/faillog
CIS Oracle Linux 7 Server L2 v3.1.1
Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/lastlog
CIS Oracle Linux 7 Workstation L2 v3.1.1
Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/log/tallylog
CIS SUSE Linux Enterprise Workstation 12 L2 v3.0.0
Unix
4.1.7 Ensure login and logout events are collected - auditctl /var/run/faillock/
CIS Red Hat EL7 Server L2 v3.1.1
Unix
4.1.7 Ensure login and logout events are collected - auditctl faillog
CIS Debian 10 Workstation L2 v1.0.0
Unix
4.1.8 Ensure session initiation information is collected - /var/log/btmp
CIS Debian 10 Server L2 v1.0.0
Unix
4.1.8 Ensure session initiation information is collected - /var/run/utmp
CIS Debian 10 Workstation L2 v1.0.0
Unix
4.1.8 Ensure session initiation information is collected - /var/run/utmp
CIS SUSE Linux Enterprise Server 12 L2 v3.0.0
Unix
4.1.8 Ensure session initiation information is collected - auditctl /var/log/btmp
CIS SUSE Linux Enterprise Workstation 12 L2 v3.0.0
Unix
4.1.8 Ensure session initiation information is collected - auditctl /var/log/wtmp
CIS SUSE Linux Enterprise Server 12 L2 v3.0.0
Unix
4.1.8 Ensure session initiation information is collected - auditctl utmp
CIS CentOS 7 v3.1.2 Workstation L2
Unix
4.1.8 Ensure session initiation information is collected - auditctl utmp
CIS Oracle Linux 7 Server L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - auditctl utmp
CIS Oracle Linux 7 Workstation L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - auditctl utmp
CIS Red Hat EL7 Server L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmp
CIS CentOS 7 v3.1.2 Workstation L2
Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmp
CIS Oracle Linux 7 Server L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmp
CIS Oracle Linux 7 Workstation L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - auditctl wtmp
CIS Red Hat EL7 Server L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - btmp
CIS CentOS 7 v3.1.2 Workstation L2
Unix
4.1.8 Ensure session initiation information is collected - btmp
CIS Oracle Linux 7 Server L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - btmp
CIS Oracle Linux 7 Workstation L2 v3.1.1
Unix
4.1.8 Ensure session initiation information is collected - btmp
CIS Red Hat EL7 Workstation L2 v3.1.1
Unix
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'
CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + NG
Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
Windows
17.5.4 Ensure 'Audit Logoff' is set to include 'Success'
CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0
Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'
CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + NG
Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'
CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL
Windows
17.5.6 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'
CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0
Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'
CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + NG
Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'
CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + NG
Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'
CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'
CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1
Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'
CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BL
Windows
‹‹ Previous
Previous
Page 17 of 41
• 2033 Total
Next
Next ››