Detections
Analytics

Item Search

NameAudit NamePluginCategory
APPL-12-001010 - The macOS system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Apple macOS 12 v1r4Unix
APPL-12-001010 - The macOS system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Apple macOS 12 v1r5Unix
CASA-FW-000090 - The Cisco ASA must be configured to queue log records locally in the event that the central audit server is down or not reachable - Buffer EnabledDISA STIG Cisco ASA FW v1r2Cisco
CASA-FW-000090 - The Cisco ASA must be configured to queue log records locally in the event that the central audit server is down or not reachable - QueueDISA STIG Cisco ASA FW v1r3Cisco
CASA-FW-000090 - The Cisco ASA must be configured to queue log records locally in the event that the central audit server is down or not reachable. - Buffer EnabledDISA STIG Cisco ASA FW v1r1Cisco
Catalina - Configure System to Shut Down Upon Audit FailureNIST macOS Catalina v1.5.0 - CNSSI 1253Unix

AUDIT AND ACCOUNTABILITY

DTAM036 - McAfee VirusScan On-Delivery Email Scanner log file size must be restricted (bLimitSize)DISA McAfee VirusScan 8.8 Local Client STIG v5r15Windows

SYSTEM AND INFORMATION INTEGRITY

DTAM140 - McAfee VirusScan Access Protection Reports log file size must be configured to at least 10MB.DISA McAfee VirusScan 8.8 Local Client STIG v5r15Windows

ACCESS CONTROL

EP11-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.EDB PostgreSQL Advanced Server v11 Windows OS Audit v1r1Windows
FNFG-FW-000045 - In the event that communication with the central audit server is lost, the FortiGate firewall must continue to queue traffic log records locally. - disk status|diskfullDISA Fortigate Firewall STIG v1r1FortiGate
MADB-10-001700 - MariaDB must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure.DISA MariaDB Enterprise 10.x v1r2 DBMySQLDB
MADB-10-001800 - MariaDB must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.DISA MariaDB Enterprise 10.x v1r2 DBMySQLDB
OL08-00-030040 - The OL 8 System must take appropriate action when an audit processing failure occurs.DISA Oracle Linux 8 STIG v1r7Unix
OL08-00-030040 - The OL 8 System must take appropriate action when an audit processing failure occurs.DISA Oracle Linux 8 STIG v1r2Unix
OL08-00-030040 - The OL 8 System must take appropriate action when an audit processing failure occurs.DISA Oracle Linux 8 STIG v1r6Unix
OL08-00-030040 - The OL 8 System must take appropriate action when an audit processing failure occurs.DISA Oracle Linux 8 STIG v1r9Unix
OL08-00-030050 - The OL 8 System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) must be alerted when the audit storage volume is full.DISA Oracle Linux 8 STIG v1r1Unix
OL08-00-030060 - The OL 8 audit system must take appropriate action when the audit storage volume is full.DISA Oracle Linux 8 STIG v1r7Unix
OL08-00-030060 - The OL 8 audit system must take appropriate action when the audit storage volume is full.DISA Oracle Linux 8 STIG v1r1Unix
OL08-00-030060 - The OL 8 audit system must take appropriate action when the audit storage volume is full.DISA Oracle Linux 8 STIG v1r4Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - admin_space_left_actionDISA STIG VMware vSphere 6.7 Photon OS v1r3Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - admin_space_left_actionDISA STIG VMware vSphere 6.7 Photon OS v1r5Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - admin_space_left_actionDISA STIG VMware vSphere 6.7 Photon OS v1r1Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - disk_error_actionDISA STIG VMware vSphere 6.7 Photon OS v1r3Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - disk_full_actionDISA STIG VMware vSphere 6.7 Photon OS v1r3Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - disk_full_actionDISA STIG VMware vSphere 6.7 Photon OS v1r1Unix
PHTN-67-000014 - The Photon operating system audit log must attempt to log audit failures to syslog - disk_full_actionDISA STIG VMware vSphere 6.7 Photon OS v1r5Unix
PPS9-00-002400 - The EDB Postgres Advanced Server must be configurable to overwrite audit log records, oldest first (First-In-First-Out - FIFO), in the event of unavailability of space for more audit log records.EDB PostgreSQL Advanced Server OS Linux Audit v1r7Unix
RHEL-08-030040 - The RHEL 8 System must take appropriate action when an audit processing failure occurs.DISA Red Hat Enterprise Linux 8 STIG v1r11Unix
RHEL-08-030040 - The RHEL 8 System must take appropriate action when an audit processing failure occurs.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix
RHEL-08-030040 - The RHEL 8 System must take appropriate action when an audit processing failure occurs.DISA Red Hat Enterprise Linux 8 STIG v1r1Unix
RHEL-08-030040 - The RHEL 8 System must take appropriate action when an audit processing failure occurs.DISA Red Hat Enterprise Linux 8 STIG v1r8Unix
RHEL-08-030040 - The RHEL 8 System must take appropriate action when an audit processing failure occurs.DISA Red Hat Enterprise Linux 8 STIG v1r3Unix
RHEL-08-030050 - The RHEL 8 System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) must be alerted when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r3Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r5Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r7Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r8Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r11Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r1Unix
RHEL-08-030060 - The RHEL 8 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 8 STIG v1r13Unix
RHEL-09-653025 - RHEL 9 audit system must take appropriate action when the audit storage volume is full.DISA Red Hat Enterprise Linux 9 STIG v1r2Unix
RHEL-09-653055 - RHEL 9 audit system must take appropriate action when the audit files have reached maximum size.DISA Red Hat Enterprise Linux 9 STIG v1r2Unix
SLES-15-030590 - The SUSE operating system audit system must take appropriate action when the audit storage volume is full.DISA SLES 15 STIG v1r6Unix
SLES-15-030590 - The SUSE operating system audit system must take appropriate action when the audit storage volume is full.DISA SLES 15 STIG v1r11Unix
SLES-15-030590 - The SUSE operating system audit system must take appropriate action when the audit storage volume is full.DISA SLES 15 STIG v1r10Unix
UBTU-20-010118 - The Ubuntu operating system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Ubuntu 20.04 LTS v1r9Unix
UBTU-20-010118 - The Ubuntu operating system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Ubuntu 20.04 LTS v1r5Unix
UBTU-20-010118 - The Ubuntu operating system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Ubuntu 20.04 LTS v1r10Unix
UBTU-20-010118 - The Ubuntu operating system must shut down by default upon audit failure (unless availability is an overriding concern).DISA STIG Ubuntu 20.04 LTS v1r4Unix
VCPG-67-000004 - VMware Postgres must be configured to overwrite older logs when necessary.DISA STIG VMware vSphere 6.7 PostgreSQL v1r1Unix