Detections
Analytics

Item Search

NameAudit NamePluginCategory
3.1 Ensure CloudTrail is enabled in all regions - IncludeManagementEventsCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
3.1 Ensure CloudTrail is enabled in all regions - IsLoggingCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
3.1 Ensure CloudTrail is enabled in all regions - IsMultiRegionTrailCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
3.1 Ensure CloudTrail is enabled in all regions - ReadWriteTypeCIS Amazon Web Services Foundations L1 1.4.0amazon_aws
4.1.1.2 Ensure auditd service is enabledCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0Unix
4.1.2 Ensure auditd service is enabledCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.1.3 Ensure auditing for processes that start prior to auditd is enabledCIS SUSE Linux Enterprise Server 11 L2 v2.1.0Unix
4.1.3 Ensure auditing for processes that start prior to auditd is enabledCIS SUSE Linux Enterprise Workstation 11 L2 v2.1.0Unix
4.2.1.1 Ensure rsyslog Service is enabled - chkconfigCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
4.2.1.2 Ensure logging is configuredCIS CentOS 6 Workstation L1 v2.1.0Unix
4.2.1.2 Ensure logging is configuredCIS Red Hat 6 Server L1 v2.1.0Unix
4.2.2.2 Ensure logging is configuredCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix
4.2.2.2 Ensure logging is configuredCIS Distribution Independent Linux Workstation L1 v1.1.0Unix
4.2.3 Ensure rsyslog or syslog-ng is installedHuawei EulerOS 2 Server L1 v1.0Unix
5.3 Ensure 'ETW Logging' is enabled - Sites logFormat W3CCIS IIS 8.0 v1.5.0 Level 1Windows
5.3 Ensure 'ETW Logging' is enabled - Sites logFormat W3C with ETW targetCIS IIS 8.0 v1.5.0 Level 1Windows
5.3 Ensure that logging captures as much information as possibleCIS MongoDB 3.6 L1 Unix Audit v1.0.0Unix
9.1.9 (L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.2.7 (L1) Ensure 'Windows Firewall: Private: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\privatefw.log'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.2.8 (L1) Ensure 'Windows Firewall: Private: Logging: Size limit (KB)' is set to '16,384 KB or greater'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.3.7 (L1) Ensure 'Windows Firewall: Public: Logging: Name' is set to '%SYSTEMROOT%\System32\logfiles\firewall\publicfw.log'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
9.3.8 (L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BLWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Enterprise v1.0.0 L1Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL + NGWindows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v1.3.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Windows Server 2012 MS L1 v2.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Windows Server 2012 DC L1 v2.2.0Windows
17.6.3 Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1Windows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + NGWindows
18.9.46.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + NGWindows
18.9.48.1 Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v1.0.0 NGWindows
18.9.77.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 Next Generation Windows SecurityWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BL + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + NGWindows
18.9.78.1 Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows