Detections
Analytics

Item Search

NameAudit NamePluginCategory
4.1.3.11 Ensure session initiation information is collected - utmpCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - wtmpCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.4 Ensure login and logout events are collected - auditctl lastlogCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.4 Ensure login and logout events are collected - faillockCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.4 Ensure login and logout events are collected - lastlogCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.4 Ensure login and logout events are collected - lastlogCIS Oracle Linux 8 Server L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl btmpCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl utmpCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl utmpCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - btmpCIS Oracle Linux 8 Server L2 v1.0.1Unix
5.3 Ensure 'Login Auditing' is set to 'failed logins'CIS SQL Server 2019 Database L1 AWS RDS v1.2.0MS_SQLDB
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BLWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Intune for Windows 10 v1.1.0 L1 + BL + NGWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL + NGWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Intune for Windows 10 v1.1.0 L1 + BLWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Intune for Windows 10 v2.0.0 L1 + NGWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.3 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Windows Server 2012 MS L1 v2.4.0Windows
17.5.3 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Windows Server 2012 R2 MS L1 v2.6.0Windows
17.5.4 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2016 STIG MS STIG v1.1.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 MS L1 v1.2.1Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 MS L1 v1.3.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BLWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + BLWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 11 v1.0.0 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 10 v2.0.0 L1 + BLWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Intune for Windows 10 v2.0.0 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 MS L1 v2.0.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 EMS Gateway v2.0.0 L1Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.5 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0Windows
17.5.5 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 STIG DC STIG v1.1.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 MS L1 v1.2.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Intune for Windows 10 v1.1.0 L1 + BL + NGWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL + NGWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BLWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + NGWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + NGWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + NGWindows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BLWindows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Intune for Windows 10 v1.1.0 L1 + NGWindows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2022 v2.0.0 L1 MSWindows