Detections
Analytics

Item Search

NameAudit NamePluginCategory
2.1 Ensure that IP addresses are mapped to usernames - User ID AgentsCIS Palo Alto Firewall 9 v1.0.1 L2Palo_Alto
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Microsoft Windows Server 2016 DC L1 v1.3.0Windows
2.3.11.6 Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'CIS Windows Server 2012 DC L1 v2.2.0Windows
4.1.3.11 Ensure session initiation information is collectedCIS Red Hat EL9 Workstation L2 v1.0.0Unix
4.1.3.11 Ensure session initiation information is collectedCIS Debian Linux 11 Workstation L2 v.1.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl wtmpCIS Red Hat EL8 Workstation L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - wtmpCIS Red Hat EL8 Workstation L2 v2.0.0Unix
4.1.4 Ensure login and logout events are collected - auditctl /var/run/faillockCIS Red Hat EL8 Server L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS Red Hat EL8 Server L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - btmpCIS Oracle Linux 8 Server L2 v1.0.1Unix
5.2.7 Ensure SSH MaxAuthTries is set to 4 or lessCIS Debian 10 Server L1 v1.0.0Unix
5.2.7 Ensure SSH MaxAuthTries is set to 4 or less - sshd outputCIS Oracle Linux 8 Workstation L1 v1.0.1Unix
5.3 Ensure 'Login Auditing' is set to 'failed logins'CIS SQL Server 2016 Database L1 DB v1.3.0MS_SQLDB
5.3 Ensure 'Login Auditing' is set to 'failed logins'CIS SQL Server 2017 Database L1 DB v1.2.0MS_SQLDB
5.3 Ensure 'Login Auditing' is set to 'failed logins'CIS SQL Server 2019 Database L1 DB v1.2.0MS_SQLDB
17.5.2 Ensure 'Audit Logoff' is set to include 'Success'CIS Windows Server 2012 DC L1 v2.4.0Windows
17.5.3 (L1) Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 v3.0.0 L1 Member ServerWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2016 DC L1 v2.0.0Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2016 MS L1 v2.0.0Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL + NGWindows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BLWindows
17.5.3 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Windows Server 2012 DC L1 v2.4.0Windows
17.5.4 (L1) Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 v3.0.0 L1 Member ServerWindows
17.5.4 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1Windows
17.5.4 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG DC STIG v1.0.1Windows
17.5.4 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.3.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 11 Stand-alone v2.0.0 L1 + BLWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BLWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + NGWindows
17.5.5 (L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 v3.0.0 L1 Domain ControllerWindows
17.5.5 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v1.4.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BLWindows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL + NGWindows
17.5.6 (L1) Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 v3.0.0 L1 Domain ControllerWindows
17.5.6 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows 11 Enterprise v2.0.0 L1 + BLWindows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL + NGWindows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + NGWindows
17.5.7 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG DC STIG v1.0.1Windows