Detections
Analytics

Item Search

NameAudit NamePluginCategory
2.3.11.6 (L1) Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.0 L1 BitlockerWindows
4.1.3.11 Ensure session initiation information is collectedCIS Rocky Linux 9 Workstation L2 v1.0.0Unix
4.1.3.11 Ensure session initiation information is collectedCIS Oracle Linux 9 Workstation L2 v1.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl btmpCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl btmpCIS Red Hat EL8 Server L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl utmpCIS Ubuntu Linux 22.04 LTS Workstation L2 v.1.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl utmpCIS Red Hat EL8 Workstation L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - auditctl utmpCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - btmpCIS Red Hat EL8 Server L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - btmpCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - utmpCIS Oracle Linux 8 Workstation L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - utmpCIS AlmaLinux OS 8 Workstation L2 v2.0.0Unix
4.1.3.11 Ensure session initiation information is collected - wtmpCIS Red Hat EL8 Server L2 v2.0.0Unix
4.1.4 Ensure login and logout events are collected - /var/log/lastlogCIS Red Hat EL8 Workstation L2 v1.0.1Unix
4.1.4 Ensure login and logout events are collected - faillockCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl btmpCIS Red Hat EL8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl btmpCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl utmpCIS Oracle Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS Oracle Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - auditctl wtmpCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - btmpCIS Red Hat EL8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - btmpCIS Oracle Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - btmpCIS AlmaLinux OS 8 Server L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - btmpCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - utmpCIS Red Hat EL8 Server L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - utmpCIS Oracle Linux 8 Workstation L2 v1.0.1Unix
4.1.5 Ensure session initiation information is collected - utmpCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.5 Ensure session initiation information is collected - wtmpCIS CentOS Linux 8 Workstation L2 v1.0.1Unix
5.2.7 Ensure SSH MaxAuthTries is set to 4 or lessCIS Debian 10 Workstation L1 v1.0.0Unix
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 10 Enterprise v1.12.0 L1Windows
17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + NGWindows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v1.4.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.0Windows
17.5.4 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1Windows
17.5.4 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Windows Server 2012 R2 DC L1 v2.6.0Windows
17.5.4 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0Windows
17.5.5 (L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 v3.0.0 L1 Member ServerWindows
17.5.5 Ensure 'Audit Logon' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.0Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise v1.12.0 L1Windows
17.5.5 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2016 DC L1 v2.0.0Windows
17.5.5 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0Windows
17.5.5 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0Windows
17.5.6 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1Windows
17.5.6 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows
17.5.7 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1Windows
17.5.7 Ensure 'Audit Special Logon' is set to include 'Success'CIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1Windows