Detections
Analytics

Item Search

NameAudit NamePluginCategory
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 11 v1r7Unix
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 11 v1r1Unix
APPL-11-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 11 v1r3Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 12 V1R2Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 12 v1r3Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 12 v1r4Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 12 v1r7Unix
APPL-12-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 12 v1r5Unix
APPL-13-001031 - The macOS system must provide an immediate real-time alert to the System Administrator (SA) and Information System Security Officer (ISSO), at a minimum, of all audit failure events requiring real-time alerts.DISA STIG Apple macOS 13 v1r1Unix
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - From-addressDISA STIG Cisco ASA FW v1r2Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - From-addressDISA STIG Cisco ASA FW v1r3Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Logging ErrorsDISA STIG Cisco ASA FW v1r3Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - Logging ErrorsDISA STIG Cisco ASA FW v1r2Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - SeverityDISA STIG Cisco ASA FW v1r2Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - SeverityDISA STIG Cisco ASA FW v1r3Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost - smtpDISA STIG Cisco ASA FW v1r2Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - From-addressDISA STIG Cisco ASA FW v1r1Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - Logging ErrorsDISA STIG Cisco ASA FW v1r1Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - Recipient-addressDISA STIG Cisco ASA FW v1r1Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - SeverityDISA STIG Cisco ASA FW v1r1Cisco
CASA-FW-000210 - The Cisco ASA must be configured to generate a real-time alert to organization-defined personnel and/or the firewall administrator in the event communication with the central audit server is lost. - smtpDISA STIG Cisco ASA FW v1r1Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging hostDISA STIG Cisco ASA NDM v1r1Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging hostDISA STIG Cisco ASA NDM v1r3Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging hostDISA STIG Cisco ASA NDM v1r5Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging trapDISA STIG Cisco ASA NDM v1r5Cisco
CASA-ND-000930 - The Cisco ASA must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts - logging trapDISA STIG Cisco ASA NDM v1r1Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging hostDISA STIG Cisco ASA VPN v1r2Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging hostDISA STIG Cisco ASA VPN v1r1Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging trapDISA STIG Cisco ASA VPN v1r1Cisco
CASA-VN-000090 - The Cisco ASA must be configured to generate an alert that can be forwarded as an alert to organization-defined personnel and/or firewall administrator of all log failure events - logging trapDISA STIG Cisco ASA VPN v1r2Cisco
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events - logging hostDISA STIG Cisco IOS XE Switch NDM v1r1Cisco
CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.DISA STIG Cisco NX-OS Switch NDM v1r1Cisco
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring alertsDISA STIG IBM DB2 v10.5 LUW v1r3 OS LinuxUnix
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring alertsDISA STIG IBM DB2 v10.5 LUW v1r3 OS WindowsWindows
DB2X-00-007700 - DB2 must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.DISA STIG IBM DB2 v10.5 LUW v1r4 OS LinuxUnix
DKER-EE-003340 - Log aggregation/SIEM systems must be configured to notify SA and ISSO on Docker Engine - Enterprise audit failure events.DISA STIG Docker Enterprise 2.x Linux/Unix v1r1Unix
FGFW-ND-000115 - The FortiGate device must generate an immediate real-time alert of all audit failure events requiring real-time alerts.DISA Fortigate Firewall NDM STIG v1r1FortiGate
FGFW-ND-000115 - The FortiGate device must generate an immediate real-time alert of all audit failure events requiring real-time alerts.DISA Fortigate Firewall NDM STIG v1r3FortiGate
FNFG-FW-000105 - If communication with the central audit server is lost, the FortiGate firewall must generate a real-time alert to, at a minimum, the SCA and ISSO.DISA Fortigate Firewall STIG v1r1FortiGate
JUEX-NM-000420 - The Juniper EX switch must be configured to generate an immediate real-time alert of all audit failure events requiring real-time alerts.DISA Juniper EX Series Network Device Management v1r4Juniper
MADB-10-007500 - MariaDB must provide an immediate real-time alert to appropriate support staff of all audit failure events requiring real-time alerts.DISA MariaDB Enterprise 10.x v1r2 DBMySQLDB
Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - 800-53r4 HighUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - 800-171Unix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - All ProfilesUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - 800-53r5 HighUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - 800-53r5 LowUnix

AUDIT AND ACCOUNTABILITY

Monterey - Configure Audit Failure NotificationNIST macOS Monterey v1.0.0 - 800-53r5 ModerateUnix

AUDIT AND ACCOUNTABILITY

MYS8-00-009900 - The MySQL Database Server 8.0 must provide an immediate real-time alert to appropriate support staff of all audit log failures.DISA Oracle MySQL 8.0 v1r3 DBMySQLDB
SPLK-CL-000170 - Splunk Enterprise must notify the System Administrator (SA) and Information System Security Officer (ISSO) (at a minimum) of all audit failure events, such as loss of communications with hosts and devices, or if log records are no longer being received.DISA STIG Splunk Enterprise 8.x for Linux v1r3 STIG REST APISplunk
SYMP-AG-000230 - Symantec ProxySG must provide an alert to, at a minimum, the SCA and ISSO of all audit failure events where the detection and/or prevention function is unable to write events to either local storage or the centralized server. - EnabledDISA Symantec ProxySG Benchmark ALG v1r1BlueCoat