Detections
Analytics

CCI|CCI-000162

Title

The information system protects audit information from unauthorized access.

Reference Item Details

Category: 2009

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows 7 STIG v1r32
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - application.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - security.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 DC STIG v6r47
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows 7 STIG v1r32
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 R2 MS STIG v1r33
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Vista STIG v6r41
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 R2 DC STIG v1r34
2.001 - Permissions for event logs must conform to minimum requirements - system.evtxWindowsDISA Windows Server 2008 MS STIG v6r46
2.001 - Permissions for event logs must conform to minimum requirements.WindowsDISA Windows 7 STIG v1r32
4.1.4.1 Ensure Audit logs are owned by root and mode 0600 or less permissiveUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002013 - Audit logs on the AIX system must be owned by root.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r1
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r3
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r8
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r9
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r5
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r6
AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.UnixDISA STIG AIX 7.x v2r1
AOSX-09-000331 - Audit log files must be owned by root.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-09-000332 - Audit log folders must be owned by root.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-09-000333 - Audit log files must be group-owned by wheel.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-09-000335 - Audit log files permissions must have mode 440 or less permissive.UnixDISA STIG Apple Mac OSX 10.9 v1r2
AOSX-10-000331 - Audit log files must be owned by root.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000332 - Audit log folders must be owned by root.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000333 - Audit log files must be group-owned by wheel.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000334 - Audit log folders must be group-owned by wheel.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000335 - Audit log files must be mode 440 or less permissive.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000336 - Audit log folders must have mode 700 or less permissive.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000337 - Log files must not contain ACLs.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-10-000338 - Log folders must not contain ACLs.UnixDISA STIG Apple Mac OSX 10.10 v1r5
AOSX-11-000331 - Audit log files must be owned by root.UnixDISA STIG Apple Mac OSX 10.11 v1r6