CSCv6|5.4

Title

Configure systems to issue a log entry and alert when an account is added to or removed from a domain administrators' group, or when a new local administrator account is added on a system.

Description

Configure systems to issue a log entry and alert when an account is added to or removed from a domain administrators' group, or when a new local administrator account is added on a system.

Reference Item Details

Category: Controlled Use of Administrative Privileges

Family: System

Audit Items

View all Reference Audit Items

NamePluginAudit Name
2.2.1 Ensure 'AUDIT_SYS_OPERATIONS' Is Set to 'TRUE'OracleDBCIS Oracle Server 18c DB Traditional Auditing v1.1.0
2.2.1 Ensure 'AUDIT_SYS_OPERATIONS' Is Set to 'TRUE'OracleDBCIS Oracle Server 12c DB Traditional Auditing v3.0.0
2.2.1 Ensure 'AUDIT_SYS_OPERATIONS' Is Set to 'TRUE'OracleDBCIS Oracle Server 18c DB Traditional Auditing v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoers.dUnixCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.0.1
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 20.04 LTS Server L2 v1.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Workstation L2 v2.1.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dUnixCIS Ubuntu Linux 18.04 LTS Server L2 v2.0.1
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixCIS Red Hat 6 Workstation L2 v2.1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixHuawei EulerOS 2 Server L2 v1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixCIS CentOS 6 Server L2 v2.1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixCIS Oracle Linux 6 Server L2 v1.1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixCIS Oracle Linux 6 Workstation L2 v1.1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixHuawei EulerOS 2 Workstation L2 v1.0
4.1.15 Ensure changes to system administration scope (sudoers) is collectedUnixCIS CentOS 6 Workstation L2 v2.1.0