Skip to content

The operating system must produce audit records containing information to establish the identity of any individual or process associated with the event.

An XCCDF Rule