Windows Server 2022 must, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.
An XCCDF Rule
Description
Protection of log data includes assuring the log data is not accidentally lost or deleted. Audit information stored in one location is vulnerable to accidental or incidental deletion or alteration.
- ID
- SV-254295r959008_rule
- Version
- WN22-AU-000020
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the system to, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.