Skip to content
ATO Pathways
  Log In

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000255

    <GroupDescription></GroupDescription>
    Group
    Show

  • The audit system must produce records containing sufficient information to establish the identity of any user/subject associated with the event.

    &lt;VulnDiscussion&gt;Enabling the audit system will produce records with accurate time stamps, source, user, and activity information. Without thi...
    Rule Medium Severity
    Show

  • SRG-OS-000054

    <GroupDescription></GroupDescription>
    Group
    Show

  • The operating system must provide the capability to automatically process audit records for events of interest based upon selectable, event criteria.

    &lt;VulnDiscussion&gt;Without an audit reporting capability, users find it difficult to identify specific patterns of attack.&lt;/VulnDiscussion&gt...
    Rule Medium Severity
    Show

  • SRG-OS-000062

    <GroupDescription></GroupDescription>
    Group
    Show

  • The audit records must provide data for all auditable events defined at the organizational level for the organization-defined information system components.

    &lt;VulnDiscussion&gt;Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...
    Rule Medium Severity
    Show

  • SRG-OS-000064

    <GroupDescription></GroupDescription>
    Group
    Show

  • The operating system must generate audit records for the selected list of auditable events as defined in DoD list of events.

    &lt;VulnDiscussion&gt;Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...
    Rule Medium Severity
    Show

  • SRG-OS-000037

    <GroupDescription></GroupDescription>
    Group
    Show

  • Audit records must include what type of events occurred.

    &lt;VulnDiscussion&gt;Without proper system auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and t...
    Rule Medium Severity
    Show

  • SRG-OS-000038

    <GroupDescription></GroupDescription>
    Group
    Show

  • Audit records must include when (date and time) the events occurred.

    &lt;VulnDiscussion&gt;Without accurate time stamps malicious activity cannot be accurately tracked.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt...
    Rule Medium Severity
    Show

  • SRG-OS-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Audit records must include where the events occurred.

    &lt;VulnDiscussion&gt;Without auditing, individual system accesses cannot be tracked, and malicious activity cannot be detected and traced back to ...
    Rule Medium Severity
    Show

  • SRG-OS-000040

    <GroupDescription></GroupDescription>
    Group
    Show

  • Audit records must include the sources of the events that occurred.

    &lt;VulnDiscussion&gt;Without accurate source information malicious activity cannot be accurately tracked.&lt;/VulnDiscussion&gt;&lt;FalsePositives...
    Rule Medium Severity
    Show

  • SRG-OS-000041

    <GroupDescription></GroupDescription>
    Group
    Show

  • Audit records must include the outcome (success or failure) of the events that occurred.

    &lt;VulnDiscussion&gt;Tracking both the successful and unsuccessful attempts aids in identifying threats to the system.&lt;/VulnDiscussion&gt;&lt;F...
    Rule Medium Severity
    Show

  • SRG-OS-000480

    <GroupDescription></GroupDescription>
    Group
    Show

  • The audit system must be configured to audit file deletions.

    &lt;VulnDiscussion&gt;Without auditing, malicious activity cannot be detected.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules