CyberStrikeus/CyberStrike - Page 11

cis-ubuntu1604-v200-4-1-10

Ensure unsuccessful unauthorized file access attempts are collected

cis-ubuntu1604-v200-4-1-11

Ensure use of privileged commands is collected

cis-ubuntu1604-v200-4-1-12

Ensure successful file system mounts are collected

cis-ubuntu1604-v200-4-1-13

Ensure file deletion events by users are collected

cis-ubuntu1604-v200-4-1-14

Ensure changes to system administration scope (sudoers) is collected

cis-ubuntu1604-v200-4-1-15

Ensure system administrator command executions (sudo) are collected

cis-ubuntu1604-v200-4-1-16

Ensure kernel module loading and unloading is collected

cis-ubuntu1604-v200-4-1-17

Ensure the audit configuration is immutable

cis-ubuntu1604-v200-4-1-2-1

Ensure audit log storage size is configured

cis-ubuntu1604-v200-4-1-2-2

Ensure audit logs are not automatically deleted

cis-ubuntu1604-v200-4-1-2-3

Ensure system is disabled when audit logs are full

cis-ubuntu1604-v200-4-1-3

Ensure events that modify date and time information are collected

cis-ubuntu1604-v200-4-1-4

Ensure events that modify user/group information are collected

cis-ubuntu1604-v200-4-1-5

Ensure events that modify the system's network environment are collected

cis-ubuntu1604-v200-4-1-6

Ensure events that modify the system's Mandatory Access Controls are collected

cis-ubuntu1604-v200-4-1-7

Ensure login and logout events are collected

cis-ubuntu1604-v200-4-1-8

Ensure session initiation information is collected

cis-ubuntu1604-v200-4-1-9

Ensure discretionary access control permission modification events are collected

cis-ubuntu1604-v200-4-2-1-1

Ensure rsyslog is installed

cis-ubuntu1604-v200-4-2-1-2

Ensure rsyslog Service is enabled

cis-ubuntu1604-v200-4-2-1-3

Ensure logging is configured

cis-ubuntu1604-v200-4-2-1-4

Ensure rsyslog default file permissions configured

cis-ubuntu1604-v200-4-2-1-5

Ensure rsyslog is configured to send logs to a remote log host

cis-ubuntu1604-v200-4-2-1-6

Ensure remote rsyslog messages are only accepted on designated log hosts

cis-ubuntu1604-v200-4-2-2-1

Ensure journald is configured to send logs to rsyslog

cis-ubuntu1604-v200-4-2-2-2

Ensure journald is configured to compress large log files

cis-ubuntu1604-v200-4-2-2-3

Ensure journald is configured to write logfiles to persistent disk

cis-ubuntu1604-v200-4-2-3

Ensure permissions on all logfiles are configured

cis-ubuntu1604-v200-4-3

Ensure logrotate is configured

cis-ubuntu1604-v200-4-4

Ensure logrotate assigns appropriate permissions

cis-ubuntu1604-v200-5-1-1

Ensure cron daemon is enabled and running

cis-ubuntu1604-v200-5-1-2

Ensure permissions on /etc/crontab are configured

cis-ubuntu1604-v200-5-1-3

Ensure permissions on /etc/cron.hourly are configured

cis-ubuntu1604-v200-5-1-4

Ensure permissions on /etc/cron.daily are configured

cis-ubuntu1604-v200-5-1-5

Ensure permissions on /etc/cron.weekly are configured

cis-ubuntu1604-v200-5-1-6

Ensure permissions on /etc/cron.monthly are configured

cis-ubuntu1604-v200-5-1-7

Ensure permissions on /etc/cron.d are configured

cis-ubuntu1604-v200-5-1-8

Ensure cron is restricted to authorized users

cis-ubuntu1604-v200-5-1-9

Ensure at is restricted to authorized users

cis-ubuntu1604-v200-5-2-1

Ensure sudo is installed