Ensure events that modify date and time information are collected – auditctl /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – clock_settime x64 Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure events that modify date and time information are collected – /etc/localtime Details Capture events where the system date and/or time has been modified. The parameters in this section are set to...
Ensure login and logout events are collected – auditctl faillock Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...
Ensure login and logout events are collected – auditctl lastlog Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...
Ensure login and logout events are collected – faillock Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...
Ensure login and logout events are collected – lastlog Details Monitor login and logout events. The parameters below track changes to files associated with login/logout events. The file /var/log/lastlog...
Ensure mounting of vFAT filesystems is limited – lsmod Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...
Ensure mounting of vFAT filesystems is limited – modprobe Details The vFAT filesystem format is primarily used on older windows systems and portable USB drives or flash modules. It...