Home
Security Hardening
Tenable Cisco Firepower Management Center OS Best Practices

Tenable Cisco Firepower Management Center OS Best Practices

Ensure events that modify user/group information are collected – auditctl /etc/security/opasswd
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – auditctl /etc/shadow
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – /etc/group
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – /etc/gshadow
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – /etc/passwd
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – /etc/security/opasswd
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure events that modify user/group information are collected – /etc/shadow
Details Record events affecting the group, passwd (user IDs), shadow and gshadow (passwords) or /etc/security/opasswd (old passwords, based on remember...
Ensure file deletion events by users are collected – auditctl b32 unlink
Details Monitor the use of system calls associated with the deletion or renaming of files and file attributes. This configuration...
Ensure file deletion events by users are collected – auditctl b64 unlink
Details Monitor the use of system calls associated with the deletion or renaming of files and file attributes. This configuration...
Ensure file deletion events by users are collected – b32 unlink
Details Monitor the use of system calls associated with the deletion or renaming of files and file attributes. This configuration...

Prev Next

Tenable Cisco Firepower Management Center OS Best Practices

Ensure events that modify user/group information are collected – auditctl /etc/security/opasswd

Ensure events that modify user/group information are collected – auditctl /etc/shadow

Ensure events that modify user/group information are collected – /etc/group

Ensure events that modify user/group information are collected – /etc/gshadow

Ensure events that modify user/group information are collected – /etc/passwd

Ensure events that modify user/group information are collected – /etc/security/opasswd

Ensure events that modify user/group information are collected – /etc/shadow

Ensure file deletion events by users are collected – auditctl b32 unlink

Ensure file deletion events by users are collected – auditctl b64 unlink

Ensure file deletion events by users are collected – b32 unlink