Key Security Events for NIST 800-171 Compliance
Account Logon
Credential Validation
Kerberos Authentication Service
This event generates every time Key Distribution Center issues a Kerberos Ticket Granting Ticket (TGT).
Kerberos Service Ticket Operations
Account Management
Security Group Management
User Account Management
Detailed Tracking
Process Creation
Logon/Logoff
Other Logon/Logoff Events
Policy Change
Authentication Policy Change
Authorization Policy Change
System
Security State Change
System Integrity
Internal resources allocated for the queuing of audit messages have been exhausted, leading to the loss of some audits
Audit Policy Requirements
| Category | Subcategory | Audit Type |
|---|---|---|
| Policy Change | Authentication Policy Change | Success |
| Policy Change | Authorization Policy Change | Success |
| Account Logon | Credential Validation | Success, Failure |
| Account Logon | Kerberos Authentication Service | Failure |
| Account Logon | Kerberos Service Ticket Operations | Success, Failure |
| Logon/Logoff | Other Logon/Logoff Events | Success |
| Detailed Tracking | Process Creation | Success |
| Account Management | Security Group Management | Success |
| System | Security State Change | Success |
| System | System Integrity | Success |
| Account Management | User Account Management | Success |