Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-253341 Medium Windows 11 permissions for the Security event log must prevent access by non-privileged accounts
V-253342 Medium Windows 11 permissions for the System event log must prevent access by non-privileged accounts
V-278043 Medium Windows Server 2025 permissions for the Application event log must prevent access by nonprivilege...
V-278044 Medium Windows Server 2025 permissions for the Security event log must prevent access by nonprivileged a...
V-278045 Medium Windows Server 2025 permissions for the System event log must prevent access by nonprivileged acc...
V-278257 Medium The Windows Server 2025 "Manage auditing and security log" user right must only be assigned to th...
V-277040 Medium The macOS system must configure audit log files to not contain access control lists (ACLs)
V-277041 Medium The macOS system must configure the audit log folder to not contain access control lists (ACLs)
V-277063 Medium The macOS system must configure audit log files to be owned by root
V-277064 Medium The macOS system must configure audit log folders to be owned by root
V-277065 Medium The macOS system must configure the audit log files group to wheel
V-277066 Medium The macOS system must configure the audit log folders group to wheel
V-277067 Medium The macOS system must configure audit log files to mode 440 or less permissive
V-277068 Medium The macOS system must configure audit log folders to mode 700 or less permissive
V-277069 Medium The macOS system must be configured to audit all deletions of object attributes
V-277070 Medium The macOS system must be configured to audit all changes of object attributes
V-277071 Medium The macOS system must be configured to audit all failed read actions on the system
V-277072 Medium The macOS system must be configured to audit all failed write actions on the system
V-277080 Medium The macOS system must configure audit_control group to wheel
V-277081 Medium The macOS system must configure audit_control owner to root
V-277082 Medium The macOS system must configure audit_control owner to mode 440 or less permissive
V-277083 Medium The macOS system must configure audit_control to not contain access control lists (ACLs)