Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-254297 Medium Windows Server 2022 permissions for the Security event log must prevent access by nonprivileged a...
V-205641 Medium Windows Server 2019 permissions for the Security event log must prevent access by non-privileged ...
V-253341 Medium Windows 11 permissions for the Security event log must prevent access by non-privileged accounts
V-220783 Medium Windows 10 permissions for the Security event log must prevent access by non-privileged accounts
V-254298 Medium Windows Server 2022 permissions for the System event log must prevent access by nonprivileged acc...
V-205642 Medium Windows Server 2019 permissions for the System event log must prevent access by non-privileged ac...
V-253342 Medium Windows 11 permissions for the System event log must prevent access by non-privileged accounts
V-220784 Medium Windows 10 permissions for the System event log must prevent access by non-privileged accounts
V-260597 Medium Ubuntu 22.04 LTS must be configured so that audit log files are not read- or write-accessible by ...
V-260598 Medium Ubuntu 22.04 LTS must be configured to permit only authorized users ownership of the audit log files
V-260599 Medium Ubuntu 22.04 LTS must permit only authorized groups ownership of the audit log files
V-224877 Medium Permissions for the Application event log must prevent access by non-privileged accounts
V-224878 Medium Permissions for the Security event log must prevent access by non-privileged accounts
V-224879 Medium Permissions for the System event log must prevent access by non-privileged accounts
V-268456 Medium The macOS system must configure audit log files to be owned by root
V-268457 Medium The macOS system must configure audit log folders to be owned by root
V-268458 Medium The macOS system must configure the audit log files group to wheel
V-268459 Medium The macOS system must configure the audit log folders group to wheel
V-268460 Medium The macOS system must configure audit log files to mode 440 or less permissive
V-268461 Medium The macOS system must configure audit log folders to mode 700 or less permissive
V-268462 Medium The macOS system must be configured to audit all deletions of object attributes
V-268463 Medium The macOS system must be configured to audit all changes of object attributes
V-268464 Medium The macOS system must be configured to audit all failed read actions on the system
V-268465 Medium The macOS system must be configured to audit all failed write actions on the system
V-268473 Medium The macOS system must configure audit_control group to wheel
V-268474 Medium The macOS system must configure audit_control owner to root
V-268475 Medium The macOS system must configure audit_control owner to mode 440 or less permissive
V-269095 Medium The macOS system must configure audit_control to not contain access control lists (ACLs)
V-225086 Medium The Manage auditing and security log user right must only be assigned to the Administrators group
V-278043 Medium Windows Server 2025 permissions for the Application event log must prevent access by nonprivilege...
V-278044 Medium Windows Server 2025 permissions for the Security event log must prevent access by nonprivileged a...
V-278045 Medium Windows Server 2025 permissions for the System event log must prevent access by nonprivileged acc...
V-278257 Medium The Windows Server 2025 "Manage auditing and security log" user right must only be assigned to th...
V-254507 Medium Windows Server 2022 manage auditing and security log user right must only be assigned to the Admi...
V-205643 Medium Windows Server 2019 Manage auditing and security log user right must only be assigned to the Admi...
V-253501 Medium The "Manage auditing and security log" user right must only be assigned to the Administrators group
V-220978 Medium The Manage auditing and security log user right must only be assigned to the Administrators group
V-277040 Medium The macOS system must configure audit log files to not contain access control lists (ACLs)
V-277041 Medium The macOS system must configure the audit log folder to not contain access control lists (ACLs)
V-277063 Medium The macOS system must configure audit log files to be owned by root
V-277064 Medium The macOS system must configure audit log folders to be owned by root
V-277065 Medium The macOS system must configure the audit log files group to wheel
V-277066 Medium The macOS system must configure the audit log folders group to wheel
V-277067 Medium The macOS system must configure audit log files to mode 440 or less permissive
V-277068 Medium The macOS system must configure audit log folders to mode 700 or less permissive
V-277069 Medium The macOS system must be configured to audit all deletions of object attributes
V-277070 Medium The macOS system must be configured to audit all changes of object attributes
V-277071 Medium The macOS system must be configured to audit all failed read actions on the system
V-277072 Medium The macOS system must be configured to audit all failed write actions on the system
V-277080 Medium The macOS system must configure audit_control group to wheel
V-277081 Medium The macOS system must configure audit_control owner to root
V-277082 Medium The macOS system must configure audit_control owner to mode 440 or less permissive
V-277083 Medium The macOS system must configure audit_control to not contain access control lists (ACLs)