[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Audit Account Creation, Modification, and Deletion

ID: oval:org.secpod.oval:def:25046Date: (C)2015-06-12   (M)2023-07-04
Class: COMPLIANCEFamily: macos




Account creations and account modfications, such as disablement and termination, can all be signs of an intrusion and should be audited. Once an attacker establishes access to a system, the attacker may attempt to create an account to reestablish access at a later time. The attacker may also attempt to modify accounts in an attempt to change an existing account's privileges or disable or delete accounts in a denial-of-service attack. Auditing of account creation, modification, disabling, and termination events mitigates this risk.

Platform:
Apple Mac OS X 10.10
Reference:
CCE-90269-2
CPE    1
cpe:/o:apple:mac_os_x:10.10
CCE    1
CCE-90269-2
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_X_10_10

© SecPod Technologies