[Forgot Password]
Login  Register Subscribe

23631

 
 

126998

 
 

102010

 
 

909

 
 

80911

 
 

121

Paid content will be excluded from the download.


Download | Alert*
OVAL

Audit All Logon Events

ID: oval:org.secpod.oval:def:25047Date: (C)2015-06-12   (M)2018-02-06
Class: COMPLIANCEFamily: macos




Remote access services, such as those providing remote access to network devices and information systems, increase risk and expose those systems to possible cyber attacks, so all remote access should be closely monitored and audited. Only authorized users should be permitted to remotely access DoD non-public information systems. An attacker might attempt to log in as an authorized user, through stolen credentials, unpatched exploits of the remote access service, or brute force attempts to guess a valid username and password. If a user is attempting to log in to a system from an unusual location or at an unusual time, or if there are many failed attempts, there is a possibility that the system is the target of a cyber attack. Auditing logon events mitigates this risk by recording all logon attempts, successful and unsuccessful, to the system.

Platform:
Apple Mac OS X 10.10
Reference:
CCE-90270-0
CPE    1
cpe:/o:apple:mac_os_x:10.10
CCE    1
CCE-90270-0
XCCDF    1
xccdf_org.secpod_benchmark_general_Mac_OS_X_10_10

© 2013 SecPod Technologies