github.com/cloudfoundry-incubator/stembuild@v0.0.0-20211223202937-5b61d62226c6/modules/BOSH.Sysprep/cis-merge-2019/DomainSysvol/GPO/Machine/microsoft/windows nt/Audit/audit.csv (about)

     1  Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting,Setting Value
     2  ,System,IPsec Driver,{0CCE9213-69AE-11D9-BED3-505054503030},No Auditing,,0
     3  ,System,System Integrity,{0CCE9212-69AE-11D9-BED3-505054503030},Success and Failure,,3
     4  ,System,Security System Extension,{0CCE9211-69AE-11D9-BED3-505054503030},Success,,1
     5  ,System,Security State Change,{0CCE9210-69AE-11D9-BED3-505054503030},Success,,1
     6  ,System,Other System Events,{0CCE9214-69AE-11D9-BED3-505054503030},Success and Failure,,3
     7  ,System,Group Membership,{0CCE9249-69AE-11D9-BED3-505054503030},Success,,1
     8  ,System,User / Device Claims,{0CCE9247-69AE-11D9-BED3-505054503030},No Auditing,,0
     9  ,System,Network Policy Server,{0CCE9243-69AE-11D9-BED3-505054503030},No Auditing,,0
    10  ,System,Other Logon/Logoff Events,{0CCE921C-69AE-11D9-BED3-505054503030},Success and Failure,,3
    11  ,System,Special Logon,{0CCE921B-69AE-11D9-BED3-505054503030},Success,,1
    12  ,System,IPsec Extended Mode,{0CCE921A-69AE-11D9-BED3-505054503030},No Auditing,,0
    13  ,System,IPsec Quick Mode,{0CCE9219-69AE-11D9-BED3-505054503030},No Auditing,,0
    14  ,System,IPsec Main Mode,{0CCE9218-69AE-11D9-BED3-505054503030},No Auditing,,0
    15  ,System,Account Lockout,{0CCE9217-69AE-11D9-BED3-505054503030},Failure,,2
    16  ,System,Logoff,{0CCE9216-69AE-11D9-BED3-505054503030},No Auditing,,0
    17  ,System,Logon,{0CCE9215-69AE-11D9-BED3-505054503030},Success and Failure,,3
    18  ,System,Handle Manipulation,{0CCE9223-69AE-11D9-BED3-505054503030},No Auditing,,0
    19  ,System,Central Policy Staging,{0CCE9246-69AE-11D9-BED3-505054503030},No Auditing,,0
    20  ,System,Removable Storage,{0CCE9245-69AE-11D9-BED3-505054503030},Success and Failure,,3
    21  ,System,Detailed File Share,{0CCE9244-69AE-11D9-BED3-505054503030},Failure,,2
    22  ,System,Other Object Access Events,{0CCE9227-69AE-11D9-BED3-505054503030},Success and Failure,,3
    23  ,System,Filtering Platform Connection,{0CCE9226-69AE-11D9-BED3-505054503030},No Auditing,,0
    24  ,System,Filtering Platform Packet Drop,{0CCE9225-69AE-11D9-BED3-505054503030},No Auditing,,0
    25  ,System,File Share,{0CCE9224-69AE-11D9-BED3-505054503030},Success and Failure,,3
    26  ,System,Application Generated,{0CCE9222-69AE-11D9-BED3-505054503030},No Auditing,,0
    27  ,System,Certification Services,{0CCE9221-69AE-11D9-BED3-505054503030},No Auditing,,0
    28  ,System,SAM,{0CCE9220-69AE-11D9-BED3-505054503030},No Auditing,,0
    29  ,System,Kernel Object,{0CCE921F-69AE-11D9-BED3-505054503030},No Auditing,,0
    30  ,System,Registry,{0CCE921E-69AE-11D9-BED3-505054503030},No Auditing,,0
    31  ,System,File System,{0CCE921D-69AE-11D9-BED3-505054503030},No Auditing,,0
    32  ,System,Other Privilege Use Events,{0CCE922A-69AE-11D9-BED3-505054503030},No Auditing,,0
    33  ,System,Non Sensitive Privilege Use,{0CCE9229-69AE-11D9-BED3-505054503030},No Auditing,,0
    34  ,System,Sensitive Privilege Use,{0CCE9228-69AE-11D9-BED3-505054503030},Success and Failure,,3
    35  ,System,RPC Events,{0CCE922E-69AE-11D9-BED3-505054503030},No Auditing,,0
    36  ,System,Token Right Adjusted Events,{0CCE924A-69AE-11D9-BED3-505054503030},No Auditing,,0
    37  ,System,Process Creation,{0CCE922B-69AE-11D9-BED3-505054503030},Success,,1
    38  ,System,Process Termination,{0CCE922C-69AE-11D9-BED3-505054503030},No Auditing,,0
    39  ,System,Plug and Play Events,{0CCE9248-69AE-11D9-BED3-505054503030},Success,,1
    40  ,System,DPAPI Activity,{0CCE922D-69AE-11D9-BED3-505054503030},No Auditing,,0
    41  ,System,Other Policy Change Events,{0CCE9234-69AE-11D9-BED3-505054503030},Failure,,2
    42  ,System,Authentication Policy Change,{0CCE9230-69AE-11D9-BED3-505054503030},Success,,1
    43  ,System,Audit Policy Change,{0CCE922F-69AE-11D9-BED3-505054503030},Success,,1
    44  ,System,Filtering Platform Policy Change,{0CCE9233-69AE-11D9-BED3-505054503030},No Auditing,,0
    45  ,System,Authorization Policy Change,{0CCE9231-69AE-11D9-BED3-505054503030},No Auditing,,0
    46  ,System,MPSSVC Rule-Level Policy Change,{0CCE9232-69AE-11D9-BED3-505054503030},Success and Failure,,3
    47  ,System,Other Account Management Events,{0CCE923A-69AE-11D9-BED3-505054503030},No Auditing,,0
    48  ,System,Application Group Management,{0CCE9239-69AE-11D9-BED3-505054503030},No Auditing,,0
    49  ,System,Distribution Group Management,{0CCE9238-69AE-11D9-BED3-505054503030},No Auditing,,0
    50  ,System,Security Group Management,{0CCE9237-69AE-11D9-BED3-505054503030},Success,,1
    51  ,System,Computer Account Management,{0CCE9236-69AE-11D9-BED3-505054503030},No Auditing,,0
    52  ,System,User Account Management,{0CCE9235-69AE-11D9-BED3-505054503030},Success and Failure,,3
    53  ,System,Directory Service Replication,{0CCE923D-69AE-11D9-BED3-505054503030},No Auditing,,0
    54  ,System,Directory Service Access,{0CCE923B-69AE-11D9-BED3-505054503030},No Auditing,,0
    55  ,System,Detailed Directory Service Replication,{0CCE923E-69AE-11D9-BED3-505054503030},No Auditing,,0
    56  ,System,Directory Service Changes,{0CCE923C-69AE-11D9-BED3-505054503030},No Auditing,,0
    57  ,System,Other Account Logon Events,{0CCE9241-69AE-11D9-BED3-505054503030},No Auditing,,0
    58  ,System,Kerberos Service Ticket Operations,{0CCE9240-69AE-11D9-BED3-505054503030},No Auditing,,0
    59  ,System,Credential Validation,{0CCE923F-69AE-11D9-BED3-505054503030},Success and Failure,,3
    60  ,System,Kerberos Authentication Service,{0CCE9242-69AE-11D9-BED3-505054503030},No Auditing,,0
    61  ,,Option:CrashOnAuditFail,,Disabled,,0
    62  ,,Option:FullPrivilegeAuditing,,Disabled,,0
    63  ,,Option:AuditBaseObjects,,Disabled,,0
    64  ,,Option:AuditBaseDirectories,,Disabled,,0
    65  ,,FileGlobalSacl,,,,
    66  ,,RegistryGlobalSacl,,,,