Components shall provide the capability to support the management of all accounts directly or integrated into a system that manages accounts according to IEC 62443‑3‑3 SR 1.3.

VeriDevOps / CICD_ARQAN_RQCODE_Github_Actions

Security Requirement Analysis GitHub Action

Apache License 2.0

1 stars 5 forks source link

Open agilebotanist opened 9 months ago

github-actions[bot] commented 9 months ago

Recommended STIG:

V-220752
- windows_10
- The system must be configured to audit Account Management - User Account Management successes.
V-220777
- windows_10
- The system must be configured to audit System - System Integrity failures.
V-220933
- windows_10
- Remote calls to the Security Account Manager (SAM) must be restricted to Administrators.
V-220753
- windows_10
- The system must be configured to audit Detailed Tracking - PNP Activity successes.
V-220748
- windows_10
- The system must be configured to audit Account Logon - Credential Validation failures.

github-actions[bot] commented 9 months ago

See RQCODE tests for recommended STIGs :smiley: :

V-220752 The system must be configured to audit Account Management - User Account Management successes.
V-220777 The system must be configured to audit System - System Integrity failures.
V-220753 The system must be configured to audit Detailed Tracking - PNP Activity successes.
V-220748 The system must be configured to audit Account Logon - Credential Validation failures.

:bulb: Tip: You may check the STIG requirements by calling java -jar RQCODE.jar V_xxxxx

github-actions[bot] commented 9 months ago

Recommended STIG:

V-220752
- windows_10
- The system must be configured to audit Account Management - User Account Management successes.
V-220777
- windows_10
- The system must be configured to audit System - System Integrity failures.
V-220933
- windows_10
- Remote calls to the Security Account Manager (SAM) must be restricted to Administrators.
V-220753
- windows_10
- The system must be configured to audit Detailed Tracking - PNP Activity successes.
V-220748
- windows_10
- The system must be configured to audit Account Logon - Credential Validation failures.

github-actions[bot] commented 9 months ago

See RQCODE tests for recommended STIGs :smiley: :

V-220752 The system must be configured to audit Account Management - User Account Management successes.
V-220777 The system must be configured to audit System - System Integrity failures.
V-220753 The system must be configured to audit Detailed Tracking - PNP Activity successes.
V-220748 The system must be configured to audit Account Logon - Credential Validation failures.

:bulb: Tip: You may check the STIG requirements by calling java -jar RQCODE.jar V_xxxxx