TMA-MFD-6.1.1
Enable Print Spooler Access Logging
Descripción
Print spoolers typically contain functionality to log all submitted requests. It is recommended that these facilities be enabled on the print spooler, logging levels be set to ensure adequate details are preserved, and logs be reviewed. When a security event occurs, spooler access logs may provide investigators with information necessary to determine the extent and origin of the event.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 6.1.1: Enable Print Spooler Access Logging.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 6.1.1 to configure: Enable Print Spooler Access Logging.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- access-controlloggingmfdprinter
- Referencia
- CIS Multi-Function Device Benchmark v1.0.0 - 6.1.1 Enable Print Spooler Access Logging