TMA-GITLAB-1.3.13

Ensure anomalous code behavior is tracked

低レベル 1手動レビューgitlab

説明

Track code anomalies. Carefully analyze any code anomalies within the organization. For example, a code anomaly could be a push made outside of working hours. Such a code push has a higher likelihood of being the result of an attack, as most if not all members of the organization would likely be outside the office. Another example is an activity that exceeds the average activity of a particular user. Tracking and auditing such behaviors creates additional layers of security and can aid in early detection of potential attacks.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

For every project in use, ensure code anomalies relevant to the organization are promptly investigated.

修正方法

修正方法: ガイダンスまたは IaC パッチ

For every project in use, track and investigate anomalous code behavior and activity.

プロパティ

オペレーティングシステム: すべて
タグ: devsecopsgitlab
参照: CIS GitLab Benchmark v1.0.1 - 1.3.13 Ensure anomalous code behavior is tracked