TMA-GITLAB-1.3.13
Ensure anomalous code behavior is tracked
설명
Track code anomalies. Carefully analyze any code anomalies within the organization. For example, a code anomaly could be a push made outside of working hours. Such a code push has a higher likelihood of being the result of an attack, as most if not all members of the organization would likely be outside the office. Another example is an activity that exceeds the average activity of a particular user. Tracking and auditing such behaviors creates additional layers of security and can aid in early detection of potential attacks.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
For every project in use, ensure code anomalies relevant to the organization are promptly investigated.
조치 방법
조치 방식: 가이드 또는 인프라 패치
For every project in use, track and investigate anomalous code behavior and activity.
속성
- 운영 체제
- 모두
- 태그
- devsecopsgitlab
- 참고 자료
- CIS GitLab Benchmark v1.0.1 - 1.3.13 Ensure anomalous code behavior is tracked