Ensure anomalous code behavior is tracked

低级别 1人工审核gitlab

说明

Track code anomalies. Carefully analyze any code anomalies within the organization. For example, a code anomaly could be a push made outside of working hours. Such a code push has a higher likelihood of being the result of an attack, as most if not all members of the organization would likely be outside the office. Another example is an activity that exceeds the average activity of a particular user. Tracking and auditing such behaviors creates additional layers of security and can aid in early detection of potential attacks.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

For every project in use, ensure code anomalies relevant to the organization are promptly investigated.

修复方式

修复方法: 操作指南或基础设施补丁

For every project in use, track and investigate anomalous code behavior and activity.

属性

操作系统: 任意
标签: devsecopsgitlab
参考: CIS GitLab Benchmark v1.0.1 - 1.3.13 Ensure anomalous code behavior is tracked