Ensure anomalous code behavior is tracked

低等級 1人工審核gitlab

說明

Track code anomalies. Carefully analyze any code anomalies within the organization. For example, a code anomaly could be a push made outside of working hours. Such a code push has a higher likelihood of being the result of an attack, as most if not all members of the organization would likely be outside the office. Another example is an activity that exceeds the average activity of a particular user. Tracking and auditing such behaviors creates additional layers of security and can aid in early detection of potential attacks.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

For every project in use, ensure code anomalies relevant to the organization are promptly investigated.

修補方式

修補方法: 操作指南或基礎設施修補檔

For every project in use, track and investigate anomalous code behavior and activity.

屬性

作業系統: 不限
標籤: devsecopsgitlab
參考資料: CIS GitLab Benchmark v1.0.1 - 1.3.13 Ensure anomalous code behavior is tracked