Summary Reports
|
Report Name |
Directly Meets Requirements |
Augmented Requirements |
Data Source |
Intelligent Indexing |
Log Sources |
Classifications |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
201 CMR 17: Account Access Summary |
17.03.2.h, 17.04.4 |
N/A |
Log Manager |
Yes |
201 CMR 17: Account Access Summary |
Access Failure, Access Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Account Authentication Summary |
17.03.2.h, 17.04.4 |
N/A |
Log Manager |
Yes |
201 CMR 17: Account Authentication Summary |
Authentication Failure, Authentication Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Account Deletion Summary |
N/A |
17.03.2.e, 17.04.1.d |
Log Mart |
No |
201 CMR 17: Account Deletion Summary |
Account Deletion |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Alarm And Response Activity |
17.03.2.j |
N/A |
Event Manager |
N/A |
201 CMR 17: Alarm And Response Activity |
N/A |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Antivirus Information Summary |
N/A |
17.04.7 |
Log Manager |
Yes |
201 CMR 17: Antivirus Information Summary |
Information |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Antivirus Issue Summary |
N/A |
17.04.7 |
Log Mart |
No |
201 CMR 17: Antivirus Issue Summary |
Critical, Error, Warning |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Critical/Error Condition Summary |
17.03.2.b.3 |
N/A |
Log Mart |
No |
201 CMR 17: Critical/Error Condition Summary |
Critical, Error |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Default Account Access Summary |
N/A |
17.04.2.b |
Log Manager |
Yes |
201 CMR 17: Default Account Access Summary |
Access Failure, Access Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Default Account Auth Summary |
N/A |
17.04.2.b |
Log Manager |
Yes |
201 CMR 17: Default Account Auth Summary |
Authentication Failure, Authentication Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Disabled/Locked Account Summary |
N/A |
17.03.2.e, 17.04.1.d, 17.04.1.e |
Log Mart |
No |
201 CMR 17: Disabled/Locked Account Summary |
Access Revoked |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: File Integrity Monitoring Summary |
N/A |
17.04.2.a |
Log Manager |
No |
201 CMR 17: File Integrity Monitoring Summary |
Activity |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Host Firewall Error Summary |
N/A |
17.04.6 |
Log Mart |
No |
201 CMR 17: Host Firewall Error Summary |
Critical, Error, Warning |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Host Firewall Information Summary |
N/A |
17.04.6 |
Log Mart |
No |
201 CMR 17: 201 CMR 17: Host Firewall Information Summary |
Information |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Network Connection Summary |
N/A |
17.04.3 |
Log Manager |
No |
201 CMR 17: Network Connection Summary |
Network Allow, Network Deny, Network Traffic |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Network Service Summary |
N/A |
17.04.3 |
Log Manager |
No |
201 CMR 17: Network Service Summary |
Network Allow, Network Deny, Network Traffic |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Non-Encrypted Protocol Summary |
N/A |
17.04.3 |
Log Manager |
Yes |
201 CMR 17: Non-Encrypted Protocol Summary |
Network Allow, Network Deny, Network Traffic |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Security Event Summary by Application |
17.03.2.b |
N/A |
Log Mart |
No |
201 CMR 17: Security Event Summary by Application |
Activity, Attack, Compromise, Denial Of Service, Malware, Misuse, Reconnaissance, Suspicious, Vulnerability |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Security Event Summary by Entity |
17.03.2.b |
N/A |
Log Mart |
No |
201 CMR 17: Security Event Summary by Entity |
Activity, Attack, Compromise, Denial Of Service, Malware, Misuse, Reconnaissance, Suspicious, Vulnerability |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Security Event Summary by Impactd Host |
17.03.2.b |
N/A |
Log Mart |
No |
201 CMR 17: Security Event Summary by Impactd Host |
Activity, Attack, Compromise, Denial Of Service, Malware, Misuse, Reconnaissance, Suspicious, Vulnerability |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Security Event Summary by Origin Host |
17.03.2.b |
N/A |
Log Mart |
No |
201 CMR 17: All Log Sources |
Activity, Attack, Compromise, Denial Of Service, Malware, Misuse, Reconnaissance, Suspicious, Vulnerability |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Signature Update Summary |
N/A |
17.04.7 |
Log Mart |
No |
201 CMR 17: All Log Sources |
Configuration, Error |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Software Update Summary |
N/A |
17.04.6 |
Log Mart |
No |
201 CMR 17: All Log Sources |
Configuration, Error |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Terminated Account Access Summary |
N/A |
17.03.2.e, 17.04.1.d |
Log Manager |
Yes |
201 CMR 17: All Log Sources |
Access Failure, Access Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
|
201 CMR 17: Terminated Account Auth Summary |
N/A |
17.03.2.e, 17.04.1.d |
Log Manager |
Yes |
201 CMR 17: Security Systems |
Authentication Failure, Authentication Success |
|||||||||||||||||||||||||||||||||||||||||||||||||||
Report Packages
|
Report Package Name |
Interval |
Functional Area |
Reports |
|---|---|---|---|
|
LogRhythm 201 CMR 17 Reporting Package |
Weekly |
Audit, IT, Security |
201 CMR 17: Account Access Summary 201 CMR 17: Account Authentication Summary 201 CMR 17: Account Deletion Summary 201 CMR 17: Alarm And Response Activity 201 CMR 17: Antivirus Information Summary 201 CMR 17: Antivirus Issue Summary 201 CMR 17: Critical/Error Condition Summary 201 CMR 17: Default Account Access Summary 201 CMR 17: Default Account Auth Summary 201 CMR 17: Disabled/Locked Account Summary 201 CMR 17: File Integrity Monitoring Summary 201 CMR 17: Host Firewall Error Summary 201 CMR 17: Host Firewall Information Summary 201 CMR 17: Network Connection Summary 201 CMR 17: Network Service Summary 201 CMR 17: Non-Encrypted Protocol Summary 201 CMR 17: Security Event Summary by Application 201 CMR 17: Security Event Summary by Entity 201 CMR 17: Security Event Summary by Impactd Host 201 CMR 17: Security Event Summary by Origin Host 201 CMR 17: Signature Update Summary 201 CMR 17: Software Update Summary 201 CMR 17: Terminated Account Access Summary 201 CMR 17: Terminated Account Auth Summary |