Check: APSC-DV-000670
Application Security and Development STIG:
APSC-DV-000670
(in versions v6 r2 through v4 r2)
Title
The application must record a time stamp indicating when the event occurred. (Cat II impact)
Discussion
It is important to include the time stamps for when an event occurred. Failure to include time stamps in the event logs is detrimental to forensic analysis.
Check Content
Review the application logs. If the time the event occurred is not included as part of the event, this is a finding.
Fix Text
Configure the application to record the time the event occurred when recording the event.
Additional Identifiers
Rule ID: SV-222446r960879_rule
Vulnerability ID: V-222446
Group Title: SRG-APP-000089
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000169 |
Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a on organization-defined information system components. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AU-12 |
Audit Generation |