Check: APSC-DV-000670
Application Security and Development STIG:
APSC-DV-000670
(in versions v5 r3 through v4 r2)
Title
The application must record a time stamp indicating when the event occurred. (Cat II impact)
Discussion
It is important to include the time stamps for when an event occurred. Failure to include time stamps in the event logs is detrimental to forensic analysis.
Check Content
Review the application logs. If the time the event occurred is not included as part of the event, this is a finding.
Fix Text
Configure the application to record the time the event occurred when recording the event.
Additional Identifiers
Rule ID: SV-222446r879559_rule
Vulnerability ID: V-222446
Group Title: SRG-APP-000089
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000169 |
The information system provides audit record generation capability for the auditable events defined in AU-2 a. at organization-defined information system components. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| AU-12 |
Audit Generation |