NIST

In <NIST> there are 2 report templates.

Account Logon

Data Security (PR.DS)

• Windows : Failed Network Logons
• Windows : Failed User Logons
• Windows : File Crated
• Windows : File Deleted
• Windows : File Modified
• Windows : File Permission Changes
• Windows : Network Logoffs
• Windows : Network Logon
• Windows : Removable Disk Creates
• Windows : Removable Disk Deletes
• Windows : Removable Disk Failed Creates
• Windows : Removable Disk Failed Deletes
• Windows : Removable Disk Failed Modifications
• Windows : Removable Disk Failed Reads
• Windows : Removable Disk Modifications
• Windows : Removable Disk Reads
• Windows : Successful Post Authentication
• Windows : Successful Pre Authentication
• Windows : Terminal Server Disconnected
• Windows : Terminal Server Rconnected
• Windows : Unsuccessful Post Authentication
• Windows : Unsuccessful Pre Authentication
• Windows : User Logoff
• Windows : User Logon
• Windows : Windows Individual User Action
• Windows : Wireless Network Authentications
• Windows : Wireless Network Connected
• Windows : Wireless Network Disconnected
• Object Access

Risk Assessment (ID.RA)

• Windows : Threat Detections by Mcafee
• Windows : Threats Detection by Microsoft Antimalware
• Windows : Threats Detection by Norton AntiVirus
• Windows : Threats Detection by Sophos Anti-Virus
• Windows : Threats Detections by ESET Endpoint Antivirus