| Source | Azure Portal | ||
| Display name | Microsoft Managed Control 1557 - Vulnerability Scanning | Review Historic Audit Logs | ||
| Id | 36fbe499-f2f2-41b6-880e-52d7ea1d94a5 | ||
| Version | 1.0.0 Details on versioning |
||
| Category | Regulatory Compliance Microsoft Learn |
||
| Description | Microsoft implements this Risk Assessment control | ||
| Additional metadata |
Name/Id: ACF1557 / Microsoft Managed Control 1557 Category: Risk Assessment Title: Vulnerability Scanning | Review Historic Audit Logs Ownership: Customer, Microsoft Description: The organization reviews historic audit logs to determine if a vulnerability identified in the information system has been previously exploited. Requirements: Azure implements audit review, analysis, and reporting through the use of Azure logging and monitoring tools for both server baselines and network devices. The automated tooling processes logs for anomalous activity and sends alerts and incident tickets as needed. Additionally, to identify vulnerabilities, Azure conducts scans of operating systems, databases, and web applications in the Azure environment. Multiple sources of information for vulnerability-related data are used for these scans including MSRC, vendor websites, and other third-party websites. The Security Response Team reviews historic log data as needed for incident investigation. |
||
| Mode | Indexed | ||
| Type | Static | ||
| Preview | False | ||
| Deprecated | False | ||
| Effect | Fixed audit |
||
| RBAC role(s) | none | ||
| Rule aliases | none | ||
| Rule resource types | IF (2) Microsoft.Resources/subscriptions Microsoft.Resources/subscriptions/resourceGroups |
||
| Compliance | Not a Compliance control | ||
| Initiatives usage | none | ||
| History | none | ||
| JSON compare | n/a | ||
| JSON |
|