access to an object, and process exit. win-def: 0..1 false The OS MUST attempts EntityStateAuditType to access the directory service. logon 0..1 The OS MUST audit each time this computer validates the credentials of an account. object_access win-def: 0..1 false The OS MUST audit each EntityStateAuditType instance of user attempts to access a non-Active Directory object, such as a file, that has its own system access control (SACL) specified. The type of access request, such as Write, Read, or Modify, and the account making the request MUST match the settings in the SACL. policy_change win-def: 0..1 false The OS must audit attempts EntityStateAuditType to change Policy object rules, such as user rights assignment policy, audit policy, account policy, or trust policy. privilege_use win-def: 0..1 false The OS must audit each EntityStateAuditType instance of user attempts to use privileges. system win-def: 0..1 false The OS must audit attempts EntityStateAuditType to change the system time, startup, restart, or shutdown the system, and load extensible authentication features. Also, it should audit the loss of audited events due to auditing system failure and any instance of a security log size that exceeds a configurable warning threshold level.
access to an object, and process exit. win-def: EntityStateAuditType 0..1 false The OS MUST attempts to access the directory service. logon 0..1 The OS MUST audit each time this computer validates the credentials of an account. object_access win-def: EntityStateAuditType 0..1 false The OS MUST audit each instance of user attempts to access a non-Active Directory object, such as a file, that has its own system access control (SACL) specified. The type of access request, such as Write, Read, or Modify, and the account making the request MUST match the settings in the SACL. policy_change win-def: EntityStateAuditType 0..1 false The OS must audit attempts to change Policy object rules, such as user rights assignment policy, audit policy, account policy, or trust policy. privilege_use win-def: EntityStateAuditType 0..1 false The OS must audit each instance of user attempts to use privileges. system win-def: EntityStateAuditType 0..1 false The OS must audit attempts to change the system time, startup, restart, or shutdown the system, and load extensible authentication features. Also, it should audit the loss of audited events due to auditing system failure and any instance of a security log size that exceeds a configurable warning threshold level.
oval-windows-extension-specification_12-18-2014.docx