On 01/05/2018 12:43 PM, Paige, David B CTR USARMY ICOE (US) wrote:
My audit.rules file is full of checks like this to satisfy the STIG.
My POA&Ms are full of deviations from these settings because they are
unreasonable in many scenarios. Seeing over 100MB/hr in noise from a
non-interactive root account is unreasonable.
--
Paul Arnold, CISSP
Cole Engineering Services, Inc.