| APPL-13-001044 | V1R5 | The macOS system must generate audit records for DOD-defined events such as successful/unsuccessful logon attempts, successful/unsuccessful direct access attempts, starting and ending time for user access, and concurrent logons to the same account from different sources. | |
| TOSS-04-031130 | V2R3 | Successful/unsuccessful modifications to the "lastlog" file in TOSS must generate an audit record. | |
| WN10-AU-000005 | V3R4 | The system must be configured to audit Account Logon - Credential Validation failures. | |
| WN10-AU-000010 | V3R4 | The system must be configured to audit Account Logon - Credential Validation successes. | |
| WN10-AU-000054 | V3R4 | The system must be configured to audit Logon/Logoff - Account Lockout failures. | |
| WN10-AU-000060 | V3R4 | The system must be configured to audit Logon/Logoff - Group Membership successes. | |
| WN10-AU-000080 | V3R4 | The system must be configured to audit Logon/Logoff - Special Logon successes. | |
| WN11-AU-000054 | V2R5 | The system must be configured to audit Logon/Logoff - Account Lockout failures. | |
| WN11-AU-000080 | V2R5 | The system must be configured to audit Logon/Logoff - Special Logon successes. | |
| WN16-AU-000070 | V2R9 | Windows Server 2016 must be configured to audit Account Logon - Credential Validation successes. | |
| WN16-AU-000080 | V2R9 | Windows Server 2016 must be configured to audit Account Logon - Credential Validation failures. | |
| WN16-AU-000240 | V2R9 | Windows Server 2016 must be configured to audit Logon/Logoff - Group Membership successes. | |
| WN16-AU-000280 | V2R9 | Windows Server 2016 must be configured to audit Logon/Logoff - Special Logon successes. | |
| WN16-AU-000285 | V2R9 | Windows 2016 must be configured to audit Object Access - Other Object Access Events successes. | |
| WN16-AU-000286 | V2R9 | Windows 2016 must be configured to audit Object Access - Other Object Access Events failures. | |
| WN19-AU-000070 | V3R6 | Windows Server 2019 must be configured to audit Account Logon - Credential Validation successes. | |
| WN19-AU-000080 | V3R6 | Windows Server 2019 must be configured to audit Account Logon - Credential Validation failures. | |
| WN19-AU-000170 | V3R6 | Windows Server 2019 must be configured to audit Logon/Logoff - Group Membership successes. | |
| WN19-AU-000210 | V3R6 | Windows Server 2019 must be configured to audit Logon/Logoff - Special Logon successes. | |
| WN19-AU-000220 | V3R6 | Windows Server 2019 must be configured to audit Object Access - Other Object Access Events successes. | |
| WN19-AU-000230 | V3R6 | Windows Server 2019 must be configured to audit Object Access - Other Object Access Events failures. | |
| WN22-AU-000070 | V2R6 | Windows Server 2022 must be configured to audit Account Logon - Credential Validation successes. | |
| WN22-AU-000080 | V2R6 | Windows Server 2022 must be configured to audit Account Logon - Credential Validation failures. | |
| WN22-AU-000170 | V2R6 | Windows Server 2022 must be configured to audit Logon/Logoff - Group Membership successes. | |
| WN22-AU-000210 | V2R6 | Windows Server 2022 must be configured to audit Logon/Logoff - Special Logon successes. | |
| WN22-AU-000220 | V2R6 | Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes. | |
| WN22-AU-000230 | V2R6 | Windows Server 2022 must be configured to audit Object Access - Other Object Access Events failures. | |