CIS Benchmark Result

cis_benchmark_result

The CIS Benchmark Result object contains information as defined by the Center for Internet Security (CIS) benchmark result. CIS Benchmarks are a collection of best practices for securely configuring IT systems, software, networks, and cloud infrastructure.

Contents

Attributes

Caption Name Type Is Array Default Description
Description desc String The CIS benchmark description.
Name name String The CIS benchmark name.
Raw Data raw_data JSON The event data as received from the event source.
Record ID record_id String Unique identifier for the object
Remediation Guidance remediation Remediation Describes the recommended remediation steps to address identified issue(s).
Rule rule Rule The CIS benchmark rule.
Unmapped Data unmapped Unmapped The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.

References

Referenced By

Context

CIS Benchmark Result

JSON

            
{
  "caption": "CIS Benchmark Result",
  "description": "The CIS Benchmark Result object contains information as defined by the Center for Internet Security (<a target='_blank' href='https://www.cisecurity.org/cis-benchmarks/'>CIS</a>) benchmark result. CIS Benchmarks are a collection of best practices for securely configuring IT systems, software, networks, and cloud infrastructure.",
  "extends": "object",
  "name": "cis_benchmark_result",
  "attributes": {
    "desc": {
      "description": "The CIS benchmark description.",
      "requirement": "optional",
      "caption": "Description",
      "type": "string_t"
    },
    "name": {
      "description": "The CIS benchmark name.",
      "requirement": "required",
      "caption": "Name",
      "type": "string_t"
    },
    "remediation": {
      "requirement": "optional",
      "caption": "Remediation Guidance",
      "description": "Describes the recommended remediation steps to address identified issue(s).",
      "type": "remediation"
    },
    "rule": {
      "description": "The CIS benchmark rule.",
      "requirement": "optional",
      "caption": "Rule",
      "type": "rule"
    },
    "raw_data": {
      "group": "context",
      "caption": "Raw Data",
      "description": "The event data as received from the event source.",
      "type": "json_t"
    },
    "record_id": {
      "description": "Unique identifier for the object",
      "group": "primary",
      "requirement": "required",
      "caption": "Record ID",
      "type": "string_t"
    },
    "unmapped": {
      "caption": "Unmapped Data",
      "description": "The attributes that are not mapped to the event schema. The names and values of those attributes are specific to the event source.",
      "type": "unmapped",
      "is_array": true
    }
  }
}