Windows Server 2022 audit records must be backed up to a different system or media than the system being audited.
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-254294
WN22-AU-000010
SV-254294r958754_rule
Medium
Description
Protection of log data includes ensuring the log data is not accidentally lost or deleted. Audit information stored in one location is vulnerable to accidental or incidental deletion or alteration.