V-222495
Application Security and Development Security Technical Implementation Guide
Title
The application must provide an audit reduction capability that does not alter original content or time ordering of audit records.
Description
<VulnDiscussion>If the audit reduction capability alters the content or time ordering of audit records, the integrity of the audit records is compromised, and the records are no longer usable for forensic analysis. Time ordering refers to the chronological organization of records based on time stamps. The degree of time stamp precision can affect this. Audit reduction is a process that manipulates collected audit information and organizes such information in a summary format that is more meanin...
Fix Text (Documentation Requirement)
Configure the application to not alter original log content or time ordering of audit records.