SI-4(22)_unauthorized-network-services
Detect network services that have not been authorized or approved by [organization-defined] ;
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Detect network services that have not been authorized or approved by [organization-defined] ;
Implement the following host-based monitoring mechanisms at [organization-defined]: [organization-defined].
Discover, collect, and distribute to [organization-defined] , indicators of compromise provided by [organization-defined].
Provide visibility into network traffic at external and key internal system interfaces to optimize the effectiveness of monitoring devices.
Determine criteria for unusual or unauthorized activities or conditions for inbound and outbound communications traffic;
Alert [organization-defined] when the following system-generated indications of compromise or potential compromise occur: [organization-defined].
Restrict Non-privileged Users
Notify [organization-defined] of detected suspicious events;
Test intrusion-monitoring tools and mechanisms [organization-defined].
Monitor the system to detect: Attacks and indicators of potential attacks in accordance with the following monitoring objectives: [organization-define