STIGQter: STIG Summary: Microsoft Windows Server 2022 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

Windows Server 2022 must, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.

DISA Rule

SV-254295r959008_rule

Vulnerability Number

V-254295

Group Title

SRG-OS-000479-GPOS-00224

Rule Version

WN22-AU-000020

Severity

CAT II

CCI(s)

CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

Fix Recommendation

Configure the system to, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.

Check Contents

Verify the audit records, at a minimum, are offloaded for interconnected systems in real time and offloaded for standalone or nondomain-joined systems weekly.

If they are not, this is a finding.

Vulnerability Number

V-254295

Documentable

False

Rule Version

WN22-AU-000020

Severity Override Guidance

Verify the audit records, at a minimum, are offloaded for interconnected systems in real time and offloaded for standalone or nondomain-joined systems weekly.

If they are not, this is a finding.

Check Content Reference

Target Key

5485