STIGQter: STIG Summary: Dragos Platform 2.x Security Technical Implementation Guide Version: 1 Release: 6 Benchmark Date: 01 Apr 2026:

The Dragos Platform must have notification and audit services installed.

DISA Rule

SV-270932r1058029_rule

Vulnerability Number

V-270932

Group Title

SRG-APP-000108

Rule Version

DRAG-OT-000370

Severity

CAT II

CCI(s)

• CCI-000139 - Alert organization-defined personnel or roles within an organization-defined time period in the event of an audit logging process failure.

Weight

10

Fix Recommendation

If a notification does not appear, install KP-CW-24-001. This knowledge pack will add this and other notifications relevant to the STIG to the Dragos Platform.

To add Knowledge Pack:
While logged in to the Dragos Platform with a user account with administrative privileges, navigate to Admin >> SiteStore Management >> Knowledge Packs.

Locate all "STIG-KP_Plus" Knowledge Pack(s).

Click "Deploy" button next to the Knowledge Pack(s).

Fill in the form and click "DEPLOY".

Check Contents

Ensure all notification and audit services are functional.

Log in to the SiteStore CLI and execute the following command:
system k3s status

If the message does not return "system is ready", this is a finding.

(Note that for approximately 15–20 minutes after system startup or reboot, system will not be ready. Additionally, until the sensor is paired with a SiteStore, one pod on the sensor will not be ready).

Vulnerability Number

V-270932

Documentable

False

Rule Version

DRAG-OT-000370

Severity Override Guidance

Ensure all notification and audit services are functional.

Log in to the SiteStore CLI and execute the following command:
system k3s status

If the message does not return "system is ready", this is a finding.

(Note that for approximately 15–20 minutes after system startup or reboot, system will not be ready. Additionally, until the sensor is paired with a SiteStore, one pod on the sensor will not be ready).

Check Content Reference

M

Target Key

5675