STIGQter: STIG Summary: Microsoft Windows Server 2025 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

Windows Server 2025 must, at a minimum, off-load audit records of interconnected systems in real time and off-load stand-alone or nondomain-joined systems weekly.

DISA Rule

SV-278042r1182270_rule

Vulnerability Number

V-278042

Group Title

SRG-OS-000479-GPOS-00224

Rule Version

WN25-AU-000020

Severity

CAT II

CCI(s)

• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure the system to, at a minimum, off-load audit records of interconnected systems in real time and off-load stand-alone or nondomain-joined systems weekly.

Check Contents

Verify the audit records, at a minimum, are off-loaded for interconnected systems in real time and off-loaded for stand-alone or nondomain-joined systems weekly.

If they are not, this is a finding.

Vulnerability Number

V-278042

Documentable

False

Rule Version

WN25-AU-000020

Severity Override Guidance

Verify the audit records, at a minimum, are off-loaded for interconnected systems in real time and off-loaded for stand-alone or nondomain-joined systems weekly.

If they are not, this is a finding.

Check Content Reference

M

Target Key

5719