SQL server audit retention less than 90 days
Audit logs retention period is less than 90 days for {AzureSqlDbServer} SQL db. Audit Logs can be used to check...
All articles by Orca Security
Enhanced instance metadata service (IMDSv2) is not enforced
The use of IMDSv2, the enhanced version of the Instance Metadata Service, is not enforced on the EC2 instance {AwsEc2Instance}...
ACM certificate without Transparency Logging
We have found an ACM certificate ('{AwsCertificate}') without transparency logging enabled. To guard against SSL/TLS certificates that are issued by...
Log monitoring is not set up for unauthorized API calls
Log Service is a real-time data logging service that supports collection, consumption, shipping, search, and analysis of logs. It was...
Audit log retention period is not set to 365 days
Log retention controls how long activity logs should be retained. Studies have shown that The Mean Time to Detect (MTTD)...
PostgreSQL instance with ‘log_connections’ flag disabled
PostgreSQL does not log attempted connections by default. Enabling the 'log_connections' setting will create log entries for each attempted connection...
PostgreSQL instance with ‘log_statement_stats’ enabled
The log_statement_stats flag enables a crude profiling method for logging parser performance statistics which even though can be useful for...
PostgreSQL instance where ‘log_temp_files’ flag value isn’t set to 0
PostgreSQL can create a temporary file for actions such as sorting, hashing and temporary query results when these operations exceed...
PostgreSQL instance with ‘log_error_verbosity’ flag set to ‘terse’
Auditing helps in troubleshooting operational problems and also permits forensic analysis. If log_error_verbosity is not set to the correct value,...
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.