Tags: Compliance, PCI
Class: fireeye_hx_alert
Required List:
Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs — Trellix Endpoint Security (HX).
Malware by Source IPv4: Displays malware discovered in the CDE.
Malware by Virus: Displays the viruses that have been reported.
Malware Details: Displays the username, operating system, and process path of the infected process.
Malware by Timestamp: Displays the date and time of the malware.
Malware by Process: Displays the infected process name.
Requirement 7.2: Establish an access control system(s) for systems components that restricts access based on a user’s need to know, and is set to “deny all” unless specifically allowed.
Monitors user activity and alerts on improper usage.