family SI
framework nist-800-53
ATT&CK techniques this control defends against
✓ covered by Sigma/YARA in our corpus
× = detection gap
Employ integrity verification tools to detect unauthorized changes to the following software, firmware, and information: {{ insert: param, si-7_prm_1 }} ; and Take the following actions when unauthorized changes to the software, firmware, and information are detected: {{ insert: param, si-7_prm_2 }}.
family SI
framework nist-800-53
Perform an integrity check of {{ insert: param, si-7.1_prm_1 }} {{ insert: param, si-7.1_prm_2 }}.
family SI
framework nist-800-53
Implement the following mechanisms to protect the integrity of boot firmware in {{ insert: param, si-07.10_odp.02 }}: {{ insert: param, si-07.10_odp.01 }}.
family SI
framework nist-800-53
family SI
framework nist-800-53
Require that the integrity of the following user-installed software be verified prior to execution: {{ insert: param, si-07.12_odp }}.
family SI
framework nist-800-53
family SI
framework nist-800-53
family SI
framework nist-800-53
Implement cryptographic mechanisms to authenticate the following software or firmware components prior to installation: {{ insert: param, si-07.15_odp }}.
family SI
framework nist-800-53
Prohibit processes from executing without supervision for more than {{ insert: param, si-07.16_odp }}.
family SI
framework nist-800-53
Implement {{ insert: param, si-07.17_odp }} for application self-protection at runtime.
family SI
framework nist-800-53
Employ automated tools that provide notification to {{ insert: param, si-07.02_odp }} upon discovering discrepancies during integrity verification.
family SI
framework nist-800-53
Employ centrally managed integrity verification tools.
family SI
framework nist-800-53
family SI
framework nist-800-53
Automatically {{ insert: param, si-07.05_odp.01 }} when integrity violations are discovered.
family SI
framework nist-800-53
Implement cryptographic mechanisms to detect unauthorized changes to software, firmware, and information.
family SI
framework nist-800-53
Incorporate the detection of the following unauthorized changes into the organizational incident response capability: {{ insert: param, si-07.07_odp }}.
family SI
framework nist-800-53
Upon detection of a potential integrity violation, provide the capability to audit the event and initiate the following actions: {{ insert: param, si-07.08_odp.01 }}.
family SI
framework nist-800-53
Verify the integrity of the boot process of the following system components: {{ insert: param, si-07.09_odp }}.
family SI
framework nist-800-53