Control ID: CA-OPS-009
Control Name: CA Audit Filter Validation
Severity: Critical
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:42:50
Duration: 00:00:00.0730610

Expected Result:
CA audit filter should be 127 for full auditing

Evidence:
Audit Filter Validation for Securetron-Lab-ROOT-CA:
  Current AuditFilter Value: 124
  Required for Full Auditing: 127
  Compliant: NO

Audit Filter Analysis:
  Current value enables 5 out of 7 audit categories
  Missing Categories (2):
    ✗ 1: Start/stop AD Certificate Services
    ✗ 2: Back up/restore CA database

To enable full auditing, set AuditFilter to 127.


Recommendation:
Set AuditFilter registry value to 127 to enable full auditing.
