Virtual machines should have the Guest Configuration extension installed

NIST SP 800-53 Rev 5

• AU-6(4) Central Review And Analysis
• AU-6(5) Central Review And Analysis
• AU-12 Audit Record Generation
• AU-12(1) System-Wide And Time-Correlated Audit Trial
• SI-4: System Monitoring

NIST Cybersecurity Framework v2.0

• ID.AM-01: Inventories of hardware managed by the organization are maintained.
• ID.AM-02
• ID.RA-09

FedRAMP Moderate Baseline Rev 4

• AU-12 Audit Generation
• SI-4: Information System Monitoring

NIST SP 800-171 Rev 2

• 3.3.1: Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
• 3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
• 3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks
• 3.14.7: Identify unauthorized use of organizational systems.

CMMC 2.0 Level 2

• AU.L2-3.3.1 Create and retain system audit logs and records to the extent needed to enable the monitoring, analysis, investigation, and reporting of unlawful or unauthorized system activity
• AU.L2-3.3.2 Ensure that the actions of individual system users can be uniquely traced to those users, so they can be held accountable for their actions
• SI.L2-3.14.6 Monitor organizational systems, including inbound and outbound communications traffic, to detect attacks and indicators of potential attacks
• SI.L2-3.14.7 Identify unauthorized use of organizational systems

FedRAMP High

• AU-6(4) Central Review And Analysis
• AU-6(5) Integration / Scanning And Monitoring Capabilities
• AU-12 Audit Generation
• AU-12(1) System-Wide / Time-Correlated Audit Trail
• SI-4 Information System Monitoring