Mondoo Docs
MQL ResourcesOperating SystemWindows audit policies

Windows audit policy

auditpol.entry MQL resource for querying Operating System infrastructure with cnquery and cnspec.

Operating System

Windows audit policy

Use MQL in cnspec shell or policy:

auditpol.entry
Min version: 5.15.0Defaults: subcategory inclusionsetting exclusionsetting

Relationships

Mini Map
Operating System
2 resources · 2 relationshipsClick to select, expand fields to see properties.

Fields (6)

FieldTypeDescription
exclusionsettingrequired
stringExclusive settings
inclusionsettingrequired
stringInclusive setting
machinenamerequired
stringMachine name
policytargetrequired
stringPolicy target
subcategoryrequired
stringSubcategory
subcategoryguidrequired
stringSubcategory GUID

Windows audit policies

auditpol MQL resource for querying Operating System infrastructure with cnquery and cnspec.

List of SSH authorized keys

authorizedkeys MQL resource for querying Operating System infrastructure with cnquery and cnspec.