id: configure-service-timestamps-logmessages

info:
  name: Cisco Configure Service Timestamps Log Messages - Detect
  author: pussycat0x
  severity: info
  description: |
    Cisco service timestamp configuration for log messages was not implemented.
  reference:
    - https://www.cisco.com/E-Learning/bulk/public/tac/cim/cib/using_cisco_ios_software/cmdrefs/service_timestamps.htm
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cvss-score: 0
    cwe-id: CWE-200
  tags: file,audit,cisco,config-audit,cisco-switch,router

file:
  - extensions:
      - conf

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "service timestamps log datetime msec show-timezone localtime"
        negative: true

      - type: word
        words:
          - "configure terminal"

# Enhanced by md on 2023/05/02
# digest: 4b0a00483046022100c0cb129cce9ac0411ef5079ca443c0825d38107983ac9adddc1b440fba342b00022100ce2df46bb2f4d0f2ea0ab49d8f2904548be89c8d24e1b5688bdae48942d9aef9:922c64590222798bb761d5b6d8e72950