AlienVault® USM Anywhere™

HIPAA Control T33 §164.312(c)(1) - Linux

Role Availability Read-Only Analyst Manager

The "HIPAA Control T33 §164.312(c)(1) Does your practice have mechanisms to corroborate that ePHI has not been altered, modified or destroyed in an unauthorized manner? - Linux" report generated from this template considers whether your practice has data authentication mechanisms and tools, such as checksum. Checksum is a computation that is introduced when ePHI is transmitted or stored. The computation is checked at a later time (such as when ePHI recalled or when it is received at the intended destination) to ascertain whether the computations match. If the checksum matches, then it is less likely that the ePHI was altered or modified. Also consider whether your practice relies on encryption validation to authenticate ePHI.

The following table shows the event filters used by this template:

Filters Used by HIPAA Control T33 §164.312(c)(1) - Linux
Field Values
Asset Groups "HIPAA"
Data Source Device Osquery
Event Type file_events
Suppressed Flase

To generate the HIPAA Control T33 §164.312(c)(1) - Linux report

  1. Go to Reports > Compliance Templates.
  2. On the left navigation pane, click HIPAA.

  3. Click Generate Report on the specific line for this report.

    The Configure Report dialog box displays.

  4. Click Edit Filters if you want to modify the selected filters, and then Continue to Filters. Do the modifications you need, and then click Edit Report.
  5. Click the date field if you want to choose a different date range.
  6. Configure Report Dialog Box

    Choose Last Hour, Last 24 Hours, Last 7 Days, Last 30 Days, Last 90 Days, or Custom Range to set a particular date range.

  7. Under the Format section, select either CSV or PDF for the format of the report.
  8. Select if you want to generate the report again, and choose Never, Daily, Weekly, Bi-weekly, and Monthly.
  9. Enter an email address to send the report. Select the Send to my Email Address option to add your email automatically.
  10. Select the Enable link expiration option. This link is delivered by email and expires in 14 days.
  11. Click Next.
  12. In the Report Name field, enter a name for the report. This name will be displayed in the Saved Reports page.
  13. (Optional.) Add a description that will be included.
  14. Under the Number of records section, choose the maximum number of records to include on the report: 20, 50, 100, 500, 1000, or 2500.
  15. If you have chosen the PDF format, you will see the Graphs section, which you can use to include additional views. You can add or remove graphs included in the report by clicking the and the icons.
  16. Select Save & Run if you wish to keep the report in your Saved Reports on USM Anywhere page and receive the report in the indicated email.
  17. Click Run to run the report.