There appears to be a discrepancy in CIS Rule 3.13 evaluation where direct SQL queries against MSDB return zero results, while Change Tracker reports non-zero findings. Investigation shows that Change Tracker evaluates results based on the connection string database context rather than strictly querying MSDB. As a result, findings may include data from other databases , especially in agentless configurations. This raises concerns about accuracy, rule scope, and whether this is a product limitation or defect.Please help.
Im using version 8.1
