Detections
Analytics

Item Search

NameAudit NamePluginCategory
1.25 Ensure 'Guest profiles' do not existMobileIron - CIS Google Android v1.2.0 L1MDM
2.2.5 Ensure 'Allow log on locally' is set to 'Administrators, Users'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.2.6 Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.6 Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.2.18 Ensure 'Deny log on as a service' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.19 Ensure 'Deny log on locally' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.23 Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.27 Ensure 'Lock pages in memory' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.31 Ensure 'Modify an object label' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.2.36 Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.36 Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.3.1.2 Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.3.1.2 Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.1.2 Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.3.1.4 Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.3.1.4 Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.1.4 Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.3.1.5 Configure 'Accounts: Rename administrator account'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.3.1.5 Configure 'Accounts: Rename administrator account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.3.6.5 Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.6.5 Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.3.10.2 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1Windows
2.3.10.2 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.10.3 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.3.11.6 Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.4.1 Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.4.1 Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.8.4.2 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.9.10.1.1 Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
18.9.10.1.1 Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.10.1.1 Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.9.45.6 Ensure 'Configure Password Manager' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.48.6 Ensure 'Configure Password Manager' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows