Item Search

NameAudit NamePluginCategory
1.182 SOL-11.1-080020CIS Solaris 11 SPARC STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

3.19 Host must have an accurate Exception Users listCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

ACCESS CONTROL, MEDIA PROTECTION

5.4.2 Consider external secret storageCIS Red Hat OpenShift Container Platform v1.9.0 L2 OpenShiftOpenShift

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2 Consider external secret storageCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

ARBA-NT-000920 - AOS must use cryptographic algorithms approved by the National Security Agency (NSA) to protect national security systems (NSS) when transporting classified traffic across an unclassified network.DISA HPE Aruba Networking AOS Wireless STIG v1r2ArubaOS

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-NDM-000180 - The Dell OS10 Switch must initiate session auditing upon startup.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

OS10-NDM-000350 - The Dell OS10 Switch must be configured to disable the Bash shell.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

CONFIGURATION MANAGEMENT

OS10-NDM-000370 - The Dell OS10 Switch must be configured to use DOD PKI as multifactor authentication (MFA) for interactive logins.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

IDENTIFICATION AND AUTHENTICATION

OS10-NDM-000510 - The Dell OS10 Switch must use FIPS 140-2 approved algorithms for authentication to a cryptographic module.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

IDENTIFICATION AND AUTHENTICATION

OS10-NDM-000670 - The Dell OS10 Switch must generate an immediate real-time alert of all audit failure events requiring real-time alerts.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

AUDIT AND ACCOUNTABILITY

OS10-NDM-000680 - The Dell OS10 Switch must be configured to synchronize internal information system clocks using redundant authoritative time sources.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

AUDIT AND ACCOUNTABILITY

OS10-NDM-000790 - The Dell OS10 Switch must be configured to implement cryptographic mechanisms using a FIPS 140-2 approved algorithm to protect the confidentiality of remote maintenance sessions.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

MAINTENANCE

OS10-NDM-000800 - The Dell OS10 Switch must be configured to protect against known types of denial-of-service (DoS) attacks by employing organization-defined security safeguards.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

SYSTEM AND COMMUNICATIONS PROTECTION

OS10-NDM-000910 - The Dell OS10 Switch must generate log records for a locally developed list of auditable events.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

OS10-NDM-000980 - The Dell OS10 Switch must be running an operating system release that is currently supported by Dell.DISA Dell OS10 Switch NDM STIG v1r1Dell_OS10

CONFIGURATION MANAGEMENT

SLES-12-030040 - SuSEfirewall2 must protect against or limit the effects of Denial-of-Service (DoS) attacks on the SUSE operating system by implementing rate-limiting measures on impacted network interfaces.DISA SLES 12 STIG v3r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

SOL-11.1-080020 - The system must implement non-executable program stacks.DISA Solaris 11 SPARC STIG v3r6Unix

CONFIGURATION MANAGEMENT

WN25-00-000002 - Windows Server 2025 must prohibit the use or connection of unauthorized hardware components.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000030 - Windows Server 2025 administrative accounts must not be used with applications that access the internet, such as web browsers, or with potential internet sources, such as email.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

WN25-00-000080 - Windows Server 2025 must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000140 - Windows Server 2025 permissions for the system drive root directory (usually C:\) must conform to minimum requirements.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000160 - Windows Server 2025 permissions for the Windows installation directory must conform to minimum requirements.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000180 - Windows Server 2025 nonadministrative accounts or groups must only have print permissions on printer shares.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000310 - Windows Server 2025 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-00-000330 - Windows Server 2025 must not have the Microsoft FTP service installed unless required by the organization.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000332 - Windows Server 2025 must not have Wi-Fi enabled unless required by the organization.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-00-000360 - Windows Server 2025 must not have the Telnet Client installed.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-AC-000020 - Windows Server 2025 must have the number of allowed bad logon attempts configured to three or less.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-AC-000030 - Windows Server 2025 must have the period of time before the bad logon counter is reset configured to 15 minutes or greater.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-AU-000020 - Windows Server 2025 must, at a minimum, off-load audit records of interconnected systems in real time and off-load stand-alone or nondomain-joined systems weekly.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000040 - Windows Server 2025 permissions for the Security event log must prevent access by nonprivileged accounts.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000070 - Windows Server 2025 must be configured to audit Account Logon - Credential Validation successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000080 - Windows Server 2025 must be configured to audit Account Logon - Credential Validation failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000130 - Windows Server 2025 must be configured to audit Detailed Tracking - Plug and Play Events successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000140 - Windows Server 2025 must be configured to audit Detailed Tracking - Process Creation successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000150 - Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000170 - Windows Server 2025 must be configured to audit Logon/Logoff - Group Membership successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-AU-000260 - Windows Server 2025 must be configured to audit Policy Change - Audit Policy Change successes.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-AU-000581 - Windows Server 2025 must be configured to audit file system failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-CC-000090 - Windows Server 2025 command line data must be included in process creation events.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-CC-000100 - Windows Server 2025 must be configured to enable Remote host allows delegation of nonexportable credentials.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000140 - Windows Server 2025 group policy objects must be reprocessed even if they have not changed.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000170 - Windows Server 2025 network selection user interface (UI) must not be displayed on the logon screen.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000200 - Windows Server 2025 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000240 - Windows Server 2025 administrator accounts must not be enumerated during elevation.DISA Microsoft Windows Server 2025 STIG v1r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN25-CC-000250 - Windows Server 2025 Telemetry must be configured to limit diagnostic data sent to Microsoft.DISA Microsoft Windows Server 2025 STIG v1r1Windows

CONFIGURATION MANAGEMENT

WN25-CC-000270 - Windows Server 2025 Application event log size must be configured to 32768 KB or greater.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-CC-000370 - Windows Server 2025 Remote Desktop Services must require secure Remote Procedure Call (RPC) communications.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL

WN25-CC-000500 - Windows Server 2025 Windows Remote Management (WinRM) service must not use Basic authentication.DISA Microsoft Windows Server 2025 STIG v1r1Windows

MAINTENANCE

WN25-CC-000520 - Windows Server 2025 Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Microsoft Windows Server 2025 STIG v1r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION