Item Search

NameAudit NamePluginCategory
1.21 CISC-ND-000940CIS Cisco NX OS Switch NDM STIG v1.1.0 CAT IICisco

ACCESS CONTROL

1.99 MADB-10-011400CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT II MySQLDBMySQLDB

AUDIT AND ACCOUNTABILITY

2.2.1 Ensure emergency access account activity is monitoredCIS Microsoft 365 Foundations v7.0.0 L1 E5microsoft_azure

AUDIT AND ACCOUNTABILITY

2.6 Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server - OwnerCIS Microsoft SharePoint 2016 DB v1.1.0MS_SQLDB

ACCESS CONTROL

4.3.6 Ensure sudo authentication timeout is configured correctlyCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 ServerUnix

ACCESS CONTROL

4.3.6 Ensure sudo authentication timeout is configured correctlyCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL

5.2.6 Ensure sudo authentication timeout is configured correctlyCIS Debian Linux 11 v2.0.0 L1 ServerUnix

ACCESS CONTROL

5.6 Ensure access to the su command is restricted - /etc/pam.d/suCIS Debian 9 Server L1 v1.0.1Unix

CONFIGURATION MANAGEMENT

5.7 Ensure access to the su command is restricted - pam_wheel.soCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.7 Ensure access to the su command is restricted - pam_wheel.soCIS Oracle Linux 6 Server L1 v2.0.0Unix

ACCESS CONTROL

5.7 Ensure access to the su command is restricted - wheel group contains rootCIS CentOS 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.7 Ensure access to the su command is restricted - wheel group contains rootCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.8 Ensure idle ESXi shell and SSH sessions time out after 300 seconds or lessCIS VMware ESXi 6.5 v1.0.0 Level 1VMware

ACCESS CONTROL

6.2.2 Ensure no legacy "+" entries exist in /etc/passwdCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.2.2 Ensure no legacy "+" entries exist in /etc/passwdCIS Distribution Independent Linux Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwdCIS CentOS 6 Server L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwdCIS CentOS 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwdCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.3 Ensure no legacy '+' entries exist in /etc/shadowCIS Debian 8 Workstation L1 v2.0.2Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

6.2.3 Ensure no legacy '+' entries exist in /etc/shadowCIS Debian 8 Server L1 v2.0.2Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

6.2.4 Ensure no legacy '+' entries exist in /etc/groupCIS Debian 9 Workstation L1 v1.0.1Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/groupCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS Red Hat 6 Server L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS CentOS 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy "+" entries exist in /etc/groupCIS Distribution Independent Linux Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy "+" entries exist in /etc/groupCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy "+" entries exist in /etc/groupCIS Google Container-Optimized OS v1.2.0 L1 ServerUnix

ACCESS CONTROL

6.2.4 Ensure no legacy "+" entries exist in /etc/groupCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/groupCIS Oracle Linux 6 Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/groupCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/groupCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/groupCIS CentOS 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.3.3.30 Ensure successful and unsuccessful attempts to use the unix_chkpwd command are collectedCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIGUnix

AUDIT AND ACCOUNTABILITY

6.3.3.41 Ensure successful and unsuccessful attempts to use the passwd command are collectedCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIGUnix

AUDIT AND ACCOUNTABILITY

9.5 Restrict Access to the su Command - 'wheel group contains root'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

13.2 Verify No Legacy '+' Entries Exist in /etc/passwd FileCIS Debian Linux 7 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

13.3 Verify No Legacy '+' Entries Exist in /etc/shadow FileCIS Debian Linux 7 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

13.4 Verify No Legacy '+' Entries Exist in /etc/group FileCIS Debian Linux 7 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

AIX7-00-002148 - The AIX /var/spool/cron/atjobs directory must be group-owned by cron.DISA IBM AIX 7.x STIG v3r3Unix

CONFIGURATION MANAGEMENT

ARDC-CL-000315 - Adobe Reader DC must disable the ability to add Trusted Files and Folders.DISA STIG Adobe Acrobat Reader DC Classic Track v2r1Windows

CONFIGURATION MANAGEMENT

AS24-U1-000690 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.DISA STIG Apache Server 2.4 Unix Server v3r2 MiddlewareUnix

ACCESS CONTROL

AS24-U2-000700 - Non-privileged accounts on the hosting system must only access Apache web server security-relevant information and functions through a distinct administrative account.DISA STIG Apache Server 2.4 Unix Site v2r6 MiddlewareUnix

ACCESS CONTROL

F5BI-DM-000017 - The BIG-IP appliance must automatically disable accounts after a 35-day period of account inactivity.DISA F5 BIG-IP Device Management STIG v2r4F5

ACCESS CONTROL, CONFIGURATION MANAGEMENT

OL08-00-010140 - OL 8 operating systems booted with United Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user mode and maintenance.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

SP13-00-000175 - The SharePoint setup account must be configured with the minimum privileges on the SQL server.DISA Microsoft SharePoint 2013 STIG v2r4Windows

CONFIGURATION MANAGEMENT

UBTU-16-030200 - The Ubuntu operating system must enforce SSHv2 for network access to all accounts.DISA STIG Ubuntu 16.04 LTS v2r3Unix

IDENTIFICATION AND AUTHENTICATION

WN12-CC-000120 - Windows Media Digital Rights Management (DRM) must be prevented from accessing the Internet.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

CONFIGURATION MANAGEMENT