Item Search

NameAudit NamePluginCategory
1.1.28 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate - keyCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.29 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate - tls-cert-fileCIS Kubernetes 1.7.0 Benchmark v1.1.0 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.2.26 Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriateCIS Red Hat OpenShift Container Platform v1.9.0 L1OpenShift

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.1.2 Ensure chrony is configuredCIS Amazon Linux 2023 v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.1.2.1 Ensure chrony is configured with authorized timeserverCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Red Hat Enterprise Linux 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS AlmaLinux OS 9 v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Oracle Linux 8 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Red Hat Enterprise Linux 10 v1.0.1 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.2 Ensure chrony is configuredCIS Red Hat Enterprise Linux 9 v3.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configuredCIS Debian Linux 13 v1.1.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configuredCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configuredCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configuredCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configured with authorized timeserverCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.3.3.1 Ensure chrony is configured with authorized timeserverCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 ServerUnix

AUDIT AND ACCOUNTABILITY

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS Microsoft SQL Server 2025 v1.0.0 L1 Database Engine MS_SQLDBMS_SQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS Microsoft SQL Server 2019 v1.6.0 L1 Database Engine MS_SQLDBMS_SQLDB

CONFIGURATION MANAGEMENT

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

CONFIGURATION MANAGEMENT

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS SQL Server 2014 Database L1 DB v1.5.0MS_SQLDB

CONFIGURATION MANAGEMENT

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS SQL Server 2016 Database L1 DB v1.4.0MS_SQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.5 Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'CIS SQL Server 2017 Database L1 DB v1.3.0MS_SQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

3.8 Ensure only the default permissions specified by Microsoft are granted to the public server roleCIS Microsoft SQL Server 2022 v1.3.0 L1 Database Engine MS_SQLDBMS_SQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.12 Verify that Docker server certificate file permissions are set to 444 or more restrictiveCIS Docker 1.13.0 v1.0.0 L1 DockerUnix

CONFIGURATION MANAGEMENT

4.2.1 Ensure 'trustDefaultCerts' is set to 'false'CIS IBM WebSphere Liberty v1.0.0 L2Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.5 Configure Network Time Protocol (NTP)CIS Debian Linux 7 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

6.5 Configure Network Time Protocol (NTP) - restrict -6CIS Debian Linux 7 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

AS24-U1-000630 - Debugging and trace information used to diagnose the Apache web server must be disabledDISA STIG Apache Server 2.4 Unix Server v3r2 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

AS24-U2-000360 - The Apache web server must be configured to use a specified IP address and port.DISA STIG Apache Server 2.4 Unix Site v2r6 MiddlewareUnix

CONFIGURATION MANAGEMENT

AS24-W1-000360 - The Apache web server must be configured to use a specified IP address and portDISA STIG Apache Server 2.4 Windows Server v3r4Windows

CONFIGURATION MANAGEMENT

DISA STIG VMware vSphere ESXi 6 Security Technical Implementation Guide Version 1 Release 5DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix
DISA_STIG_VMware_vSphere_8.0_vCenter_Appliance_User_Interface_UI_v2r3.audit from DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3DISA VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v2r3Unix
OH12-1X-000224 - The OHS server root directory must not be on a network share.DISA STIG Oracle HTTP Server 12.1.3 v2r3Unix

CONFIGURATION MANAGEMENT

SQL4-00-011410 - Where SQL Server Audit is in use, SQL Server must generate audit records when privileges/permissions are retrieved.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037500 - SQL Server must generate Trace or Audit records when successful logons or connections occur - Event ID 15DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037500 - SQL Server must generate Trace or Audit records when successful logons or connections occur - Event ID 17DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037500 - SQL Server must generate Trace or Audit records when successful logons or connections occur.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037900 - SQL Server must generate Trace or Audit records when logoffs or disconnections occur - Event ID 14DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037900 - SQL Server must generate Trace or Audit records when logoffs or disconnections occur - Event ID 15DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-037900 - SQL Server must generate Trace or Audit records when logoffs or disconnections occur - Event ID 16DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

VCLD-67-000031 - VAMI must have debug logging disabled.DISA STIG VMware vSphere 6.7 VAMI-lighttpd v1r3Unix

SYSTEM AND INFORMATION INTEGRITY

VCLD-70-000022 - VAMI must have debug logging disabled.DISA STIG VMware vSphere 7.0 VAMI v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

WBLC-03-000129 - Oracle WebLogic must utilize automated mechanisms to prevent program execution on the information system.Oracle WebLogic Server 12c Linux v2r2 MiddlewareUnix

CONFIGURATION MANAGEMENT