| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 13 v1.1.0 L1 Workstation | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 10 v2.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 12 v2.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 12 v2.0.0 L1 Workstation | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4.1 Ensure bootloader password is set | CIS Debian Linux 10 v2.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| 1.4.3 Set password lifetime, warning time and grace time for local credentials | CIS Cisco NX-OS v1.2.0 L1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION |
| 2.2.14 (L1) Configure 'Create symbolic links' | CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 2.3.3.4 Ensure Remote Login Is Disabled | CIS Apple macOS 26 Tahoe v1.1.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.3.3.5 Ensure Remote Login Is Disabled | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 5.3 (L1) Ensure SSH is disabled | CIS VMware ESXi 7.0 v1.5.0 L1 | VMware | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS SUSE Linux Enterprise 15 v2.0.1 L1 Workstation | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Ubuntu Linux 26.04 LTS v1.0.0 L1 Server | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| AZLX-23-001070 - Amazon Linux 2023 must use cryptographic mechanisms to protect the integrity of audit tools. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| CIS Control 12 (12.4(b)) Deny Communications Over Unauthorized Ports | CAS Implementation Group 1 Audit File | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| CIS_Cisco_IOS_XE_Switch_L2S_STIG_v1.0.0_CAT_II.audit from CIS Cisco IOS XE Switch L2S STIG v1.0.0 | CIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II | Cisco | |
| CIS_Cisco_IOS_XE_Switch_L2S_STIG_v1.0.0_CAT_III.audit from CIS Cisco IOS XE Switch L2S STIG v1.0.0 | CIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT III | Cisco | |
| CIS_Cisco_IOS_XE_Switch_NDM_STIG_v1.1.0_CAT_II.audit from CIS Cisco IOS XE Switch NDM STIG v1.1.0 | CIS Cisco IOS XE Switch NDM STIG v1.1.0 CAT II | Cisco | |
| CIS_DC_SERVER_2012_R2_Level_2_v3.0.0.audit from CIS Microsoft Windows Server 2012 R2 Benchmark | CIS Windows Server 2012 R2 DC L2 v3.0.0 | Windows | |
| CIS_Google_Container-Optimized_OS_v1.2.0_L2_Server.audit from CIS Google Container-Optimized OS Benchmark v1.2.0 | CIS Google Container-Optimized OS v1.2.0 L2 Server | Unix | |
| CIS_MariaDB_Enterprise_10.x_STIG_v1.1.0_CAT_I_Unix.audit from CIS MariaDB Enterprise 10.x STIG v1.1.0 | CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT I Unix | Unix | |
| CIS_Microsoft_Exchange_2019_Mailbox_Server_STIG_v1.0.0_CAT_I.audit from CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT I | Windows | |
| CIS_Microsoft_Exchange_Server_2016_Level_1_CAS_v1.0.0.audit from CIS Microsoft Exchange Server 2016 v1.0.0 Benchmark | CIS Microsoft Exchange Server 2016 CAS v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| CIS_Microsoft_Intune_for_Office_v1.1.0_L2.audit from CIS Microsoft Intune for Office Benchmark v1.1.0 | CIS Microsoft Intune for Office v1.1.0 L2 | Windows | |
| CIS_Microsoft_Intune_for_Windows_11_v5.0.0_L2.audit from CIS Microsoft Intune for Windows 11 v5.0.0 | CIS Microsoft Intune for Windows 11 v5.0.0 L2 | Windows | |
| CIS_Microsoft_Office_PowerPoint_2013_v1.0.1_Level_1.audit from CIS Microsoft Office PowerPoint 2013 Benchmark v1.0.1 | CIS Microsoft Office PowerPoint 2013 v1.0.1 | Windows | |
| CIS_Microsoft_Windows_10_Stand-alone_v5.0.0_L2_BL_NG.audit from CIS Microsoft Windows 10 Stand-alone v5.0.0 | CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NG | Windows | |
| CIS_Microsoft_Windows_11_Stand-alone_v5.0.0_L1_BL.audit from CIS Microsoft Windows 11 Stand-alone v5.0.0 | CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BL | Windows | |
| CIS_Mozilla_Firefox_ESR_GPO_v1.0.0_L1.audit from CIS Mozilla Firefox ESR GPO Benchmark v1.0.0 | CIS Mozilla Firefox ESR GPO v1.0.0 L1 | Windows | |
| CIS_MS_Office 2016_v1.1.0.audit from CIS Microsoft Office 2016 Benchmark v1.1.0 | CIS Microsoft Office 2016 v1.1.0 | Windows | |
| CIS_MS_SERVER_2012_R2_Level_1_v3.0.0.audit from CIS Microsoft Windows Server 2012 R2 Benchmark | CIS Windows Server 2012 R2 MS L1 v3.0.0 | Windows | |
| CIS_Visual_Studio_Code_GPO_v1.0.0_L1.audit from CIS Visual Studio Code GPO Benchmark v1.0.0 | CIS Visual Studio Code GPO v1.0.0 L1 | Windows | |
| CIS_Visual_Studio_Code_GPO_v1.0.0_L2.audit from CIS Visual Studio Code GPO Benchmark v1.0.0 | CIS Visual Studio Code GPO v1.0.0 L2 | Windows | |
| MD3X-00-000710 - MongoDB must prohibit the use of cached authenticators after an organization-defined time period. | DISA STIG MongoDB Enterprise Advanced 3.x v2r3 OS | Unix | IDENTIFICATION AND AUTHENTICATION |
| O19C-00-018600 - Oracle Database software must be evaluated and patched against newly found vulnerabilities. | DISA Oracle Database 19c STIG v1r5 OracleDB | OracleDB | SYSTEM AND INFORMATION INTEGRITY |
| O19C-00-018600 - Oracle Database software must be evaluated and patched against newly found vulnerabilities. | DISA Oracle Database 19c STIG v1r3 OracleDB | OracleDB | SYSTEM AND INFORMATION INTEGRITY |
| O112-C2-011900 - The DBMS must support the organizational requirements to specifically prohibit or restrict the use of unauthorized functions, ports, protocols, and/or services. | DISA STIG Oracle 11.2g v2r5 Linux | Unix | CONFIGURATION MANAGEMENT |
| O112-C2-011900 - The DBMS must support the organizational requirements to specifically prohibit or restrict the use of unauthorized functions, ports, protocols, and/or services. | DISA STIG Oracle 11.2g v2r5 Windows | Windows | CONFIGURATION MANAGEMENT |
| OL07-00-040820 - The Oracle Linux operating system must not have unauthorized IP tunnels configured. | DISA Oracle Linux 7 STIG v3r5 | Unix | CONFIGURATION MANAGEMENT |
| OL07-00-040830 - The Oracle Linux operating system must not forward IPv6 source-routed packets. | DISA Oracle Linux 7 STIG v3r5 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-07-021100 - The Red Hat Enterprise Linux operating system must have cron logging implemented. | DISA Red Hat Enterprise Linux 7 STIG v3r15 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-07-040540 - The Red Hat Enterprise Linux operating system must not contain .shosts files. | DISA Red Hat Enterprise Linux 7 STIG v3r15 | Unix | CONFIGURATION MANAGEMENT |
| SLEM-05-653025 - SLEM 5 must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| SLES-15-030660 - The SUSE operating system must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility. | DISA SUSE Linux Enterprise Server 15 STIG v2r8 | Unix | AUDIT AND ACCOUNTABILITY |
| SLES-15-030660 - The SUSE operating system must allocate audit record storage capacity to store at least one week of audit records when audit records are not immediately sent to a central audit record storage facility. | DISA SUSE Linux Enterprise Server 15 STIG v2r6 | Unix | AUDIT AND ACCOUNTABILITY |
