Item Search

NameAudit NamePluginCategory
1.2 Do Not Install a Multi-Use System - chkconfigCIS BIND DNS v1.0.0 L1 Caching Only Name ServerUnix

CONFIGURATION MANAGEMENT

1.2 Do Not Install a Multi-Use System - systemctlCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

CONFIGURATION MANAGEMENT

1.6.1 Ensure message of the day is configured properlyCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL

2.1.2 Ensure X Window System is not installedCIS Google Container-Optimized OS v1.2.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.8.1.2 Ensure the OS Is Not Active When Resuming from Sleep and Display Sleep (Apple Silicon)CIS Apple macOS 11.0 Big Sur v4.0.0 L2Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.2.3 Configure /etc/rsyslog.conf - lpr,news,uucp,local0,local1,local2,local3,local4,local5,local6 /var/log/unused.logCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

AUDIT AND ACCOUNTABILITY

5.3.9 Collect Login and Logout Events - /var/log/lastlogCIS Red Hat Enterprise Linux 5 L2 v2.2.1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

5.3.9 Collect Login and Logout Events - /var/log/tallylogCIS Red Hat Enterprise Linux 5 L2 v2.2.1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

18.10.77.3 (L1) Ensure 'Automatically send memory dumps for OS-generated error reports' is set to 'Disabled'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

CONFIGURATION MANAGEMENT

ALMA-09-010030 - AlmaLinux OS 9 must have GPG signature verification enabled for all software repositories.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-011790 - AlmaLinux OS 9 cron configuration files directory must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-013990 - AlmaLinux OS 9 /etc/gshadow file must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-016300 - AlmaLinux OS 9 /etc/passwd file must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-019930 - AlmaLinux OS 9 must not send Internet Control Message Protocol (ICMP) redirects.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-024550 - AlmaLinux OS 9 must enable the hardware random number generator entropy gatherer service.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

CONFIGURATION MANAGEMENT

ALMA-09-036100 - AlmaLinux OS 9 must enforce password complexity rules for the root account.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

ALMA-09-037090 - AlmaLinux OS 9 must require the change of at least eight characters when passwords are changed.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

ALMA-09-042260 - A sticky bit must be set on all AlmaLinux OS 9 public directories.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

ALMA-09-042920 - All AlmaLinux OS 9 networked systems must have the OpenSSH server installed.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

ALMA-09-043030 - AlmaLinux OS 9 must not allow users to override SSH environment variables.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - Access Control ListDISA STIG Apple macOS 11 v1r8Unix

CONFIGURATION MANAGEMENT

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - User directory permissionsDISA STIG Apple macOS 11 v1r8Unix

CONFIGURATION MANAGEMENT

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - User subdirectory permissionsDISA STIG Apple macOS 11 v1r8Unix

CONFIGURATION MANAGEMENT

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - User subdirectory Public permissionsDISA STIG Apple macOS 11 v1r8Unix

CONFIGURATION MANAGEMENT

APPL-13-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files.DISA STIG Apple macOS 13 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-15-000100 - The macOS system must disable root login.DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

GEN000452 - The system must display the date and time of the last successful account login upon login.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

OL08-00-030310 - OL 8 must generate audit records for any use of the "unix_update" command.DISA Oracle Linux 8 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

PHTN-67-000005 - The Photon operating system must set a session inactivity timeout of 15 minutes or less - mesgDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL, MAINTENANCE

PHTN-67-000065 - The Photon operating system must require users to reauthenticate for privilege escalation.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-030315 - Successful/unsuccessful uses of userhelper in RHEL 8 must generate an audit record.DISA Red Hat Enterprise Linux 8 STIG v2r3Unix

AUDIT AND ACCOUNTABILITY

RHEL-09-215101 - RHEL 9 must have the Postfix package installed.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

ACCESS CONTROL

RHEL-09-654035 - RHEL 9 must audit all uses of the chacl command.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

RHEL-09-654175 - RHEL 9 must audit all uses of the usermod command.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SRG-OS-000071-ESXI5 - The system must require that passwords contain at least one numeric character.DISA STIG VMWare ESXi Server 5 STIG v2r1VMware

IDENTIFICATION AND AUTHENTICATION

WA00540 W22 - The web server must be configured to explicitly deny access to the OS root.DISA STIG Apache Server 2.2 Windows v1r13Windows

CONFIGURATION MANAGEMENT

WN12-GE-000001 - Systems must be maintained at a supported OS or service pack level.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

CONFIGURATION MANAGEMENT

WN16-AU-000280 - Windows Server 2016 must be configured to audit Logon/Logoff - Special Logon successes.DISA Microsoft Windows Server 2016 STIG v2r10Windows

AUDIT AND ACCOUNTABILITY

WN16-AU-000320 - Windows Server 2016 must be configured to audit Policy Change - Audit Policy Change failures.DISA Microsoft Windows Server 2016 STIG v2r10Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN16-AU-000370 - Windows Server 2016 must be configured to audit System - IPsec Driver successes.DISA Microsoft Windows Server 2016 STIG v2r10Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN16-AU-000450 - Windows Server 2016 must be configured to audit System - System Integrity failures.DISA Microsoft Windows Server 2016 STIG v2r10Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN16-DC-000250 - Windows Server 2016 must be configured to audit DS Access - Directory Service Access failures.DISA Microsoft Windows Server 2016 STIG v2r10Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000260 - Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000270 - Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change failures.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000290 - Windows Server 2022 must be configured to audit Policy Change - Authorization Policy Change successes.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000330 - Windows Server 2022 must be configured to audit System - IPsec Driver failures.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000070 - Windows Server 2022 permissions on the Active Directory data files must only allow System and Administrators access.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY

WN22-DC-000260 - Windows Server 2022 must be configured to audit DS Access - Directory Service Changes successes.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-SO-000140 - Windows Server 2022 title for legal banner dialog box must be configured with the appropriate text.DISA Microsoft Windows Server 2022 STIG v2r4Windows

ACCESS CONTROL

WN22-SO-000440 - Windows Server 2022 User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC.DISA Microsoft Windows Server 2022 STIG v2r4Windows

IDENTIFICATION AND AUTHENTICATION