| 2.2.2 Ensure X Window System is not installed | CIS Amazon Linux v2.1.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.2.4 Enable AI /heuristic based malware detection | CIS FortiGate 7.4.x v1.0.1 L2 | FortiGate | SYSTEM AND INFORMATION INTEGRITY |
| 5.5.3 Ensure password reuse is limited | CIS CentOS Linux 8 Server L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.1 Setup Client-cert Authentication | CIS Apache Tomcat 8 L2 v1.1.0 Middleware | Unix | IDENTIFICATION AND AUTHENTICATION |
| 90.17 Ensure 'Generate Security Audits' is set to 'LOCAL SERVICE, NETWORK SERVICE, RESTRICTED SERVICES\PrintSpoolerService' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| DTOO139 - The Save commands default file format must be configured. | DISA STIG Microsoft Word 2016 v2r1 | Windows | CONFIGURATION MANAGEMENT |
| ESXi : apply-patches | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : config-firewall-access - 'DVFilter blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'HBR allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'httpClient blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'IKED blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'NFC allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'NFS Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'SSH Client blocked' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'VMware vCenter Agent allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-firewall-access - 'vSphere Client allowed' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi : config-snmp - 'snmp.receiver.X.enabled' | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : create-local-admin | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : disable-dcui | VMWare vSphere 5.X Hardening Guide | VMware | CONFIGURATION MANAGEMENT |
| ESXi : enable-ad-auth | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| ESXi : esxi-no-self-signed-certs | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : limit-cim-access | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : mask-zone-san | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : remove-authorized-keys | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : unique-chap-secrets | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : verify-admin-group | VMWare vSphere 5.X Hardening Guide | VMware | ACCESS CONTROL |
| ESXi : verify-config-files | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : verify-kernel-modules | VMWare vSphere 5.X Hardening Guide | VMware | |
| ESXi : vpxuser-password-age | VMWare vSphere 5.X Hardening Guide | VMware | IDENTIFICATION AND AUTHENTICATION |
| JBOS-AS-000640 - The JBoss server, when hosting mission critical applications, must be in a high-availability (HA) cluster. | DISA JBoss Enterprise Application Platform 6.3 STIG v2r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SLEM-05-272010 - SLEM 5 must not allow unattended or automatic logon via the graphical user interface (GUI). | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| SSO : config-ntp | VMWare vSphere 5.X Hardening Guide | VMware | |
| SSO : no-SSO-self-signed-certs | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : check-privilege-reassignment | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : restrict-admin-role | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : restrict-certificate-access | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : restrict-vcs-db-user | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : secure-vco-file-access | VMWare vSphere 5.X Hardening Guide | VMware | |
| vCenter : verify-client-plugins | VMWare vSphere 5.X Hardening Guide | VMware | |
| VCSA : change-default-password | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-mgmt-network-vlan | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : isolate-storage-network-airgap | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : limit-administrator-scope | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : limit-network-healthcheck | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : reject-forged-transmit - 'PortGroup' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : reject-forged-transmit - 'vSwitch' | VMWare vSphere 5.X Hardening Guide | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| vNetwork : verify-vlan-id | VMWare vSphere 5.X Hardening Guide | VMware | |
| vNetwork : verify-vlan-trunk | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : isolate-vum-airgap | VMWare vSphere 5.X Hardening Guide | VMware | |
| VUM : limit-vum-users | VMWare vSphere 5.X Hardening Guide | VMware | |
