Item Search

NameAudit NamePluginCategory
1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS AlmaLinux OS 8 Workstation L1 v3.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS Red Hat EL8 Workstation L1 v3.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS AlmaLinux OS 8 Server L1 v3.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization (ASLR) is enabledCIS Debian 10 Server L1 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization (ASLR) is enabledCIS Debian 10 Workstation L1 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization (ASLR) is enabledCIS Amazon Linux 2023 Server L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS Debian Linux 12 v1.1.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS Debian Linux 12 v1.1.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS SUSE Linux Enterprise 15 v2.0.1 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS AlmaLinux OS 9 v2.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS Oracle Linux 9 v2.0.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS Rocky Linux 9 v2.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS AlmaLinux OS 9 v2.0.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.1 Ensure address space layout randomization is enabledCIS SUSE Linux Enterprise 15 v2.0.1 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.2 Ensure address space layout randomization (ASLR) is enabledCIS Ubuntu Linux 20.04 LTS Workstation L1 v2.0.1Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.3 Ensure address space layout randomization (ASLR) is enabledCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

2.1.1 Ensure autofs services are not in useCIS Rocky Linux 9 v2.0.0 L2 WorkstationUnix

MEDIA PROTECTION

2.1.1 Ensure autofs services are not in useCIS Oracle Linux 9 v2.0.0 L2 WorkstationUnix

MEDIA PROTECTION

2.1.1 Ensure autofs services are not in useCIS AlmaLinux OS 9 v2.0.0 L2 WorkstationUnix

MEDIA PROTECTION

2.2.1 Ensure autofs services are not in useCIS Red Hat Enterprise Linux 7 v4.0.0 L2 WorkstationUnix

MEDIA PROTECTION

2.2.1 Ensure autofs services are not in useCIS Rocky Linux 8 Workstation L2 v2.0.0Unix

MEDIA PROTECTION

2.2.1 Ensure autofs services are not in useCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

MEDIA PROTECTION

2.2.3 Ensure 'ALLOWED_WEAK_CERT_ALGORITHMS' Is NOT SetCIS Oracle Database 23ai v1.0.0 L1 RDBMS On Linux Host OSUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

2.4 Enable network password encryptionCIS Sybase 15.0 L1 DB v1.1.0SybaseDB

IDENTIFICATION AND AUTHENTICATION

4.2 Ensure Federal Information Processing Standard (FIPS) is enabledCIS MongoDB 3.4 L1 Windows Audit v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Ubuntu Linux 20.04 LTS Workstation L2 v2.0.1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Amazon Linux 2023 Server L2 v1.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Red Hat EL8 Server L2 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Oracle Linux 8 Server L2 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS AlmaLinux OS 8 Workstation L2 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Debian 10 Server L2 v2.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Rocky Linux 8 Server L2 v2.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.2.3.20 Ensure the audit configuration is immutableCIS Oracle Linux 8 Workstation L2 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

5.3.2.2.2 Ensure password number of changed characters is configuredCIS SUSE Linux Enterprise 15 v2.0.1 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

6.1.14 Audit system file permissionsCIS CentOS Linux 7 v4.0.0 L2 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.14 Audit system file permissionsCIS Oracle Linux 7 v4.0.0 L2 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.1.14 Audit system file permissionsCIS Red Hat Enterprise Linux 7 v4.0.0 L2 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

6.3.3.20 Ensure the audit configuration is immutableCIS Ubuntu Linux 22.04 LTS v2.0.0 L2 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

ARST-L2-000210 - The Arista MLS layer 2 switch must have all user-facing or untrusted ports configured as access switch ports.DISA STIG Arista MLS EOS 4.2x L2S v2r1Arista

SYSTEM AND COMMUNICATIONS PROTECTION

GEN002720-2 - The audit system must be configured to audit failed attempts to access files and programs - '-S open -F exit=-EACCES'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

AUDIT AND ACCOUNTABILITY

GEN002720-2 - The audit system must be configured to audit failed attempts to access files and programs - '-S open -F exit=-EPERM'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

AUDIT AND ACCOUNTABILITY

JUSX-DM-000110 - The Juniper SRX Services Gateway must authenticate NTP servers before establishing a network connection using bidirectional authentication that is cryptographically based.DISA Juniper SRX Services Gateway NDM v3r2Juniper

IDENTIFICATION AND AUTHENTICATION

KNOX-07-900300 - The Samsung must be configured to not allow Container passwords with more than two repeating or sequential characters.AirWatch - DISA Samsung Android 7 with Knox 2.x v1r1MDM

CONFIGURATION MANAGEMENT

OL6-00-000062 - The system must use a FIPS 140-2-approved cryptographic hashing algorithm for generating account password hashes (system-auth).DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000064 - The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf) - libuser.conf.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

PGS9-00-008000 - PostgreSQL must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to generate and validate cryptographic hashes.DISA STIG PostgreSQL 9.x on RHEL OS v2r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-06-000064 - The system must use a FIPS 140-2 approved cryptographic hashing algorithm for generating account password hashes (libuser.conf) - libuser.conf.DISA Red Hat Enterprise Linux 6 STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION