Item Search

NameAudit NamePluginCategory
1.1 Ensure packages are obtained from authorized repositoriesCIS PostgreSQL 14 OS v 1.3.0Unix

CONFIGURATION MANAGEMENT, MAINTENANCE

1.322 ALMA-09-041930CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

SYSTEM AND COMMUNICATIONS PROTECTION

3.5.2 Configure FCoE ZoningCIS Cisco NX-OS v1.2.0 L2Cisco

ACCESS CONTROL, CONFIGURATION MANAGEMENT, CONTINGENCY PLANNING, PLANNING, PROGRAM MANAGEMENT, SYSTEM AND SERVICES ACQUISITION, SYSTEM AND COMMUNICATIONS PROTECTION

5.2.8 Ensure a strong password hashing algorithm is configuredCIS IBM AIX 7 v1.2.0 L1Unix

IDENTIFICATION AND AUTHENTICATION

5.4.3 Ensure password hashing algorithm is SHA-512CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.4.7 Ensure minimum and maximum requirements are set for password changes - difokCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.4.7 Ensure minimum and maximum requirements are set for password changes - maxclassrepeatCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.4.7 Ensure minimum and maximum requirements are set for password changes - maxrepeatCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.4.7 Ensure minimum and maximum requirements are set for password changes - minclassCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.4.7 Ensure minimum and maximum requirements are set for password changes - minlenCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is UsedCIS PostgreSQL 14 OS v 1.3.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 9.5 OS v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 9.6 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 10 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 12 OS v1.1.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 11 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 9.5 OS v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 12 OS v1.1.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 11 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

107.1 Ensure 'Backup Directory' is set to 'Backup the password to Azure AD only'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONTINGENCY PLANNING

ALMA-09-041930 - AlmaLinux OS 9 must use a Linux Security Module configured to enforce limits on system services.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

SYSTEM AND COMMUNICATIONS PROTECTION

DTAVSEL-112 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Demand scanner must be configured to decode MIME encoded files.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown.DISA Mozilla Firefox STIG v6r8 LinuxUnix

CONFIGURATION MANAGEMENT

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

OL6-00-000023 - The system must use a Linux Security Module configured to limit the privileges of system services.DISA STIG Oracle Linux 6 v2r7Unix

CONFIGURATION MANAGEMENT

OL6-00-000537 - The Oracle Linux operating system must require re-authentication when using the 'sudo' command - sudo command.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL6-00-000539 - The Oracle Linux operating system must not be configured to bypass password requirements for privilege escalation.DISA STIG Oracle Linux 6 v2r7Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010063 - The Oracle Linux operating system must disable the login screen user list for graphical user interfaces.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-010330 - The Oracle Linux operating system must lock the associated account after three unsuccessful root logon attempts are made within a 15-minute period.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-010343 - The Oracle Linux operating system must require re-authentication when using the 'sudo' command - sudo command.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010344 - The Oracle Linux operating system must not be configured to bypass password requirements for privilege escalation.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010350 - The Oracle Linux operating system must be configured so users must re-authenticate for privilege escalation.DISA Oracle Linux 7 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

OL07-00-010481 - The Oracle Linux operating system must require authentication upon booting into single-user and maintenance modes.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-020021 - The Oracle Linux operating system must confine SELinux users to roles that conform to least privilege.DISA Oracle Linux 7 STIG v3r5Unix

ACCESS CONTROL

OL07-00-020200 - The Oracle Linux operating system must remove all software components after updated versions have been installed.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND INFORMATION INTEGRITY

OL07-00-020260 - The Oracle Linux operating system security patches and updates must be installed and up to date.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-030410 - The Oracle Linux operating system must audit all uses of the chmod, fchmod, and fchmodat syscalls.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-040300 - The Oracle Linux operating system must be configured so that all networked systems have SSH installed.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

OL07-00-040460 - The Oracle Linux operating system must be configured so that the SSH daemon uses privilege separation.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040600 - For Oracle Linux operating systems using DNS resolution, at least two name servers must be configured.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-040610 - The Oracle Linux operating system must not forward Internet Protocol version 4 (IPv4) source-routed packets.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-041010 - The Oracle Linux operating system must be configured so that all wireless network adapters are disabled.DISA Oracle Linux 7 STIG v3r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-06-000023 - The system must use a Linux Security Module configured to limit the privileges of system services.DISA Red Hat Enterprise Linux 6 STIG v2r2Unix

ACCESS CONTROL

RHEL-07-010450 - The Red Hat Enterprise Linux operating system must not allow an unrestricted logon to the system.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT

RHEL-07-010460 - The Red Hat Enterprise Linux operating system must not allow users to override SSH environment variables.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT

RHEL-07-020111 - The Red Hat Enterprise Linux operating system must disable the graphical user interface automounter unless required.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

RHEL-07-030780 - The Red Hat Enterprise Linux operating system must audit all uses of the ssh-keysign command.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

RHEL-07-031000 - The Red Hat Enterprise Linux operating system must send rsyslog output to a log aggregation server.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT

RHEL-07-041001 - The Red Hat Enterprise Linux operating system must have the required packages for multifactor authentication installed.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

IDENTIFICATION AND AUTHENTICATION