Item Search

NameAudit NamePluginCategory
1.1.5 Ensure noexec option set on /tmp partitionCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.9 Ensure noexec option set on /dev/shm partitionCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.9 Ensure noexec option set on /dev/shm partitionCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.14 Ensure /var/tmp partition includes the noexec optionCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.8.1 Ensure GNOME Display Manager is removedCIS Red Hat 6 Server L2 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.8.1 Ensure GNOME Display Manager is removedCIS CentOS 6 Server L2 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.1.1 Remove telnet-serverCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

2.1.3 Remove rsh-serverCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

2.1.6 Remove NIS ServerCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

2.2.6 - MobileIron - Set Maximum Auto-lockMobileIron - CIS Apple iOS 8 v1.0.0 L1MDM

ACCESS CONTROL

2.3.9.1 Ensure 'Microsoft network server: Amount of idle time required before suspending session' is set to '15 or fewer minute(s)'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

ACCESS CONTROL

2.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessMobileIron - CIS Apple iOS 10 v2.0.0 End User Owned L1MDM

ACCESS CONTROL

3.1.5 - AirWatch - Set the 'timeout' for 'Time without user input before password must be re-entered (in minutes)'AirWatch - CIS Apple iOS 8 v1.0.0 L1MDM

ACCESS CONTROL

3.1.5 - AirWatch - Set the 'timeout' for 'Time without user input before password must be re-entered (in minutes)'AirWatch - CIS Apple iOS 9 v1.0.0 L1MDM

ACCESS CONTROL

3.3.3 Ensure IPv6 is disabledCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.3.3 Ensure IPv6 is disabledCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessMobileIron - CIS Apple iOS 11 v1.0.0 Institution Owned L1MDM

ACCESS CONTROL

3.5 Remove DHCP ServerCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

3.10 Remove FTP ServerCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

3.12 Remove Dovecot (IMAP and POP3 services)CIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

3.15 Remove SNMP ServerCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

4.11.49.2 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

ACCESS CONTROL

5.1 Ensure the DCUI timeout is set to 600 seconds or lessCIS VMware ESXi 6.5 v1.0.0 Level 1VMware

ACCESS CONTROL

5.2.12 Ensure SSH Idle Timeout Interval is configured - ClientAliveIntervalCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

ACCESS CONTROL

5.3.17 Ensure SSH Idle Timeout Interval is configured - 'ClientAliveInterval'CIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

ACCESS CONTROL

5.4 Ensure that new entries are appended to the end of the log fileCIS MongoDB 8 v2.0.0 L2 UnixUnix

AUDIT AND ACCOUNTABILITY

5.4 Ensure that new entries are appended to the end of the log fileCIS MongoDB 5 v1.2.0 L2 UnixUnix

AUDIT AND ACCOUNTABILITY

5.4.5 Ensure default user shell timeout is 900 seconds or less - /etc/bashrcCIS Aliyun Linux 2 L2 v1.0.0Unix

ACCESS CONTROL

5.5.5 Ensure default user shell timeout is 900 seconds or less - /etc/profile /etc/profile.dCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

ACCESS CONTROL

5.10 Require a password to wake the computer from sleep or screen saverCIS Apple macOS 10.12 L1 v1.2.0Unix

ACCESS CONTROL

6.7 Set Default Screen Lock for CDE Users - Check if 'dtsession*lockTimeout:' is set to 10.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

6.7 Set Default Screen Lock for CDE Users - Check if file permissions for files under /etc/dt/config/*/sys.resources are OK.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

6.12 Set Default Screen Lock for GNOME Users - lockTimeout = 0CIS Solaris 11.1 L1 v1.0.0Unix

ACCESS CONTROL

18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL

18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

ACCESS CONTROL

18.1.1.1 Ensure 'Prevent enabling lock screen camera' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1Windows

ACCESS CONTROL

18.9.28.1 Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 NGWindows

ACCESS CONTROL

18.9.35.6.4 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

ACCESS CONTROL

18.9.35.6.5 Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL

18.9.35.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL

18.9.35.6.6 Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

ACCESS CONTROL

18.10.57.3.10.1 Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less, but not Never (0)'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL

18.10.83.1 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'CIS Microsoft Windows Server 2019 Stand-alone v4.0.0 L1 MSWindows

ACCESS CONTROL

18.10.83.2 Ensure 'Sign-in and lock last interactive user automatically after a restart' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

ACCESS CONTROL

19.7.8.1 Ensure 'Configure Windows spotlight on lock screen' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL

Extreme : Configure idletimeout <= 15TNS Extreme ExtremeXOS Best Practice AuditExtreme_ExtremeXOS

ACCESS CONTROL

Interactive logon: Machine inactivity limitMSCT Windows 10 v1507 v1.0.0Windows

ACCESS CONTROL

Interactive logon: Machine inactivity limitMSCT Windows 10 1803 v1.0.0Windows

ACCESS CONTROL

Interactive logon: Machine inactivity limitMSCT Windows Server 2019 DC v1.0.0Windows

ACCESS CONTROL

SonicWALL - User Inactivity Timeout - 5 minutes or lessTNS SonicWALL v5.9SonicWALL

ACCESS CONTROL