Item Search

NameAudit NamePluginCategory
1.126 UBTU-22-653045CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.184 UBTU-24-901300CIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.354 RHEL-09-651025CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.419 ALMA-09-054140CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.432 ALMA-09-056010CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.434 ALMA-09-056230CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.434 RHEL-10-900100CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.438 ALMA-09-056890CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

6.2.18 Ensure AUDIT_ADMIN' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.3.4.12 Ensure audit tools are mode 0755 or more restrictiveCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIGUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

AIX7-00-002014 - Audit logs on the AIX system must be group-owned by system.DISA IBM AIX 7.x STIG v3r3Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002055 - Amazon Linux 2023 must immediately notify the system administrator (SA) and information system security officer (ISSO), at a minimum, of an audit processing failure event.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002195 - Amazon Linux 2023 audit tools must be owned by root.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002230 - Amazon Linux 2023 audit log directory must be owned by root to prevent unauthorized read access.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

CD12-00-011200 - PostgreSQL must protect its audit features from unauthorized removal.DISA STIG Crunchy Data PostgreSQL OS v3r2Unix

AUDIT AND ACCOUNTABILITY

CD16-00-002400 - PostgreSQL must protect its audit configuration from unauthorized modification.DISA Crunchy Data Postgres 16 STIG v1r3 UnixUnix

AUDIT AND ACCOUNTABILITY

EP11-00-002800 - The audit information produced by the EDB Postgres Advanced Server must be protected from unauthorized deletion.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

AUDIT AND ACCOUNTABILITY

EP11-00-003000 - The EDB Postgres Advanced Server must protect its audit configuration from unauthorized modification.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

AUDIT AND ACCOUNTABILITY

EP11-00-004400 - If passwords are used for authentication, the EDB Postgres Advanced Server must transmit only encrypted representations of passwords.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

IDENTIFICATION AND AUTHENTICATION

EP11-00-009500 - The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

SYSTEM AND COMMUNICATIONS PROTECTION

EP11-00-013200 - The EDB Postgres Advanced Server must be configured on a platform that has a NIST certified FIPS 140-2 or 140-3 installation of OpenSSL.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

IDENTIFICATION AND AUTHENTICATION

OL07-00-910055 - The Oracle Linux operating system must protect audit information from unauthorized read, modification, or deletion.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

OL08-00-030040 - The OL 8 System must take appropriate action when an audit processing failure occurs.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL08-00-030100 - The OL 8 audit log directory must be owned by root to prevent unauthorized read access.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

OL09-00-002570 - OL 9 audit tools must be group-owned by root.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

OL09-00-002572 - OL 9 audit tools must have a mode of 0755 or less permissive.DISA Oracle Linux 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

PGS9-00-012200 - PostgreSQL must protect its audit configuration from unauthorized modification.DISA STIG PostgreSQL 9.x on RHEL OS v2r5Unix

AUDIT AND ACCOUNTABILITY

RHEL-08-030090 - RHEL 8 audit logs must be group-owned by root to prevent unauthorized read access.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

RHEL-08-030121 - RHEL 8 audit system must protect auditing rules from unauthorized change.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030580 - The Information System Security Officer (ISSO) and System Administrator (SA), at a minimum, must have mail aliases to be notified of a SUSE operating system audit processing failure.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

AUDIT AND ACCOUNTABILITY

SQL2-00-008900 - SQL Server processes or services must run under custom, dedicated OS or domain accounts - 'SQL Server Analysis Services'DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

ACCESS CONTROL

SQL2-00-010000 - DBA OS or domain accounts must be granted only those host system privileges necessary for the administration of SQL Server.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

CONFIGURATION MANAGEMENT

SQL2-00-010100 - Use of the SQL Server software installation account must be restricted to SQL Server software installation.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

CONFIGURATION MANAGEMENT

SQL2-00-013600 - SQL Server must protect audit information from any type of unauthorized access.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SQL2-00-014700 - SQL Server must support the employment of automated mechanisms supporting the auditing of the enforcement actions.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

SQL2-00-015400 - SQL Server software installation account(s) must be restricted to authorized users.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

CONFIGURATION MANAGEMENT

SQL2-00-016800 - SQL Server must have the SQL Server Analysis Service (SSAS) software component removed from SQL Server if SSAS is unused.DISA STIG SQL Server 2012 Database OS Audit v1r20Windows

CONFIGURATION MANAGEMENT

SQL4-00-012300 - SQL Server must produce Trace or Audit records containing sufficient information to establish the identity of any user/subject associated with the event.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-016810 - SQL Server must have the SQL Server Distributed Replay Controller software component removed if it is unused.DISA STIG SQL Server 2014 Instance OS Audit v2r4Windows

CONFIGURATION MANAGEMENT

SQL4-00-018900 - SQL Server must uniquely identify and authenticate non-organizational users (or processes acting on behalf of non-organizational users) - or processes acting on behalf of non-org users.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

IDENTIFICATION AND AUTHENTICATION

SQL4-00-021500 - SQL Server must isolate security functions from nonsecurity functions.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

SQL4-00-023700 - SQL Server must protect against an individual using a shared account from falsely denying having performed a particular action.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-030410 - Where SQL Server Audit is in use, SQL Server must generate audit records when unsuccessful attempts to retrieve privileges/permissions occur.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

SQL4-00-030600 - Where availability is paramount, the SQL Server must continue processing (preferably overwriting existing records, oldest first), in the event of lack of space for more Audit/Trace log records; and must keep processing after any failure of an Audit/Trace.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY

UBTU-16-020110 - Audit logs must be owned by root to prevent unauthorized read access.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020130 - Audit log directory must be owned by root to prevent unauthorized read access.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

UBTU-18-010129 - The Ubuntu operating system must configure audit tools to be owned by root.DISA STIG Ubuntu 18.04 LTS v2r15Unix

AUDIT AND ACCOUNTABILITY

UBTU-20-010424 - The Ubuntu operating system must have directories that contain system commands owned by root.DISA Canonical Ubuntu 20.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-232010 - Ubuntu 22.04 LTS must have directories that contain system commands set to a mode of "755" or less permissive.DISA Canonical Ubuntu 22.04 LTS STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

UBTU-24-900980 - Ubuntu 24.04 LTS must alert the system administrator (SA) and information system security officer (ISSO) (at a minimum) in the event of an audit processing failure.DISA Canonical Ubuntu 24.04 LTS STIG v1r6Unix

AUDIT AND ACCOUNTABILITY