Item Search

NameAudit NamePluginCategory
1.7.1.2 Ensure local login warning banner is configured properly - banner checkCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.7.1.2 Ensure local login warning banner is configured properly - msrvCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.8.3 Configure a Password PolicyCIS Cisco IOS XR 7.x v1.0.1 L2Cisco

IDENTIFICATION AND AUTHENTICATION

1.133 ALMA-09-017730CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

2.3.17.7 (L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

ACCESS CONTROL

2.3.17.7 (L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.3.17.7 (L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1Windows

ACCESS CONTROL

2.3.17.7 Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows Server 2019 v5.0.0 L1 DCWindows

ACCESS CONTROL

2.3.17.7 Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

ACCESS CONTROL

2.3.17.7 Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L1 MSWindows

ACCESS CONTROL

2.3.17.7 Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L1 MSWindows

ACCESS CONTROL

5.13 Disable ability to login to another user's active and locked sessionCIS Apple macOS 10.12 L1 v1.2.0Unix

ACCESS CONTROL

AIOS-18-006600 - Apple iOS/iPadOS 18 must be configured to not allow passwords that include more than four repeating or sequential characters.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

IDENTIFICATION AND AUTHENTICATION

AIOS-18-009900 - Apple iOS/iPadOS 18 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

MEDIA PROTECTION

AIOS-18-010000 - Apple iOS/iPadOS 18 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM - any nonfactory installed application] upon unenrollment from MDM.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

MEDIA PROTECTION

AIOS-18-010000 - Apple iOS/iPadOS 18 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM - any nonfactory installed application] upon unenrollment from MDM.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

MEDIA PROTECTION

AIOS-18-010400 - Apple iOS/iPadOS 18 must require a valid password be successfully entered before the mobile device data is unencrypted.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-18-010850 - Apple iOS/iPadOS 18 must implement the management setting: not allow use of iPhone widgets on Mac.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-010900 - Apple iOS/iPadOS 18 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

ACCESS CONTROL

AIOS-18-011200 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-011500 - Apple iOS/iPadOS 18 must implement the management setting: treat AirDrop as an unmanaged destination.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

IDENTIFICATION AND AUTHENTICATION

AIOS-18-011700 - Apple iOS/iPadOS 18 must implement the management setting: not share location data through iCloud.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

ACCESS CONTROL

AIOS-18-011900 - Apple iOS/iPadOS 18 users must complete required training.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-012000 - A managed photo app must be used to take and store work-related photos.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-012200 - Apple iOS/iPadOS 18 must implement the management setting: enable USB Restricted Mode.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-012900 - Apple iOS/iPadOS 18 must disable password proximity requests.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-013000 - Apple iOS/iPadOS 18 must disable password sharing.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-013100 - Apple iOS/iPadOS 18 must disable 'Find My Friends' in the 'Find My' app - Find My app.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-013400 - The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-18-013500 - Apple iOS must implement the management setting: not allow a user to remove Apple iOS configuration profiles that enforce DOD security requirements.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-014500 - Apple iOS/iPadOS 18 must disable connections to Siri servers for the purpose of translation.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-015100 - Apple iOS/iPadOS 18 must delete eSIM content when the device is erased.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

MEDIA PROTECTION

AIOS-18-015600 - Apple iOS/iPadOS 18 must disable the ability to hide apps.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-015700 - Apple iOS/iPadOS 18 must disable recording cell phone calls on the iPhone.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016000 - Apple iOS/iPadOS 18 must disable the ability of the user to wipe the device.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016500 - Apple iOS/iPadOS 18 must disable pairing with a host Mac or PC.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016600 - Apple iOS/iPadOS 18 must disable AirPrint.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016600 - Apple iOS/iPadOS 18 must disable AirPrint.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016800 - Apple iOS/iPadOS 18 must disable AirPrint: Allow storage of AirPrint credentials in Keychain.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-016800 - Apple iOS/iPadOS 18 must disable AirPrint: Allow storage of AirPrint credentials in Keychain.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-017400 - Apple iOS/iPadOS 18 must disable the Apple Intelligence feature: generate new Genmoji.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-017700 - DOD Apple iOS/iPadOS 18 devices must have a Mobile Threat Detection (MTD) app installed.AirWatch - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-017700 - DOD Apple iOS/iPadOS 18 devices must have a Mobile Threat Detection (MTD) app installed.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

AIOS-18-017900 - DOD Apple iOS/iPadOS 18 devices must disable eSIM transfers.MobileIron - DISA Apple iOS/iPadOS 18 v2r3MDM

CONFIGURATION MANAGEMENT

SPLK-CL-000080 - Splunk Enterprise must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the server.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

ACCESS CONTROL

SPLK-CL-000110 - In a distributed environment, Splunk Enterprise indexers must be configured to ingest log records from its forwarders.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

AUDIT AND ACCOUNTABILITY

SPLK-CL-000300 - When Splunk Enterprise is distributed over multiple servers, each server must be configured to disable non-essential capabilities.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

CONFIGURATION MANAGEMENT

SPLK-CL-000330 - Splunk Enterprise must use HTTPS/SSL for access to the user interface.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

IDENTIFICATION AND AUTHENTICATION

SPLK-CL-000390 - Splunk Enterprise must be installed in FIPS mode to implement NIST FIPS-approved cryptography for all cryptographic functions.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

SQL4-00-038000 - SQL Server must generate Trace or Audit records when concurrent logons/connections by the same user from different workstations occur - Event ID 16DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

AUDIT AND ACCOUNTABILITY