| 1.3 ALMA-09-001230 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 1.7.2 Ensure GDM login banner is configured - 'banner-message-enable' | CIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0 | Unix | ACCESS CONTROL |
| 1.7.2 Ensure GDM login banner is configured - 'banner-message-text' | CIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0 | Unix | ACCESS CONTROL |
| 1.8.18 Ensure graphical user interface automounter is disabled - automount-open=false | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| 1.30 MADB-10-003700 | CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT I MySQLDB | MySQLDB | IDENTIFICATION AND AUTHENTICATION |
| 3.1.6 Secure permissions for default database file path | CIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS Windows | Windows | AUDIT AND ACCOUNTABILITY |
| 3.3.1 Secure Db2 Runtime Library | CIS IBM DB2 12.1 v1.0.0 Windows OS Level 1 | Windows | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.11 Set Maximum Number of Applications (MAXAPPLS) | CIS IBM DB2 12.1 v1.0.0 Windows OS Level 1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.2.7 Enable RFC-recommended Source Route Validation - net.ipv4.conf.default.rp_filter = 1 | CIS Red Hat Enterprise Linux 5 L2 v2.2.1 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| 5.5.1.8 Ensure password expiration is 60 Day maximum for existing passwords | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 7.2.7 Enable RFC-recommended Source Route Validation - net.ipv4.conf.default.rp_filter | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Audit server does not support encryption | MSCT Windows 11 v24H2 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit server does not support signing | MSCT Windows 11 v24H2 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| CD12-00-000300 - Security-relevant software updates to PostgreSQL must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs). | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | SYSTEM AND INFORMATION INTEGRITY |
| CD12-00-000600 - PostgreSQL must provide non-privileged users with error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | SYSTEM AND INFORMATION INTEGRITY |
| CD12-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | ACCESS CONTROL |
| CD12-00-002400 - PostgreSQL must record time stamps, in audit records and application data that can be mapped to Coordinated Universal Time (UTC, formerly GMT). | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-002700 - PostgreSQL must provide an immediate alert to appropriate support staff of all audit log failures. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-003700 - When invalid inputs are received, PostgreSQL must behave in a predictable and documented manner that reflects organizational and system objectives. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | SYSTEM AND INFORMATION INTEGRITY |
| CD12-00-004400 - PostgreSQL must generate audit records when categorized information (e.g., classification levels/security levels) is accessed. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-004600 - PostgreSQL must generate audit records when unsuccessful logons or connection attempts occur. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-004700 - PostgreSQL must generate audit records showing starting and ending time for user access to the database(s). | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-004800 - PostgreSQL must generate audit records when unsuccessful attempts to modify security objects occur. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-005100 - PostgreSQL must generate audit records when successful logons or connections occur. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-005700 - PostgreSQL must generate audit records when unsuccessful accesses to objects occur. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-005900 - PostgreSQL must generate audit records when unsuccessful attempts to access categorized information (e.g., classification levels/security levels) occur. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-006000 - PostgreSQL must be able to generate audit records when security objects are accessed. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-007100 - PostgreSQL must produce audit records containing sufficient information to establish where the events occurred. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-007700 - PostgreSQL must generate time stamps, for audit records and application data, with a minimum granularity of one second. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-008600 - PostgreSQL must initiate session auditing upon startup. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD12-00-010100 - PostgreSQL must require users to reauthenticate when organization-defined circumstances or situations require reauthentication. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | IDENTIFICATION AND AUTHENTICATION |
| CD12-00-010500 - PostgreSQL must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| CD12-00-011400 - PostgreSQL must maintain the authenticity of communications sessions by guarding against man-in-the-middle attacks that guess at Session ID values. | DISA STIG Crunchy Data PostgreSQL DB v3r2 | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| CIS_Microsoft_SQL_Server_2014_Database_v1_5_0_Level_1_OS.audit from Microsoft SQL Server 2014 Version 1.5.0 | CIS SQL Server 2014 Database L1 OS v1.5.0 | Windows | |
| CIS_Microsoft_SQL_Server_2019_v1.6.0_L1_AWS_RDS_Windows.audit from CIS Microsoft SQL Server 2019 v1.6.0 | CIS Microsoft SQL Server 2019 v1.6.0 L1 AWS RDS Windows | Windows | |
| CIS_Microsoft_SQL_Server_2022_v1.3.0_L1_Database_Engine_Windows.audit from CIS Microsoft SQL Server 2022 v1.3.0 | CIS Microsoft SQL Server 2022 v1.3.0 L1 Database Engine Windows | Windows | |
| CIS_Microsoft_SQL_Server_2025_v1.0.0_L1_AWS_RDS_Windows.audit from CIS Microsoft SQL Server 2025 v1.0.0 | CIS Microsoft SQL Server 2025 v1.0.0 L1 AWS RDS Windows | Windows | |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - AUDIT | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - CONTEXT | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - EXECUTE | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - OBJMAINT | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - Review user policies | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - SYSADMIN | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| DB2X-00-001000 - DB2 must initiate session auditing upon startup - VALIDATE | DISA STIG IBM DB2 v10.5 LUW v2r1 Database | IBM_DB2DB | AUDIT AND ACCOUNTABILITY |
| GEN006180 - The smbpasswd file must be group-owned by root - '/etc/samba/passdb.tdb' | DISA STIG for Red Hat Enterprise Linux 5 v1r18 Audit | Unix | ACCESS CONTROL |
| OL07-00-010063 - The Oracle Linux operating system must disable the login screen user list for graphical user interfaces. | DISA Oracle Linux 7 STIG v3r5 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-07-020111 - The Red Hat Enterprise Linux operating system must disable the graphical user interface automounter unless required. | DISA Red Hat Enterprise Linux 7 STIG v3r15 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| UBTU-24-200043 - Ubuntu 24.04 LTS must conceal, via the session lock, information previously visible on the display with a publicly viewable image. | DISA Canonical Ubuntu 24.04 LTS STIG v1r6 | Unix | ACCESS CONTROL |
| VCSA-80-000296 - The vCenter server must enable the OVF security policy for content libraries. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| WG400 A22 - All interactive programs (CGI) must be placed in a designated directory with appropriate permissions. | DISA STIG Apache Site 2.2 Unix v1r11 Middleware | Unix | ACCESS CONTROL |
