Item Search

NameAudit NamePluginCategory
1.1 Install Updates, Patches and Additional Security SoftwareCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.2 Review the default loginCIS Sybase 15.0 L1 OS Windows v1.1.0Windows

ACCESS CONTROL

1.24 EX19-MB-000066CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT IIWindows

CONFIGURATION MANAGEMENT

2.3 Set nosuid option for /tmp PartitionCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

2.8 Create Separate Partition for /var/log/auditCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

2.10 Add nodev Option to /homeCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

2.25 Disable AutomountingCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

3.1 Set User/Group Owner on bootloader configCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

5.1.1 Ensure NIS is not installedCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.1.2 Ensure rsh server is not enabled - 'exec'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.2 Ensure chargen is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.5 Configure Network Time Protocol (NTP) - NTP package installedCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.5 Configure Network Time Protocol (NTP) - RUNASUSER=ntpCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.6 Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the InternetCIS Palo Alto Firewall 9 v1.1.0 L1Palo_Alto

SYSTEM AND INFORMATION INTEGRITY

6.6 Ensure LDAP is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.7 Ensure NFS and RPC are not enabled - /etc/rc*.dCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.9 Ensure FTP Server is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.15 Configure Mail Transfer Agent for Local-Only ModeCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.16 Ensure rsync service is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.17 Ensure Biosdevname is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

7.2.2 Disable ICMP Redirect Acceptance - 'net.ipv4.conf.default.accept_redirects = 0'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.2.3 Disable Secure ICMP Redirect Acceptance - 'net.ipv4.conf.all.secure_redirects=0'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.2.6 Enable Bad Error Message ProtectionCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Ensure 'Security Policy' denying any/all traffic to/from IP addresses on Trusted Threat Intelligence Sources ExistsCIS Palo Alto Firewall 9 v1.1.0 L1Palo_Alto

ACCESS CONTROL, MEDIA PROTECTION

7.5.2 Disable SCTPCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

8.2.3 Configure /etc/rsyslog.conf - mail.err /var/log/mail.errCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.2.3 Configure /etc/rsyslog.conf - mail.info -/var/log/mail.infoCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.2.3 Configure /etc/rsyslog.conf - news.err -/var/log/news/news.errCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.2.5 Configure rsyslog to Send Logs to a Remote Log HostCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.4 Configure logrotate - /var/log/mail.warnCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.4 Configure logrotate - /var/log/messagesCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

8.4 Configure logrotate - /var/log/news/news.critCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

9.1.3 Set User/Group Owner and Permission on /etc/cron.hourlyCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.1.4 Set User/Group Owner and Permission on /etc/cron.dailyCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.1.7 Set User/Group Owner and Permission on /etc/cron.dCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.1.8 Restrict at/cron to Authorized Users - '/etc/at.allow'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

9.1.8 Restrict at/cron to Authorized Users - /etc/at.denyCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

9.3.6 Set SSH IgnoreRhosts to YesCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

9.5 Restrict Access to the su Command - '/etc/pam.d/su contents'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

10.1.2 Set Password Change Minimum Number of DaysCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

10.4 Set Default umask for Users- '/etc/login.defs'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

10.5 Lock Inactive User AccountsCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

11.1 Set Warning Banner for Standard Login Services - /etc/issue permissionsCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

11.1 Set Warning Banner for Standard Login Services - /etc/issue.netCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

11.2 Remove OS Information from Login Warning Banners - /etc/issueCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

13.6 Ensure root PATH Integrity - .bashrcCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

13.6 Ensure root PATH Integrity - .cshrcCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

13.8 Check User Dot File PermissionsCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

13.10 Check for Presence of User .rhosts FilesCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

13.16 Check for Duplicate User NamesCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION