Item Search

NameAudit NamePluginCategory
1.10 WN11-00-000040CIS Microsoft Windows 11 STIG v1.2.0 CAT IWindows

CONFIGURATION MANAGEMENT

1.24 WN10-00-000107CIS Microsoft Windows 10 STIG v1.0.0 CAT IIWindows

CONFIGURATION MANAGEMENT

1.142 WN10-CC-000205CIS Microsoft Windows 10 STIG v1.0.0 CAT IIWindows

CONFIGURATION MANAGEMENT

2.3.3 Verify Display Sleep is set to a value larger than the Screen SaverCIS Apple OSX 10.10 Yosemite L1 v1.2.0Unix

ACCESS CONTROL

5.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

5.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

5.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT

5.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT

18.9.5.1 Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.5.5 Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.5.7 Ensure 'Turn On Virtualization Based Security: Kernel-mode Hardware-enforced Stack Protection' is set to 'Enabled: Enabled in enforcement mode'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.6.1 (L1) Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

IDENTIFICATION AND AUTHENTICATION

18.9.20.1.14 Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.20.1.14 Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.20.1.14 Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.14 Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.35.1 (L1) Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.9.35.1 Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

18.9.35.1 Ensure 'Prevent the computer from joining a homegroup' is set to 'Enabled'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.10.16.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.18.7 Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.18.7 Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.18.7 Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.18.7 Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

AUDIT AND ACCOUNTABILITY

18.10.94.4.2 Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

18.10.94.4.2 Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

18.10.94.4.2 Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

18.10.94.4.2 Ensure 'Select when Quality Updates are received' is set to 'Enabled: 0 days'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL NGWindows

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)MSCT Edge v84 v1.0.0Windows

CONFIGURATION MANAGEMENT

Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)MSCT Edge v85 v1.0.0Windows

CONFIGURATION MANAGEMENT

Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)MSCT Edge v86 v1.0.0Windows

CONFIGURATION MANAGEMENT

Allow certificates signed using SHA-1 when issued by local trust anchors (deprecated)MSCT Edge v87 v1.0.0Windows

CONFIGURATION MANAGEMENT

Big Sur - Disable Hot CornersNIST macOS Big Sur v1.4.0 - 800-53r5 HighUnix

ACCESS CONTROL

CIS Microsoft IIS 8 Benchmark v1.5.1 Level 1CIS IIS 8.0 v1.5.1 Level 1Windows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_I.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIIWindows
CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIIWindows
CIS_MS_Windows_8.1_v2.4.1_Level_2_Bitlocker.audit from CIS Microsoft Windows 8.1 Workstation Benchmark v2.4.1CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows
Monterey - Disable Hot CornersNIST macOS Monterey v1.0.0 - 800-53r4 ModerateUnix

ACCESS CONTROL

WN10-CC-000205 - Windows Telemetry must not be configured to Full.DISA Microsoft Windows 10 STIG v3r6Windows

CONFIGURATION MANAGEMENT

WN10-CC-000206 - Windows Update must not obtain updates from other PCs on the internet.DISA Microsoft Windows 10 STIG v3r6Windows

CONFIGURATION MANAGEMENT

WN11-00-000040 - Windows 11 systems must be maintained at a supported servicing level.DISA Microsoft Windows 11 STIG v2r9Windows

CONFIGURATION MANAGEMENT