| 1.3.1.8 Ensure the operating system has the policycoreutils package installed | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG | Unix | ACCESS CONTROL, MEDIA PROTECTION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Per User Management Interface Enablement | CIS HPE Aruba Networking CX Switch v1.0.1 L2 | ArubaOS | ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY |
| 1.7.7 Ensure Xwayland is configured | CIS Debian Linux 12 v2.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.7.7 Ensure Xwayland is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.7.7 Ensure Xwayland is configured | CIS Debian Linux 12 v2.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.7.7 Ensure Xwayland is configured | CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.7.11 Ensure Xwayland is configured | CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS Oracle Linux 10 v1.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS Oracle Linux 10 v1.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS Rocky Linux 10 v1.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS AlmaLinux OS 10 v1.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.8.6 Ensure Xwayland is configured | CIS Rocky Linux 10 v1.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.8.7 Ensure Xwayland is configured | CIS Rocky Linux 8 v3.0.0 L2 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 1.8.7 Ensure Xwayland is configured | CIS Oracle Linux 8 v4.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.8.7 Ensure Xwayland is configured | CIS AlmaLinux OS 8 v4.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 1.9.2 https-server idle session management | CIS HPE Aruba Networking CX Switch v1.0.1 Optional Security Recommendations | ArubaOS | ACCESS CONTROL |
| 2.3.17.7 (L1) Ensure 'User Account Control: Switch to the secure desktop when prompting for elevation' is set to 'Enabled' | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | ACCESS CONTROL |
| 3.2 Ensure Legacy Networks Do Not Exist for Older Projects | CIS Google Cloud Platform Foundation v5.0.0 L1 | GCP | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 3.8 Ensure Plugin Directory Has Appropriate Permissions | CIS Oracle MySQL Community Server 8.4 v1.1.0 L1 MySQL RDBMS on Linux Unix | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.2.1 Ensure IS-IS neighbor authentication is set to MD5 | CIS Juniper OS Benchmark v2.1.0 L1 | Juniper | IDENTIFICATION AND AUTHENTICATION |
| 5.7.1 Create administrative boundaries between resources using namespaces | CIS Kubernetes v1.20 Benchmark v1.0.1 L1 Master | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 6.1.5 Ensure 'BECOME USER' Is Revoked From Unauthorized 'GRANTEE' | CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDB | OracleDB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.5 Ensure 'BECOME USER' Is Revoked From Unauthorized 'GRANTEE' | CIS Oracle Database 23ai v1.1.0 L1 RDBMS | OracleDB | ACCESS CONTROL, MEDIA PROTECTION |
| 102.2 Ensure 'Allow Networking' is set to 'Not allowed' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| AADC-CL-000955 - Adobe Acrobat Pro DC Classic FIPS mode must be enabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| AADC-CL-001300 - Adobe Acrobat Pro DC Classic third-party web connectors must be disabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| CIS_Amazon_Linux_2_STIG_v2.0.1_L1_Server.audit from CIS Amazon Linux 2 STIG v2.0.1 | CIS Amazon Linux 2 STIG v2.0.1 L1 Server | Unix | |
| CIS_Amazon_Linux_2_STIG_v2.0.1_STIG.audit from CIS Amazon Linux 2 STIG v2.0.1 | CIS Amazon Linux 2 STIG v2.0.1 STIG | Unix | |
| CIS_Amazon_Linux_2023_STIG_v1.0.0_CAT_I.audit from CIS Amazon Linux 2023 STIG v1.0.0 | CIS Amazon Linux 2023 STIG v1.0.0 CAT I | Unix | |
| CIS_Amazon_Linux_2023_STIG_v1.0.0_CAT_III.audit from CIS Amazon Linux 2023 STIG v1.0.0 | CIS Amazon Linux 2023 STIG v1.0.0 CAT III | Unix | |
| CIS_Microsoft_Windows_10_STIG_v1.0.0_CAT_II.audit from CIS Microsoft Windows 10 STIG v1.0.0 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | |
| CIS_Microsoft_Windows_10_STIG_v1.0.0_CAT_III.audit from CIS Microsoft Windows 10 STIG v1.0.0 | CIS Microsoft Windows 10 STIG v1.0.0 CAT III | Windows | |
| CIS_Microsoft_Windows_11_STIG_v1.2.0_CAT_II.audit from CIS Microsoft Windows 11 STIG v1.2.0 | CIS Microsoft Windows 11 STIG v1.2.0 CAT II | Windows | |
| CIS_Microsoft_Windows_11_STIG_v1.2.0_CAT_III.audit from CIS Microsoft Windows 11 STIG v1.2.0 | CIS Microsoft Windows 11 STIG v1.2.0 CAT III | Windows | |
| CIS_Oracle_Database_19c_STIG_v1.1.0_CAT_I_Windows.audit from CIS Oracle Database 19c STIG v1.1.0 | CIS Oracle Database 19c STIG v1.1.0 CAT I Windows | Windows | |
| CIS_Oracle_Linux_8_STIG_v1.0.0_CAT_I.audit from CIS Oracle Linux 8 STIG v1.0.0 | CIS Oracle Linux 8 STIG v1.0.0 CAT I | Unix | |
| CIS_Oracle_Linux_8_STIG_v1.0.0_CAT_II.audit from CIS Oracle Linux 8 STIG v1.0.0 | CIS Oracle Linux 8 STIG v1.0.0 CAT II | Unix | |
| CIS_Solaris_11_SPARC_STIG_v1.0.0_CAT_I.audit from CIS Solaris 11 SPARC STIG v1.0.0 | CIS Solaris 11 SPARC STIG v1.0.0 CAT I | Unix | |
| CIS_Solaris_11_SPARC_STIG_v1.0.0_CAT_III.audit from CIS Solaris 11 SPARC STIG v1.0.0 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | |
| ESXI5-VMNET-000015 - The system must ensure the dvPortGroup MAC Address Change policy is set to reject. | DISA VMWare ESXi 5.0 Server STIG v2r1 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| Extreme : switch Info | TNS Extreme ExtremeXOS Best Practice Audit | Extreme_ExtremeXOS | CONFIGURATION MANAGEMENT |
| RHEL-08-010171 - RHEL 8 must have policycoreutils package installed. | DISA Red Hat Enterprise Linux 8 STIG v2r8 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-10-700990 - RHEL 10 must disable virtual system calls. | DISA Red Hat Enterprise Linux 10 STIG v1r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SLEM-05-431010 - SLEM 5 must have policycoreutils package installed. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| TCAT-AS-001220 - $CATALINA_BASE/conf/ folder must be owned by root, group tomcat. | DISA STIG Apache Tomcat Application Server 9 v3r4 Middleware | Unix | CONFIGURATION MANAGEMENT |
| VCSA-80-000302 - The vCenter Server must reset port configuration when virtual machines are disconnected. | DISA VMware vSphere 8.0 vCenter STIG v2r5 VMware | VMware | CONFIGURATION MANAGEMENT |
| WN11-PK-000005 - The DoW Root CA certificates must be installed in the Trusted Root Store. | DISA Microsoft Windows 11 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN11-PK-000010 - The External Root CA certificates must be installed in the Trusted Root Store on unclassified systems. | DISA Microsoft Windows 11 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION |
