| AMLS-L2-000150 - The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour - dot1x timeout reauth-period 3600 | DISA STIG Arista MLS DCS-7000 Series L2S v1r3 | Arista | IDENTIFICATION AND AUTHENTICATION |
| AMLS-L2-000160 - The Arista Multilayer Switch must authenticate 802.1X connected devices before establishing any connection - dot1x system-auth-control | DISA STIG Arista MLS DCS-7000 Series L2S v1r3 | Arista | IDENTIFICATION AND AUTHENTICATION |
| CIS Control 4 (4.2) Change Default Passwords | CAS Implementation Group 1 Audit File | Unix | IDENTIFICATION AND AUTHENTICATION |
| CIS_AlmaLinux_OS_8_v4.0.0_L1_Server.audit from CIS AlmaLinux OS 8 v4.0.0 | CIS AlmaLinux OS 8 v4.0.0 L1 Server | Unix | |
| CIS_AlmaLinux_OS_8_v4.0.0_L2_Server.audit from CIS AlmaLinux OS 8 v4.0.0 | CIS AlmaLinux OS 8 v4.0.0 L2 Server | Unix | |
| CIS_Amazon_Linux_2_v4.0.0_L1_Server.audit from CIS Amazon Linux 2 v4.0.0 | CIS Amazon Linux 2 v4.0.0 L1 Server | Unix | |
| CIS_Apache_Tomcat_9_L2_v1.2.0_Middleware.audit from CIS Apache Tomcat 9 Benchmark | CIS Apache Tomcat 9 L2 v1.2.0 Middleware | Unix | |
| CIS_Apache_Tomcat_10_L2_v1.1.0_Middleware.audit from CIS Apache Tomcat 10 Benchmark | CIS Apache Tomcat 10 L2 v1.1.0 Middleware | Unix | |
| CIS_Debian_Family_Linux_v1.0.0_L1_Server.audit from CIS Debian Family Linux Benchmark | CIS Debian Family Server L1 v1.0.0 | Unix | |
| CIS_Debian_Linux_12_v2.0.0_L1_Workstation.audit from CIS Debian Linux 12 v2.0.0 | CIS Debian Linux 12 v2.0.0 L1 Workstation | Unix | |
| CIS_Debian_Linux_12_v2.0.0_L2_Server.audit from CIS Debian Linux 12 v2.0.0 | CIS Debian Linux 12 v2.0.0 L2 Server | Unix | |
| CIS_Debian_Linux_13_v1.1.0_L1_Server.audit from CIS Debian Linux 13 v1.1.0 | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | |
| CIS_Debian_Linux_13_v1.1.0_L1_Workstation.audit from CIS Debian Linux 13 v1.1.0 | CIS Debian Linux 13 v1.1.0 L1 Workstation | Unix | |
| CIS_Kubernetes_v1.4.1_Level_1.audit from CIS Kubernetes Benchmark v1.4.1 | CIS Kubernetes 1.13 Benchmark v1.4.1 L1 | Unix | CONFIGURATION MANAGEMENT |
| CIS_Kubernetes_v1.4.1_Level_2.audit from CIS Kubernetes Benchmark v1.4.1 | CIS Kubernetes 1.13 Benchmark v1.4.1 L2 | Unix | CONFIGURATION MANAGEMENT |
| CIS_Kubernetes_v1.20_v1.0.1_Level_2_Master.audit from CIS Kubernetes v1.20 Benchmark v1.0.1 | CIS Kubernetes v1.20 Benchmark v1.0.1 L2 Master | Unix | CONFIGURATION MANAGEMENT |
| CIS_Kubernetes_v1.23_v1.0.1_Level_1_Worker.audit from CIS Kubernetes v1.23 Benchmark v1.0.1 | CIS Kubernetes v1.23 Benchmark v1.0.1 L1 Worker | Unix | CONFIGURATION MANAGEMENT |
| CIS_Microsoft_Defender_Antivirus_v1.0.0_L2_Workstation.audit from CIS Microsoft Defender Antivirus 1.0.0 | CIS Microsoft Defender Antivirus v1.0.0 L2 Workstation | Windows | |
| CIS_Microsoft_Edge_v5.0.0_L2.audit from CIS Microsoft Edge v5.0.0 | CIS Microsoft Edge v5.0.0 L2 | Windows | |
| CIS_MongoDB_3.6_Benchmark_Level_2_OS_Unix_v1.1.0.audit from CIS MongoDB 3.6 Benchmark | CIS MongoDB 3.6 L2 Unix Audit v1.1.0 | Unix | |
| CIS_MongoDB_6_v1.2.0_L2_OS_Linux.audit from CIS MongoDB 6 Benchmark v1.2.0 | CIS MongoDB 6 v1.2.0 L2 MongoDB | Unix | |
| CIS_Oracle_Database_19c_v2.0.0_L1_RDBMS_On_Host_OS_Unix.audit from CIS Oracle Database 19c v2.0.0 | CIS Oracle Database 19c v2.0.0 L1 RDBMS On Host OS Unix | Unix | |
| CIS_Oracle_Linux_7_v4.0.0_L1_Server.audit from CIS Oracle Linux 7 v4.0.0 | CIS Oracle Linux 7 v4.0.0 L1 Server | Unix | |
| CIS_Oracle_Linux_7_v4.0.0_L2_Workstation.audit from CIS Oracle Linux 7 v4.0.0 | CIS Oracle Linux 7 v4.0.0 L2 Workstation | Unix | |
| CIS_Oracle_Linux_8_v4.0.0_L1_Server.audit from CIS Oracle Linux 8 v4.0.0 | CIS Oracle Linux 8 v4.0.0 L1 Server | Unix | |
| CIS_Oracle_Linux_8_v4.0.0_L1_Workstation.audit from CIS Oracle Linux 8 v4.0.0 | CIS Oracle Linux 8 v4.0.0 L1 Workstation | Unix | |
| CIS_Oracle_Linux_8_v4.0.0_L2_Server.audit from CIS Oracle Linux 8 v4.0.0 | CIS Oracle Linux 8 v4.0.0 L2 Server | Unix | |
| CIS_Oracle_Linux_8_v4.0.0_L2_Workstation.audit from CIS Oracle Linux 8 v4.0.0 | CIS Oracle Linux 8 v4.0.0 L2 Workstation | Unix | |
| CIS_Oracle_Linux_9_v3.0.0_L1_Server.audit from CIS Oracle Linux 9 v3.0.0 | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | |
| CIS_PostgreSQL_9.5_v1.1.0_L1_OS_Linux.audit from CIS PostgreSQL 9.5 Benchmark v1.1.0 | CIS PostgreSQL 9.5 OS v1.1.0 | Unix | |
| CIS_PostgreSQL_9.6_v1.0.0_L1_OS_Linux.audit from CIS Benchmark for PostgreSQL 9.6 | CIS PostgreSQL 9.6 OS v1.0.0 | Unix | |
| CIS_PostgreSQL_12_v1.1.0_L1_DB.audit from CIS PostgreSQL 12 Benchmark v1.1.0 | CIS PostgreSQL 12 DB v1.1.0 | PostgreSQLDB | |
| CIS_PostgreSQL_16_v1.1.0_L1_OS_Linux_PostgreSQLDB.audit from CIS PostgreSQL 16 Benchmark v1.1.0 | CIS PostgreSQL 16 v1.1.0 L1 OS Linux PostgreSQLDB | PostgreSQLDB | |
| CIS_Rocky_Linux_8_v3.0.0_L1_Server.audit from CIS Rocky Linux 8 v3.0.0 | CIS Rocky Linux 8 v3.0.0 L1 Server | Unix | |
| CIS_Rocky_Linux_8_v3.0.0_L2_Workstation.audit from CIS Rocky Linux 8 v3.0.0 | CIS Rocky Linux 8 v3.0.0 L2 Workstation | Unix | |
| CIS_Rocky_Linux_9_v3.0.0_L1_Server.audit from CIS Rocky Linux 9 v3.0.0 | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | |
| CIS_v1.1.0_Oracle_11g_OS_Windows_Level_1.audit from CIS v1.1.0 Oracle 11g | CIS v1.1.0 Oracle 11g OS Windows Level 1 | Windows | |
| CISC-L2-000030 - The Cisco switch must authenticate all VLAN Trunk Protocol (VTP) messages with a hash function using the most secured cryptographic algorithm available. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | IDENTIFICATION AND AUTHENTICATION |
| CISC-L2-000030 - The Cisco switch must authenticate all VLAN Trunk Protocol (VTP) messages with a hash function using the most secured cryptographic algorithm available. | DISA Cisco NX OS Switch L2S STIG v3r4 | Cisco | IDENTIFICATION AND AUTHENTICATION |
| CISC-L2-000100 - The Cisco switch must have BPDU Guard enabled on all user-facing or untrusted access switch ports. | DISA Cisco NX OS Switch L2S STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000120 - The Cisco switch must have Unknown Unicast Flood Blocking (UUFB) enabled. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000120 - The Cisco switch must have Unknown Unicast Flood Blocking (UUFB) enabled. | DISA Cisco NX OS Switch L2S STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000130 - The Cisco switch must have DHCP snooping for all user VLANs to validate DHCP messages from untrusted sources. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000140 - The Cisco switch must have IP Source Guard enabled on all user-facing or untrusted access switch ports. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000160 - The Cisco switch must have Storm Control configured on all host-facing switchports. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | CONFIGURATION MANAGEMENT |
| CISC-L2-000230 - The Cisco switch must have the default VLAN pruned from all trunk ports that do not require it. | DISA Cisco NX OS Switch L2S STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports. | DISA Cisco IOS Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000260 - The Cisco switch must have the native VLAN assigned to an ID other than the default VLAN for all 802.1q trunk links. | DISA Cisco IOS Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000270 - The Cisco switch must not have any switchports assigned to the native VLAN. | DISA Cisco IOS XE Switch L2S STIG v3r2 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-L2-000270 - The Cisco switch must not have any switchports assigned to the native VLAN. | DISA Cisco NX OS Switch L2S STIG v3r4 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
