Item Search

NameAudit NamePluginCategory
1.007 - Members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

1.008 - Shared user accounts are permitted on the system.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

2.021 - Remove Software Certificate Installation FilesDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.004 - Secure Removable Media - CD-ROMDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.007 - The system allows shutdown from the logon dialog box.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.013 - Caching of logon credentials must be limited.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.043 - Outgoing secure channel traffic is not encrypted when possible.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.064 - Unauthorized registry paths are remotely accessible.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.068 - Solicited Remote Assistance is allowed.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.074 - The system is not configured to force users to log off when their allowed logon hours expire.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.088 - The system is not configured to use Safe DLL Search Mode.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

3.101 - The system must be configured to ignore NetBIOS name release requests except from WINS servers.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.115 - The Windows Server SMB server is not enabled to always perform SMB packet signing.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.125 - Audit policy using subcategories is enabled.DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

3.132 - User Account Control - Detect Application InstallationsDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.135 - User Account Control - Switch to secure desktopDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.141 - User Account Control - Executable ElevationDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

4.004 - Lockout duration does not meet minimum requirements.DISA Windows Vista STIG v6r41Windows

ACCESS CONTROL

4.010 - User rights assignments must meet minimum requirements. - Create permanent shared objectsDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Restore files and directoriesDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.019 - Outdated or unused accounts must be removed from the system.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

5.098 - The system must limit how many times unacknowledged TCP data is retransmitted.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.107 - A Windows system has an incorrect default DCOM authorization level. - NoneDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.112 - DCOM calls are not executed under the security context of the calling user.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

GEN005480 - The syslog daemon must not accept remote messages unless it is a syslog server documented using site-defined procedures.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005511 - The SSH client must be configured to not use CBC-based ciphers.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005540 - The SSH daemon must be configured for IP filtering - '/etc/hosts.allow'DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN005820 - The NFS anonymous UID and GID must be configured to values without permissions.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006000 - The system must not have a public Instant Messaging (IM) client installed.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

GEN006150 - The /usr/lib/smb.conf file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006200 - The /var/private/smbpasswd file must have mode 0600 or less permissive.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006210 - The /var/private/smbpasswd file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006235 - Samba must be configured to not allow guest access to shares.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN006310 - The /etc/news/nnrp.access file must not have an extended ACL.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006340 - Files in /etc/news must be owned by root or news.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006360 - The files in /etc/news must be group-owned by system or news.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN006571 - The file integrity tool must be configured to verify extended attributes.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND INFORMATION INTEGRITY

GEN007780 - The system must not have 6to4 enabled.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN007820 - The system must not have IP tunnels configured - 'ifconfig -a'DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008080 - If the system is using LDAP the /etc/ldap.conf file must be owned by rootDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008120 - If the system is using LDAP the /etc/ldap.conf file must not have an extended ACLDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008160 - The TLS certificate authority file and/or directory (as appropriate) must be group-owned by root, bin, sys, or systemDISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN008600 - The system must be configured to only boot from the system boot device.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN008620 - System BIOS or system controllers supporting password protection must have admin accounts/passwords configured, and no others.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009140 - The system must not have the chargen service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009190 - The system must not have the comsat service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009250 - The system must not have the PostOffice Protocol (POP3) service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009290 - The system must not have the systat service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009300 - The inetd time service must not be active on the system on the inetd daemon.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL

GEN009320 - The system must not have the sprayd service active.DISA STIG AIX 6.1 v1r14Unix

ACCESS CONTROL