| VCTR-67-000034 - The vCenter Server must use unique service accounts when applications connect to vCenter. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000039 - The vCenter Server passwords must be at least 15 characters in length. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | IDENTIFICATION AND AUTHENTICATION |
| VCTR-67-000052 - The vCenter Server must protect the confidentiality and integrity of transmitted information by isolating IP-based storage traffic. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000057 - The vCenter Server must enable TLS 1.2 exclusively. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000063 - The vCenter Server must restrict access to the cryptographic role. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000071 - The vCenter Server must terminate management sessions after 10 minutes of inactivity. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| VCTR-67-000073 - The vCenter Server must minimize access to the vCenter server. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| WN25-00-000040 - Windows Server 2025 members of the Backup Operators group must have separate accounts for backup duties and normal operational tasks. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000060 - Windows Server 2025 manually managed application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000090 - Windows Server 2025 systems must have a Trusted Platform Module (TPM) enabled and ready for use. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000220 - Windows Server 2025 system files must be monitored for unauthorized changes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000260 - Windows Server 2025 must implement protection methods such as TLS, encrypted VPNs, or IPsec if the data owner has a strict requirement for ensuring data integrity and confidentiality is maintained at every step of the data transfer and handling process. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-00-000332 - Windows Server 2025 must not have Wi-Fi enabled unless required by the organization. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000340 - Windows Server 2025 must not have the Peer Name Resolution Protocol installed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000360 - Windows Server 2025 must not have the Telnet Client installed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000380 - Windows Server 2025 must not have the Server Message Block (SMB) v1 protocol installed. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-00-000470 - Windows Server 2025 must have Secure Boot enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-AC-000060 - Windows Server 2025 minimum password age must be configured to at least one day. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-AC-000090 - Windows Server 2025 reversible password encryption must be disabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-AU-000040 - Windows Server 2025 permissions for the Security event log must prevent access by nonprivileged accounts. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000050 - Windows Server 2025 permissions for the System event log must prevent access by nonprivileged accounts. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000140 - Windows Server 2025 must be configured to audit Detailed Tracking - Process Creation successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000210 - Windows Server 2025 must be configured to audit Logon/Logoff - Special Logon successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000320 - Windows Server 2025 must be configured to audit System - IPsec Driver successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-AU-000585 - Windows Server 2025 must be configured to audit registry failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000586 - Windows Server 2025 must be configured to audit registry successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000587 - Windows Server 2025 must be configured to audit sensitive privilege use successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-CC-000070 - Windows Server 2025 insecure logons to an SMB server must be disabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000090 - Windows Server 2025 command line data must be included in process creation events. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-CC-000150 - Windows Server 2025 downloading print driver packages over HTTP must be turned off. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000200 - Windows Server 2025 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000240 - Windows Server 2025 administrator accounts must not be enumerated during elevation. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-CC-000290 - Windows Server 2025 System event log size must be configured to 32768 KB or greater. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-CC-000340 - Windows Server 2025 must not save passwords in the Remote Desktop Client. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-CC-000440 - Windows Server 2025 users must be notified if a web-based program attempts to install software. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000450 - Windows Server 2025 must disable automatically signing in the last interactive user after a system-initiated restart. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000530 - Windows Server 2025 must have PowerShell Transcription enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-DC-000030 - Windows Server 2025 Kerberos service ticket maximum lifetime must be limited to 600 minutes or less. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-DC-000120 - Windows Server 2025 data files owned by users must be on a different logical partition from the directory server data files. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-DC-000140 - Windows Server 2025 must use separate, NSA-approved (Type 1) cryptography to protect the directory data in transit for directory service implementations at a classified confidentiality level when replication data traverses a network cleared to a lower level than the data. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-DC-000220 - Windows Server 2025 Active Directory (AD) RID Manager$ object must be configured with proper audit settings. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| WN25-DC-000310 - Windows Server 2025 Active Directory (AD) user accounts, including administrators, must be configured to require the use of a common access card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN25-DC-000370 - The Windows Server 2025 'Deny access to this computer from the network' user right on domain controllers must be configured to prevent unauthenticated access. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-DC-000390 - The Windows Server 2025 'Deny log on as a service' user right must be configured to include no accounts or groups (blank) on domain controllers. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-MS-000090 - Windows Server 2025 Deny log on as a batch job user right on domain-joined member servers must be configured to prevent access from highly privileged domain accounts and from unauthenticated access on all systems. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-MS-000100 - The Windows Server 2025 'Deny log on as a service' user right on domain-joined member servers must be configured to prevent access from highly privileged domain accounts. No other groups or accounts must be assigned this right. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-MS-000140 - Windows Server 2025 must be running Credential Guard on domain-joined member servers. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-SH-000020 - Windows Server 2025 OpenSSH must display the Standard Mandatory DoW Notice and Consent Banner before granting remote access to the system via an OpenSSH logon. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL |
| WN25-SO-000080 - The Windows Server 2025 setting Domain member: Digitally sign secure channel data (when possible) must be configured to Enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-SO-000160 - The Windows Server 2025 setting Microsoft network client: Digitally sign communications (always) must be configured to Enabled. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
