Item Search

NameAudit NamePluginCategory
1.1.1.8 Ensure udf kernel module is not availableCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.2.6.1 Ensure separate partition exists for /var/logCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

1.1.5 - MobileIron - Remove Entries in 'Wi-Fi'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.1.7 - MobileIron - Disable 'Wi-Fi'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.1.8 - MobileIron - Disable 'Bluetooth'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.1.9 - MobileIron - Disable 'Location Services'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.1.10 - MobileIron - Enable 'Airplane Mode'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.2.1.3 Ensure repo_gpgcheck is globally activatedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

1.2.1.5 Ensure weak dependencies are configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.2.6 - MobileIron - Disable 'plug-ins' - 'Samsung SAFE'MobileIron - CIS Google Android 4 v1.0.0 L2MDM

ACCESS CONTROL

1.3.6 Ensure that the RotateKubeletServerCertificate argument is set to trueCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.5.3 Ensure fs.protected_symlinks is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

ACCESS CONTROL

1.13 Ensure 'Smart Lock' is set to DisabledMobileIron - CIS Google Android 7 v1.0.0 L2MDM

CONFIGURATION MANAGEMENT

2.1.7 - AirWatch - Set the 'number of days' for 'maximum password age'AirWatch - CIS Google Android 4 v1.0.0 L2MDM

IDENTIFICATION AND AUTHENTICATION

2.1.8 - AirWatch - Set the 'number of passwords' for 'password history'AirWatch - CIS Google Android 4 v1.0.0 L2MDM

IDENTIFICATION AND AUTHENTICATION

2.4 Ensure an industry standard authentication mechanism is used - authenticationMechanismsCIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix

CONFIGURATION MANAGEMENT

2.4 Ensure an industry standard authentication mechanism is used - authenticationMechanismsCIS MongoDB 3.2 L2 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT

2.4 Ensure an industry standard authentication mechanism is used - authorizationCIS MongoDB 3.2 L2 Windows Audit v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.4 Ensure an industry standard authentication mechanism is used - clusterAuthModeCIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.7 Ensure that a unique Certificate Authority is used for etcdCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

3.5 Review User-Defined RolesCIS MongoDB 3.4 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - dbAdminAnyDatabaseCIS MongoDB 3.2 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - dbOwnerCIS MongoDB 3.2 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - dbOwnerCIS MongoDB 3.4 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - userAdminCIS MongoDB 3.4 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - userAdminAnyDatabaseCIS MongoDB 3.2 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

3.6 Review Superuser/Admin Roles - userAdminAnyDatabaseCIS MongoDB 3.4 Database Audit L2 v1.0.0MongoDB

ACCESS CONTROL

5.2.7 Minimize the admission of root containersCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

ACCESS CONTROL

5.3 Ensure that logging captures as much information as possibleCIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix

AUDIT AND ACCOUNTABILITY

5.3.2 Ensure that all Namespaces have Network Policies definedCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.2 Ensure minimum password days is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.4.1.2 Ensure minimum password days is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION

6.3 Ensure that operating system resource limits are set for MongoDBCIS MongoDB 3.2 L2 Windows Audit v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

6.3.1.2 Ensure auditing for processes that start prior to auditd is enabledCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.1.3 Ensure audit_backlog_limit is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.1.3 Ensure audit_backlog_limit is configuredCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

6.3.3.2 Ensure actions as another user are always loggedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.3.3.7 Ensure events that modify /etc/hosts and /etc/hostname are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.9 Ensure events that modify /etc/NetworkManager directory are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.3.10 Ensure use of privileged commands are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.15 Ensure events that modify /etc/security/opasswd are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.17 Ensure events that modify /etc/pam.conf and /etc/pam.d/ information are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.19 Ensure discretionary access control permission modification events chown,fchown,lchown,fchownat are collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.20 Ensure discretionary access control permission modification events setxattr,lsetxattr,fsetxattr,removexattr,lremovexattr,fremovexattr collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.22 Ensure session initiation information is collectedCIS Oracle Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.23 Ensure login and logout events are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.3.3.26 Ensure events that modify the system's Mandatory Access Controls are collectedCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

6.3.4.1 Ensure the audit log file directory mode is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

6.3.4.4 Ensure audit log files group owner is configuredCIS Oracle Linux 10 v1.0.0 L2 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.4 Ensure that server-side scripting is disabled if not neededCIS MongoDB 3.4 L2 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT