| 1.6 RHEL-09-211035 | CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.16 CISC-RT-000236 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III | Cisco | CONFIGURATION MANAGEMENT |
| 1.22 CISC-L2-000270 | CIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT III | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.25 SOL-11.1-010360 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.29 OL08-00-010171 | CIS Oracle Linux 8 STIG v1.0.0 CAT III | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.42 SOL-11.1-020120 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.46 SLES-15-010375 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT III | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.47 APPL-14-001029 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT III | Unix | AUDIT AND ACCOUNTABILITY |
| 1.50 SLES-15-010410 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT III | Unix | AUDIT AND ACCOUNTABILITY |
| 1.62 CISC-RT-000600 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III | Cisco | CONFIGURATION MANAGEMENT |
| 1.85 CISC-RT-000830 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III | Cisco | ACCESS CONTROL |
| 1.86 CISC-RT-000840 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III | Cisco | ACCESS CONTROL |
| 1.93 OL08-00-010540 | CIS Oracle Linux 8 STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.93 SOL-11.1-040260 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.97 CISC-RT-000950 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III | Cisco | CONTINGENCY PLANNING |
| 1.112 SOL-11.1-040450 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | ACCESS CONTROL |
| 1.127 SOL-11.1-050100 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.129 SOL-11.1-050120 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.137 SOL-11.1-050430 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | ACCESS CONTROL |
| 1.163 SOL-11.1-070080 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.176 SOL-11.1-070210 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.178 SOL-11.1-070240 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | SYSTEM AND INFORMATION INTEGRITY |
| 1.188 SLES-15-040200 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| 1.200 OL08-00-020340 | CIS Oracle Linux 8 STIG v1.0.0 CAT III | Unix | ACCESS CONTROL |
| 1.213 SOL-11.1-100020 | CIS Solaris 11 SPARC STIG v1.0.0 CAT III | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-004050 - The macOS system must configure install.log retention to 365. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-001029 - The macOS system must configure audit retention to seven days. | DISA Apple macOS 15 Sequoia STIG v1r7 | Unix | AUDIT AND ACCOUNTABILITY |
| CISC-RT-000236 - The Cisco switch must be configured to advertise a hop limit of at least 32 in Switch Advertisement messages for IPv6 stateless auto-configuration deployments. | DISA Cisco NX OS Switch RTR STIG v3r4 | Cisco | CONFIGURATION MANAGEMENT |
| FFOX-00-000015 - Firefox development tools must be disabled. | DISA Mozilla Firefox STIG v6r8 Linux | Unix | SYSTEM AND INFORMATION INTEGRITY |
| FFOX-00-000021 - Firefox autoplay must be disabled. | DISA STIG Mozilla Firefox MacOS v6r8 | Unix | CONFIGURATION MANAGEMENT |
| JUEX-L2-000160 - The Juniper EX switch must be configured to enable IGMP or MLD Snooping on all VLANs. | DISA Juniper EX Series Switches Layer 2 Switch STIG v2r5 | Juniper | CONFIGURATION MANAGEMENT |
| JUEX-RT-000070 - The Juniper router configured for Multicast Source Discovery Protocol (MSDP) must filter received source-active multicast advertisements for any undesirable multicast groups and sources. | DISA Juniper EX Series Switches Router STIG v2r1 | Juniper | ACCESS CONTROL |
| JUEX-RT-000220 - The Juniper multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Register messages received from the Designated Router (DR) for any undesirable multicast groups and sources. | DISA Juniper EX Series Switches Router STIG v2r1 | Juniper | ACCESS CONTROL |
| JUEX-RT-000900 - The Juniper MPLS router must be configured to synchronize IGP and LDP to minimize packet loss when an IGP adjacency is established prior to LDP peers completing label exchange. | DISA Juniper EX Series Switches Router STIG v2r1 | Juniper | CONFIGURATION MANAGEMENT |
| JUEX-RT-000990 - The Juniper router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments. | DISA Juniper EX Series Switches Router STIG v2r1 | Juniper | CONFIGURATION MANAGEMENT |
| OL08-00-040300 - The OL 8 file integrity tool must be configured to verify extended attributes. | DISA Oracle Linux 8 STIG v2r9 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-08-010375 - RHEL 8 must restrict access to the kernel message buffer. | DISA Red Hat Enterprise Linux 8 STIG v2r8 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| RHEL-08-010471 - RHEL 8 must enable the hardware random number generator entropy gatherer service. | DISA Red Hat Enterprise Linux 8 STIG v2r8 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-08-030741 - RHEL 8 must disable the chrony daemon from acting as a server. | DISA Red Hat Enterprise Linux 8 STIG v2r8 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-08-040025 - RHEL 8 must disable mounting of cramfs. | DISA Red Hat Enterprise Linux 8 STIG v2r8 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-09-231030 - RHEL 9 must use a separate file system for the system audit data path. | DISA Red Hat Enterprise Linux 9 STIG v2r9 | Unix | AUDIT AND ACCOUNTABILITY |
| RHEL-09-651030 - RHEL 9 must be configured so that the file integrity tool verifies Access Control Lists (ACLs). | DISA Red Hat Enterprise Linux 9 STIG v2r9 | Unix | CONFIGURATION MANAGEMENT |
| SLEM-05-431010 - SLEM 5 must have policycoreutils package installed. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN22-CC-000040 - Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing. | DISA Microsoft Windows Server 2022 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| WN22-CC-000050 - Windows Server 2022 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes. | DISA Microsoft Windows Server 2022 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| WN22-CC-000200 - Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft. | DISA Microsoft Windows Server 2022 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| WN22-CC-000260 - Windows Server 2022 Windows Update must not obtain updates from other PCs on the internet. | DISA Microsoft Windows Server 2022 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| ZEBR-11-000500 - Zebra Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts. | AirWatch - DISA Zebra Android 11 COBO STIG v1r4 | MDM | ACCESS CONTROL |
| ZEBR-11-003400 - Zebra Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device. | MobileIron - DISA Zebra Android 11 COBO STIG v1r4 | MDM | ACCESS CONTROL |
| ZEBR-11-006100 - Zebra Android 11 must be configured to generate audit records for the following auditable events: Detected integrity violations. | AirWatch - DISA Zebra Android 11 COBO STIG v1r4 | MDM | AUDIT AND ACCOUNTABILITY |
