| 1.1 CISC-ND-000010 | CIS Cisco IOS Router NDM STIG v1.1.0 CAT II | Cisco | ACCESS CONTROL |
| 1.1.1 Ensure NGINX is installed | CIS NGINX v3.0.0 L1 Webserver | Unix | SYSTEM AND SERVICES ACQUISITION |
| 1.1.1 Ensure NGINX is installed | CIS NGINX v3.0.0 L1 Loadbalancer | Unix | SYSTEM AND SERVICES ACQUISITION |
| 1.1.1 Ensure NGINX is installed | CIS NGINX v3.0.0 L1 Proxy | Unix | SYSTEM AND SERVICES ACQUISITION |
| 1.1.20.1 (L2) Ensure 'Search Suggestions' is set to 'Disabled' | CIS Mozilla Firefox ESR GPO v1.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 1.7.8 Ensure GDM autorun-never is enabled | CIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION |
| 1.7.8 Ensure GDM autorun-never is enabled | CIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION |
| 1.8 CISC-ND-000470 | CIS Cisco IOS XR Router NDM STIG v1.0.0 CAT I | Cisco | CONFIGURATION MANAGEMENT |
| 1.106 (L2) Ensure 'Enable Translate' is set to 'Disabled' | CIS Microsoft Intune for Edge v1.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 2.1.1 (L2) Ensure 'Enable Translate' is set to 'Disabled' | CIS Google Chrome Group Policy v1.1.0 L2 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 3.3 Ensure Custom Error Messages are not Off - Applications | CIS IIS 7 L2 v1.8.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 5.7 (L2) Ensure the SSH authorized_keys file is empty | CIS VMware ESXi 7.0 v1.5.0 L2 Bare Metal | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 6.10.5.4 Ensure REST HTTPS is Set to use Mutual Authentication | CIS Juniper OS Benchmark v2.1.0 L2 | Juniper | IDENTIFICATION AND AUTHENTICATION |
| 7.14 Ensure Request Body Inspection is Enabled in Azure Web Application Firewall policy on Azure Application Gateway | CIS Microsoft Azure Foundations v6.0.0 L2 | microsoft_azure | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.2.2 (L2) Ensure unnecessary CD/DVD devices are disconnected | CIS VMware ESXi 7.0 v1.5.0 L2 | VMware | CONFIGURATION MANAGEMENT |
| 8.2.3 (L1) Ensure unnecessary parallel ports are disconnected | CIS VMware ESXi 7.0 v1.5.0 L1 | VMware | CONFIGURATION MANAGEMENT |
| 8.2.3 Ensure unnecessary parallel ports are disconnected | CIS VMware ESXi 6.7 v1.3.0 Level 1 | VMware | CONFIGURATION MANAGEMENT |
| 8.2.4 (L1) Ensure unnecessary serial ports are disconnected | CIS VMware ESXi 7.0 v1.5.0 L1 | VMware | CONFIGURATION MANAGEMENT |
| 8.2.4 Ensure unnecessary serial ports are disconnected | CIS VMware ESXi 6.7 v1.3.0 Level 1 | VMware | CONFIGURATION MANAGEMENT |
| 8.3.28 Set 'Logon options' to 'Enabled:Anonymous logon' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Access Security - Disable insecure or unnecessary access services (telnet, J-Web over HTTP, FTP, etc.) - ftp | Juniper Hardening JunOS 12 Devices Checklist | Juniper | CONFIGURATION MANAGEMENT |
| Access Security - Disable insecure or unnecessary access services (telnet, J-Web over HTTP, FTP, etc.) - rsh | Juniper Hardening JunOS 12 Devices Checklist | Juniper | CONFIGURATION MANAGEMENT |
| CD16-00-008400 - PostgreSQL must only accept end entity certificates issued by DOD PKI or DOD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| CIS Amazon Linux Benchmark Level 1 | CIS Amazon Linux v2.1.0 L1 | Unix | |
| CIS_Docker_v1.8.0_L1_Docker_Swarm.audit from CIS Docker Benchmark v1.8.0 | CIS Docker v1.8.0 L1 Docker Swarm | Unix | |
| CIS_MariaDB_10.11_v1.0.0_L1_MariaDB_RDBMS_MySQLDB.audit from CIS MariaDB 10.11 1.0.0 | CIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS MySQLDB | MySQLDB | |
| CIS_MariaDB_10.11_v1.0.0_L1_MariaDB_RDBMS_on_Linux_MySQLDB.audit from CIS MariaDB 10.11 1.0.0 | CIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS on Linux MySQLDB | MySQLDB | |
| CIS_MariaDB_10.11_v1.0.0_L1_MariaDB_RDBMS_on_Linux_Unix.audit from CIS MariaDB 10.11 v1.0.0 | CIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS on Linux Unix | Unix | |
| CIS_MariaDB_10.11_v1.0.0_L1_MariaDB_RDBMS_Unix.audit from CIS MariaDB 10.11 v1.0.0 | CIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS Unix | Unix | |
| CIS_MariaDB_10.11_v1.0.0_L2_MariaDB_RDBMS_MySQLDB.audit from CIS MariaDB 10.11 1.0.0 | CIS MariaDB 10.11 v1.0.0 L2 MariaDB RDBMS MySQLDB | MySQLDB | |
| CIS_MariaDB_10.11_v1.0.0_L2_MariaDB_RDBMS_on_Linux_MySQLDB.audit from CIS MariaDB 10.11 1.0.0 | CIS MariaDB 10.11 v1.0.0 L2 MariaDB RDBMS on Linux MySQLDB | MySQLDB | |
| CIS_MariaDB_10.11_v1.0.0_L2_MariaDB_RDBMS_on_Linux_Unix.audit from CIS MariaDB 10.11 v1.0.0 | CIS MariaDB 10.11 v1.0.0 L2 MariaDB RDBMS on Linux Unix | Unix | |
| CIS_MongoDB_4_v1.0.0_L2_Unix.audit from CIS MongoDB 4 v1.0.0 | CIS MongoDB 4 v1.0.0 L2 Unix | Unix | |
| CIS_MongoDB_4_v1.0.0_L2_Windows.audit from CIS MongoDB 4 v1.0.0 | CIS MongoDB 4 v1.0.0 L2 Windows | Windows | |
| CIS_MongoDB_5_v1.2.0_L1_Unix.audit from CIS MongoDB 5 v1.2.0 | CIS MongoDB 5 v1.2.0 L1 Unix | Unix | |
| CIS_MongoDB_5_v1.2.0_L1_Windows.audit from CIS MongoDB 5 v1.2.0 | CIS MongoDB 5 v1.2.0 L1 Windows | Windows | |
| CIS_MongoDB_5_v1.2.0_L2_Windows.audit from CIS MongoDB 5 v1.2.0 | CIS MongoDB 5 v1.2.0 L2 Windows | Windows | |
| CIS_PostgreSQL_13_v1.3.0_L1_Database_Unix.audit from CIS PostgreSQL 13 v1.3.0 | CIS PostgreSQL 13 v1.3.0 L1 Database Unix | Unix | |
| CIS_PostgreSQL_17_v1.1.0_L1_OS_Linux_PostgreSQLDB.audit from CIS PostgreSQL 17 v1.1.0 | CIS PostgreSQL 17 v1.1.0 L1 OS Linux PostgreSQLDB | PostgreSQLDB | |
| CIS_PostgreSQL_17_v1.1.0_L1_OS_Linux_Unix.audit from CIS PostgreSQL 17 v1.1.0 | CIS PostgreSQL 17 v1.1.0 L1 OS Linux Unix | Unix | |
| CIS_PostgreSQL_18_v1.0.0_L1_Database_PostgreSQLDB.audit from CIS PostgreSQL 18 v1.0.0 | CIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDB | PostgreSQLDB | |
| DB2X-00-003500 - Unused database components, DBMS software, and database objects must be removed. | DISA STIG IBM DB2 v10.5 LUW v2r1 OS Linux | Unix | CONFIGURATION MANAGEMENT |
| JUEX-L2-000040 - The Juniper EX switch must be configured to manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks. | DISA Juniper EX Series Switches Layer 2 Switch STIG v2r5 | Juniper | SYSTEM AND COMMUNICATIONS PROTECTION |
| O121-P3-006200 - The DBMS must protect against an individual who uses a shared account falsely denying having performed a particular action. | DISA Oracle Database 12c STIG v3r5 OracleDB | OracleDB | AUDIT AND ACCOUNTABILITY |
| OL6-00-000008 - Vendor-provided cryptographic certificates must be installed to verify the integrity of system software. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| PANW-AG-000073 - The Palo Alto Networks security platform must deny or restrict detected prohibited mobile code. | DISA Palo Alto Networks ALG STIG v3r4 | Palo_Alto | SYSTEM AND COMMUNICATIONS PROTECTION |
| PPS9-00-009100 - The EDB Postgres Advanced Server must only accept end entity certificates issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions. | EDB PostgreSQL Advanced Server OS Linux Audit v2r3 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SLEM-05-671010 - FIPS 140-2/140-3 mode must be enabled on SLEM 5. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| TNS_IBM_HTTP_Server_Linux_Best_Practice.audit | TNS IBM HTTP Server Best Practice | Unix | |
| WG242 IIS6 - Log file data must contain required data elements. - 'Logging Properties Set Correctly' | DISA STIG IIS 6.0 Site Checklist v6r16 | Windows | AUDIT AND ACCOUNTABILITY |
