| 1.5.3.2 Remote Authorization | CIS HPE Aruba Networking CX Switch v1.0.1 L2 | ArubaOS | ACCESS CONTROL |
| 1.16 RHEL-09-212035 | CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.33 APPL-14-001002 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| 1.161 WN22-DC-000150 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I | Windows | CONFIGURATION MANAGEMENT |
| 1.246 WN10-UR-000070 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | ACCESS CONTROL |
| 1.248 WN11-UR-000070 | CIS Microsoft Windows 11 STIG v1.2.0 CAT II | Windows | ACCESS CONTROL |
| 5.5.9 Ensure local interactive user accounts umask is 077 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | CONFIGURATION MANAGEMENT |
| AADC-CL-001295 - Adobe Acrobat Pro DC Classic Repair Installation must be disabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| AADC-CL-001310 - The Adobe Acrobat Pro DC Classic Welcome Screen must be disabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| AADC-CL-001315 - Adobe Acrobat Pro DC Classic SharePoint and Office365 access must be disabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| AMLS-L3-000160 - If Border Gateway Protocol (BGP) is enabled on The Arista Multilayer Switch, The Arista Multilayer Switch must not be a BGP peer with a router from an Autonomous System belonging to any Alternate Gateway. | DISA STIG Arista MLS DCS-7000 Series RTR v1r4 | Arista | ACCESS CONTROL |
| AOSX-14-000040 - The macOS system must use replay-resistant authentication mechanisms and implement cryptographic mechanisms to protect the integrity of and verify remote disconnection at the termination of nonlocal maintenance and diagnostic communications, when used for nonlocal maintenance sessions - OpenSSH Version | DISA STIG Apple Mac OSX 10.14 v2r6 | Unix | IDENTIFICATION AND AUTHENTICATION, MAINTENANCE |
| AOSX-14-000040 - The macOS system must use replay-resistant authentication mechanisms and implement cryptographic mechanisms to protect the integrity of and verify remote disconnection at the termination of nonlocal maintenance and diagnostic communications, when used for nonlocal maintenance sessions - SSHD currently running | DISA STIG Apple Mac OSX 10.14 v2r6 | Unix | IDENTIFICATION AND AUTHENTICATION, MAINTENANCE |
| ARBA-NT-001650 - AOS, when used as a WLAN bridge or controller, must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | SYSTEM AND COMMUNICATIONS PROTECTION |
| CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_I.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT I | Unix | |
| CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_II.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II | Unix | |
| CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_III.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT III | Unix | |
| CIS_MariaDB_Enterprise_10.x_STIG_v1.1.0_CAT_I_Unix.audit from CIS MariaDB Enterprise 10.x STIG v1.1.0 | CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT I Unix | Unix | |
| CIS_Microsoft_Exchange_2019_Edge_Server_STIG_v1.0.0_CAT_I.audit from CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 CAT I | Windows | |
| CIS_Microsoft_Exchange_2019_Edge_Server_STIG_v1.0.0_CAT_II.audit from CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 CAT II | Windows | |
| CIS_Microsoft_Exchange_2019_Mailbox_Server_STIG_v1.0.0_CAT_I.audit from CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT I | Windows | |
| CIS_Microsoft_Exchange_2019_Mailbox_Server_STIG_v1.0.0_CAT_II.audit from CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT II | Windows | |
| CIS_Microsoft_Exchange_2019_Mailbox_Server_STIG_v1.0.0_CAT_III.audit from CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 | CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT III | Windows | |
| CIS_Microsoft_SQL_Server_2022_Instance_STIG_v1.0.0_CAT_I_Windows.audit from CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 | CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 CAT I Windows | Windows | |
| CIS_Microsoft_SQL_Server_2022_Instance_STIG_v1.0.0_CAT_II_Windows.audit from CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 | CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 CAT II Windows | Windows | |
| CIS_Red_Hat_EL7_STIG_v2.0.0_L1_Server.audit from CIS Red Hat Enterprise Linux 7 STIG v2.0.0 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | |
| CIS_Red_Hat_EL7_STIG_v2.0.0_L1_Workstation.audit from CIS Red Hat Enterprise Linux 7 STIG v2.0.0 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | |
| CIS_Red_Hat_EL7_STIG_v2.0.0_L2_Server.audit from CIS Red Hat Enterprise Linux 7 STIG v2.0.0 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 Server | Unix | |
| CIS_Red_Hat_Enterprise_Linux_8_STIG_v2.0.0_L1_Workstation.audit from CIS Red Hat Enterprise Linux 8 STIG v2.0.0 | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 Workstation | Unix | |
| CIS_Red_Hat_Enterprise_Linux_8_STIG_v2.0.0_STIG.audit from CIS Red Hat Enterprise Linux 8 STIG v2.0.0 | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG | Unix | |
| CIS_Red_Hat_Enterprise_Linux_9_STIG_v1.0.0_CAT_III.audit from CIS Red Hat Enterprise Linux 9 STIG v1.0.0 | CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT III | Unix | |
| CIS_Red_Hat_Enterprise_Linux_10_STIG_v1.0.0_CAT_I.audit from CIS Red Hat Enterprise Linux 10 STIG v1.0.0 | CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT I | Unix | |
| CIS_Red_Hat_Enterprise_Linux_10_STIG_v1.0.0_CAT_II.audit from CIS Red Hat Enterprise Linux 10 STIG v1.0.0 | CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT II | Unix | |
| CIS_SUSE_Linux_Enterprise_Server_15_STIG_v1.0.0_CAT_I.audit from CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT I | Unix | |
| CIS_SUSE_Linux_Enterprise_Server_15_STIG_v1.0.0_CAT_II.audit from CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II | Unix | |
| CIS_SUSE_Linux_Enterprise_Server_15_STIG_v1.0.0_CAT_III.audit from CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT III | Unix | |
| EDGE-00-000056 - Suggestions of similar web pages in the event of a navigation error must be disabled. | DISA Microsoft Edge STIG v2r5 | Windows | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| ESXI-06-000050 - The system must protect the confidentiality and integrity of transmitted information by protecting IP based management traffic. | DISA VMware vSphere ESXi 6.0 STIG v1r5 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| GEN000240 - The system clock must be synchronized to an authoritative DoD time source - 'NTP daemon uses approved sources' | DISA AIX 5.3 STIG v1r2 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000163 - The audit system must switch the system to single-user mode when available audit storage volume becomes dangerously low. | DISA STIG Oracle Linux 6 v2r7 | Unix | CONFIGURATION MANAGEMENT |
| RHEL-06-000163 - The audit system must switch the system to single-user mode when available audit storage volume becomes dangerously low. | DISA Red Hat Enterprise Linux 6 STIG v2r2 | Unix | AUDIT AND ACCOUNTABILITY |
| SLEM-05-432030 - SLEM 5 must specify the default "include" directory for the /etc/sudoers file. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| SLES-15-020099 - The SUSE operating system must specify the default "include" directory for the /etc/sudoers file. | DISA SUSE Linux Enterprise Server 15 STIG v2r8 | Unix | CONFIGURATION MANAGEMENT |
| SLES-15-020099 - The SUSE operating system must specify the default "include" directory for the /etc/sudoers file. | DISA SUSE Linux Enterprise Server 15 STIG v2r6 | Unix | CONFIGURATION MANAGEMENT |
| VCWN-06-000051 - The system must protect the confidentiality and integrity of transmitted info by isolating IP-based storage traffic. | DISA VMware vSphere vCenter Server Version 6 STIG v1r4 | VMware | CONFIGURATION MANAGEMENT |
| WN10-UR-000070 - The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN11-UR-000070 - The 'Deny access to this computer from the network' user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems. | DISA Microsoft Windows 11 STIG v2r11 | Windows | ACCESS CONTROL |
| WN22-DC-000150 - Windows Server 2022 directory data (outside the root DSE) of a nonpublic directory must be configured to prevent anonymous access. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-PK-000020 - Windows Server 2022 must have the DoW Interoperability Root Certificate Authority (CA) cross-certificates installed in the Untrusted Certificates Store on unclassified systems. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| WN25-DC-000150 - Windows Server 2025 directory data (outside the root DSE) of a nonpublic directory must be configured to prevent anonymous access. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |