| 1.185 WN10-PK-000020 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.9 Set DCUI.Access to allow trusted users to override lockdown mode | CIS VMware ESXi 5.5 v1.2.0 Level 1 | VMware | ACCESS CONTROL |
| 18.5.21.1 (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 1 = Minimize simultaneous connections' | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | ACCESS CONTROL |
| APPL-26-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-000014 - The macOS system must enforce time synchronization. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-000051 - The macOS system must configure SSHD ClientAliveInterval to 900. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000054 - The macOS system must limit SSHD to FIPS-compliant connections. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000060 - The macOS system must set account lockout time to 15 minutes. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-000160 - The macOS system must enforce auto logout after 86400 seconds of inactivity. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-001014 - The macOS system must configure the audit log files group to wheel. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001140 - The macOS system must configure audit_control to not contain access control lists (ACLs). | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-002006 - The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002012 - The macOS system must disable the iCloud Calendar services. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002015 - The macOS system must disable iCloud Mail. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002035 - The macOS system must disable Apple ID setup during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002043 - The macOS system must disable iCloud Photo Library. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002060 - The macOS system must apply gatekeeper settings to block applications from unidentified developers. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002063 - The macOS system must disable the guest account. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002064 - The macOS system must enable gatekeeper. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002066 - The macOS system must disable unattended or automatic login to the system. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| APPL-26-002160 - The macOS system must disable iCloud Game Center. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002180 - The macOS system must disable Find My service. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002210 - The macOS system must disable sending Siri and Dictation information to Apple. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-003012 - The macOS system must disable password hints. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003060 - The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-004022 - The macOS system must require users to reauthenticate for privilege escalation when using the "sudo" command. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-005056 - The macOS system must disable Unlock with Apple Watch during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-005061 - The macOS system must disable Erase Content and Settings. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-005100 - The macOS system must ensure Secure Boot level is set to "full". | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-26-006000 - The macOS system must be a version supported by the vendor. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND SERVICES ACQUISITION |
| APPL-26-999999 - The macOS system must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| SQL6-D0-014200 - SQL Server must generate audit records when successful and unsuccessful attempts to delete privileges/permissions occur. | DISA MS SQL Server 2016 Instance STIG v3r6 MS_SQLDB | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| SYMP-AG-000380 - Symantec ProxySG providing user authentication intermediary services must implement replay-resistant authentication mechanisms for network access to nonprivileged accounts. | DISA Symantec ProxySG Benchmark ALG v1r3 | BlueCoat | IDENTIFICATION AND AUTHENTICATION |
| TCAT-AS-001592 - Changes to $CATALINA_HOME/lib/ folder must be logged. | DISA STIG Apache Tomcat Application Server 9 v3r4 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| VCTR-67-000025 - The vCenter Server must disable the managed object browser (MOB) at all times when not required for troubleshooting or maintenance of managed objects. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000026 - The vCenter Server must check the privilege reassignment after restarts. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000033 - The vCenter Server must use a least-privileges assignment for the vCenter Server database user. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000045 - The vCenter Server must limit the maximum number of failed login attempts to three. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | ACCESS CONTROL |
| VCTR-67-000046 - The vCenter Server must set the interval for counting failed login attempts to at least 15 minutes. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | ACCESS CONTROL |
| VCTR-67-000055 - The vCenter Server must configure the vSAN Datastore name to a unique name. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000059 - The vCenter Server must enable certificate based authentication. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000061 - The vCenter Server must disable Password and Windows integrated authentication. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000065 - The vCenter Server must have Mutual CHAP configured for vSAN iSCSI targets. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCTR-67-000077 - The vCenter Server must enable TLS 1.2 exclusively. | DISA STIG VMware vSphere 6.7 vCenter v1r4 | VMware | CONFIGURATION MANAGEMENT |
| WBLC-01-000014 - Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements. | Oracle WebLogic Server 12c Linux v2r2 | Unix | CONFIGURATION MANAGEMENT |
| WBLC-01-000014 - Oracle WebLogic must support the capability to disable network protocols deemed by the organization to be non-secure except for explicitly identified components in support of specific operational requirements. | Oracle WebLogic Server 12c Windows v2r2 | Windows | CONFIGURATION MANAGEMENT |
| WBLC-05-000169 - Oracle WebLogic must utilize encryption when using LDAP for authentication. | Oracle WebLogic Server 12c Linux v2r2 Middleware | Unix | IDENTIFICATION AND AUTHENTICATION |
| WBLC-08-000237 - Oracle WebLogic must limit the use of resources by priority and not impede the host from servicing processes designated as a higher-priority. | Oracle WebLogic Server 12c Linux v2r2 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN12-SO-000036 - Automatic logons must be disabled. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r7 | Windows | CONFIGURATION MANAGEMENT |
| WN12-SO-000036 - Automatic logons must be disabled. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r7 | Windows | CONFIGURATION MANAGEMENT |
