| 1.1 Use the Latest OS Release - Check if Solaris 10 10/09 release is installed | CIS Solaris 10 L1 v5.2 | Unix | CONFIGURATION MANAGEMENT |
| 1.4 VCSA-80-000034 | CIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT II | VMware | AUDIT AND ACCOUNTABILITY |
| 1.20 ALMA-09-004320 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT I | Unix | ACCESS CONTROL, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.106 SLES-15-030030 | CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT II | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 3.1 Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode' | CIS Microsoft SQL Server 2025 v1.0.0 L1 Database Engine MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
| 3.1 Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode' | CIS Microsoft SQL Server 2019 v1.6.0 L1 Database Engine MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
| 3.1 Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode' | CIS SQL Server 2008 R2 DB Engine L1 v1.7.0 | MS_SQLDB | IDENTIFICATION AND AUTHENTICATION |
| 3.1.21 Ensure 'log_disconnections' is enabled | CIS PostgreSQL 18 v1.0.0 L1 Database PostgreSQLDB | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| 3.1.21 Ensure 'log_disconnections' is enabled | CIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDB | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| 4.1.1.1 Ensure journald is configured to write logfiles to persistent disk | CIS Bottlerocket L1 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.3 Ensure 'Login Auditing' is set to 'failed logins' | CIS SQL Server 2016 Database L1 AWS RDS v1.4.0 | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| 5.3 Ensure 'Login Auditing' is set to 'failed logins' | CIS SQL Server 2016 Database L1 DB v1.4.0 | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| 5.10 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BL | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 10 Enterprise v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BL | Windows | CONFIGURATION MANAGEMENT |
| 6.2.3.22 Ensure unlink file deletion events by users are collected | CIS SUSE Linux Enterprise 16 v1.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.3.24 Ensure unlink file deletion events by users are collected | CIS Ubuntu Linux 26.04 LTS v1.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.24 Ensure unlink file deletion events by users are collected | CIS Oracle Linux 10 v1.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| ALMA-09-004320 - AlmaLinux OS 9 must use the TuxCare FIPS packages and not the default encryption packages. | DISA Cloud Linux AlmaLinux OS 9 STIG v1r7 | Unix | ACCESS CONTROL, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| AOSX-15-001001 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions. | DISA STIG Apple Mac OSX 10.15 v1r10 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-11-001001 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions. | DISA STIG Apple macOS 11 v1r5 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-11-001001 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all non-local maintenance and diagnostic sessions. | DISA STIG Apple macOS 11 v1r8 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| Audit Account Lockout: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit File Share: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Group Membership: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Process Creation: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Removable Storage: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit Special Logon: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| Audit System Integrity: MSFT Windows Server 2025 v2602 - Domain Controller | MSCT Windows Server 2025 DC v2602 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
| CIS_DC_SERVER_2012_R2_Level_2_v3.0.0.audit from CIS Microsoft Windows Server 2012 R2 Benchmark | CIS Windows Server 2012 R2 DC L2 v3.0.0 | Windows | |
| CIS_MS_SERVER_2012_R2_Level_1_v3.0.0.audit from CIS Microsoft Windows Server 2012 R2 Benchmark | CIS Windows Server 2012 R2 MS L1 v3.0.0 | Windows | |
| CIS_MS_SERVER_2012_R2_Level_2_v3.0.0.audit from CIS Microsoft Windows Server 2012 R2 Benchmark | CIS Windows Server 2012 R2 MS L2 v3.0.0 | Windows | |
| CIS_MS_Windows_Server_2008_R2_DC_Level_1_v3.3.1.audit from CIS MS Windows Server 2008 R2 Benchmark v3.3.1 | CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1 | Windows | |
| DISA_STIG_Microsoft_Windows_Server_2016_v2r10.audit from DISA Microsoft Windows Server 2016 STIG v2r10 | DISA Microsoft Windows Server 2016 STIG v2r10 | Windows | |
| DISA_STIG_Microsoft_Windows_Server_2019_v3r9.audit from DISA Microsoft Windows Server 2019 STIG v3r9 | DISA Microsoft Windows Server 2019 STIG v3r9 | Windows | |
| DISA_STIG_Microsoft_Windows_Server_2022_v2r11.audit from DISA Microsoft Windows Server 2022 STIG v2r11 | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | |
| DISA_STIG_Microsoft_Windows_Server_2025_v1r4.audit from DISA Microsoft Windows Server 2025 STIG v1r4 | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | |
| DO3538-ORACLE11 - The Oracle REMOTE_OS_AUTHENT parameter should be set to FALSE - 'remote_os_authent = false' | DISA STIG Oracle 11 Instance v9r1 Database | OracleDB | |
| MSCT_Windows_Server_2012_R2_DC_v1.0.0.audit from MSCT Windows Server 2012 R2 Security Baseline | MSCT Windows Server 2012 R2 DC v1.0.0 | Windows | |
| MSCT_Windows_Server_2025_MS_v2602_v1.0.0.audit from MSCT Windows Server 2025 Security Baseline - v2602 | MSCT Windows Server 2025 MS v2602 v1.0.0 | Windows | |
| Network access: Remotely accessible registry paths and subpaths | MSCT Windows Server 2012 R2 DC v1.0.0 | Windows | ACCESS CONTROL |
| Prohibit use of Internet Connection Sharing on your DNS domain network | MSCT Windows 11 v24H2 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Prohibit use of Internet Connection Sharing on your DNS domain network | MSCT Windows 11 v23H2 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Prohibit use of Internet Connection Sharing on your DNS domain network | MSCT Windows 10 1803 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| SQLI-22-004300 - SQL Server must be configured to generate audit records for DOD-defined auditable events within all DBMS/database components. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| VCENTER-000008 - The vCenter Server must be installed using a service account instead of a built-in Windows account. | DISA STIG VMWare ESXi vCenter 5 STIG v2r1 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-06-000022 - The vCenter Server services must be ran using a service account instead of a built-in Windows account. | DISA VMware vSphere vCenter Server Version 6 STIG v1r4 | VMware | CONFIGURATION MANAGEMENT |
| VCWN-65-000022 - The vCenter Server for Windows services must be ran using a service account instead of a built-in Windows account. | DISA VMware vSphere 6.5 vCenter Server for Windows STIG v2r3 | VMware | CONFIGURATION MANAGEMENT |
| WN25-DC-000170 - Windows Server 2025 Active Directory Group Policy Objects (GPOs) must be configured with proper audit settings. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
