Item Search

NameAudit NamePluginCategory
APPL-14-000002 - The macOS system must enforce screen saver password.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000007 - The macOS system must disable hot corners.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000025 - The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at the login window.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000053 - The macOS system must set Login Grace Time to 30.DISA Apple macOS 14 Sonoma STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-14-000060 - The macOS system must set account lockout time to 15 minutes.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000070 - The macOS system must enforce screen saver timeout.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000120 - The macOS system must configure SSHD Channel Timeout to 900.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-14-000160 - The macOS system must enforce auto logout after 86400 seconds of inactivity.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-000170 - The macOS system must be configured to use an authorized time server.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001003 - The macOS system must enable security auditing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, MAINTENANCE

APPL-14-001010 - The macOS system must configure system to shut down upon audit failure.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001012 - The macOS system must configure audit log files to be owned by root.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001015 - The macOS system must configure audit log folders group to wheel.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001016 - The macOS system must configure audit log files to mode 440 or less permissive.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001031 - The macOS system must configure audit failure notification.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001100 - The macOS system must disable root logon for SSH.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

APPL-14-001110 - The macOS system must configure audit_control group to wheel.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001120 - The macOS system must configure audit_control owner to root.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001140 - The macOS system must configure audit_control to not contain access control lists.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-002001 - The macOS system must disable Server Message Block sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002003 - The macOS system must disable Network File System service.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002008 - The macOS system must disable the built-in web server.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002020 - The macOS system must disable Siri.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002037 - The macOS system must disable iCloud Storage Setup during Setup Assistant.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002100 - The macOS system must disable Media Sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL

APPL-14-002110 - The macOS system must disable Bluetooth sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-14-002190 - The macOS system must disable password autofill.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002200 - The macOS system must disable personalized advertising.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-002240 - The macOS system must disable Printer Sharing.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-003012 - The macOS system must disable password hints.DISA Apple macOS 14 Sonoma STIG v2r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-14-004040 - The macOS system must configure system log files to mode 640 or less permissive.DISA Apple macOS 14 Sonoma STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-14-004050 - The macOS system must configure install.log retention to 365.DISA Apple macOS 14 Sonoma STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

APPL-14-005001 - The macOS system must ensure System Integrity Protection is enabled.DISA Apple macOS 14 Sonoma STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

APPL-14-005050 - The macOS system must enable the application firewall.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-14-005130 - The macOS system must enforce installation of XProtect Remediator and Gatekeeper updates automatically.DISA Apple macOS 14 Sonoma STIG v2r4Unix

CONFIGURATION MANAGEMENT

APPL-15-000012 - The macOS system must automatically remove or disable temporary or emergency user accounts within 72 hours.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000060 - The macOS system must set account lockout time to 15 minutes.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000120 - The macOS system must configure SSHD channel timeout to 900.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-000160 - The macOS system must enforce auto logout after 86400 seconds of inactivity.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

Big Sur - Disable FileVault Automatic LoginNIST macOS Big Sur v1.4.0 - CNSSI 1253Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

Catalina - Enable GatekeeperNIST macOS Catalina v1.5.0 - 800-171Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Catalina - Enable GatekeeperNIST macOS Catalina v1.5.0 - 800-53r4 ModerateUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Monterey - Disable FileVault Automatic LoginNIST macOS Monterey v1.0.0 - 800-53r4 HighUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

Monterey - Disable FileVault Automatic LoginNIST macOS Monterey v1.0.0 - 800-53r4 LowUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

Monterey - Disable FileVault Automatic LoginNIST macOS Monterey v1.0.0 - All ProfilesUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

Monterey - Enable GatekeeperNIST macOS Monterey v1.0.0 - 800-53r5 HighUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Monterey - Enable GatekeeperNIST macOS Monterey v1.0.0 - 800-53r5 LowUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Monterey - Enable GatekeeperNIST macOS Monterey v1.0.0 - 800-53r5 ModerateUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Monterey - Enable GatekeeperNIST macOS Monterey v1.0.0 - CNSSI 1253Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY