Item Search

NameAudit NamePluginCategory
1.2 Do Not Install a Multi-Use System - systemctlCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

CONFIGURATION MANAGEMENT

1.2 Do Not Install a Multi-Use System - systemctlCIS BIND DNS v1.0.0 L1 Caching Only Name ServerUnix

CONFIGURATION MANAGEMENT

1.6.1 Ensure /etc/motd is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.6.1 Ensure /etc/motd is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.36 WN11-00-000170CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

CONFIGURATION MANAGEMENT

1.40 WN16-00-000412CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows

CONFIGURATION MANAGEMENT

1.98 WN16-CC-000050CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIIWindows

CONFIGURATION MANAGEMENT

1.98 WN19-CC-000040CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIIWindows

CONFIGURATION MANAGEMENT

1.121 RHEL-10-400170CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

1.152 ALMA-09-019820CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.160 OL09-00-000845CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.186 RHEL-10-500310CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.221 RHEL-10-500660CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.249 WN10-UR-000085CIS Microsoft Windows 10 STIG v1.0.0 CAT IIWindows

ACCESS CONTROL

1.251 WN11-UR-000085CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

ACCESS CONTROL

1.267 ALMA-09-034010CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

IDENTIFICATION AND AUTHENTICATION

1.382 RHEL-09-653085CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

2.1.2 Ensure 'extproc' Is Not Present in 'listener.ora'CIS Oracle Server 12c Windows v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

2.1.2 Ensure X Window System is not installedCIS Google Container-Optimized OS v1.2.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

5.2.3 Configure /etc/rsyslog.conf - kern /var/log/kern.logCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

AUDIT AND ACCOUNTABILITY

5.2.3 Configure /etc/rsyslog.conf - lpr,news,uucp,local0,local1,local2,local3,local4,local5,local6 /var/log/unused.logCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

AUDIT AND ACCOUNTABILITY

5.2.11 Ensure pam_succeed_if does not exist in /etc/pam.d/sudoCIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.3.9 Collect Login and Logout Events - /var/log/btmpCIS Red Hat Enterprise Linux 5 L2 v2.2.1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

5.3.9 Collect Login and Logout Events - /var/log/tallylogCIS Red Hat Enterprise Linux 5 L2 v2.2.1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.2.3.10 Ensure unsuccessful file access attempts are collectedCIS SUSE Linux Enterprise 16 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.3.11 Ensure unsuccessful file access attempts are collectedCIS Debian Linux 13 v1.1.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.3.11 Ensure unsuccessful file access attempts are collectedCIS Ubuntu Linux 26.04 LTS v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.3.16 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS SUSE Linux Enterprise 16 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.3.18 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS Debian Linux 13 v1.1.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.2.3.18 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS Ubuntu Linux 26.04 LTS v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

6.2.3.19 Ensure discretionary access control permission modification events chown,fchown,lchown,fchownat are collectedCIS Ubuntu Linux 26.04 LTS v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.11 Ensure unsuccessful file access attempts are collectedCIS Red Hat Enterprise Linux 10 v1.0.1 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.18 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS Rocky Linux 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.18 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS Red Hat Enterprise Linux 10 v1.0.1 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.18 Ensure discretionary access control permission modification events chmod,fchmod,fchmodat,fchmodat2 are collectedCIS AlmaLinux OS 10 v1.0.0 L2 WorkstationUnix

AUDIT AND ACCOUNTABILITY

6.3.3.19 Ensure discretionary access control permission modification events chown,fchown,lchown,fchownat are collectedCIS AlmaLinux OS 10 v1.0.0 L2 ServerUnix

AUDIT AND ACCOUNTABILITY

7.2 Disable System AccountsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

8.3.4 Use templates to deploy VMs whenever possibleCIS VMware ESXi 5.1 v1.0.1 Level 1VMware
9.2 Ensure the location attribute in the SSL configurations points to a valid SAF Keyring containing SSL/TLS certificatesCIS IBM WebSphere Liberty v1.0.0 L1Unix

ACCESS CONTROL

APPL-26-005020 - The macOS system must enforce FileVault.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

DG0129-ORACLE11 - Passwords should be encrypted when transmitted across the network.DISA STIG Oracle 11 Installation v9r1 LinuxUnix

IDENTIFICATION AND AUTHENTICATION

DG0129-ORACLE11 - Passwords should be encrypted when transmitted across the network.DISA STIG Oracle 11 Installation v9r1 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

GEN007980 - If the system is using LDAP for authentication or account information, the system must use a TLS connection using FIPS 140-2 approved cryptographic algorithms - configuredDISA STIG Solaris 10 SPARC v2r4Unix

ACCESS CONTROL

RHEL-08-030560 - Successful/unsuccessful uses of the usermod command in RHEL 8 must generate an audit record.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030150 - The SUSE operating system must generate audit records for all uses of the creat, open, openat, open_by_handle_at, truncate, and ftruncate system calls.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030530 - The SUSE operating system must generate audit records for all uses of the init_module and finit_module system calls.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

VCST-67-000027 - Rsyslog must be configured to monitor and ship Security Token Service log files - vmidentityDISA STIG VMware vSphere 6.7 STS Tomcat v1r3Unix

AUDIT AND ACCOUNTABILITY

WN22-00-000400 - Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000030 - Windows Server 2022 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing.DISA Microsoft Windows Server 2022 STIG v2r11Windows

CONFIGURATION MANAGEMENT

WN25-00-000400 - Windows Server 2025 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2025 STIG v1r4Windows

CONFIGURATION MANAGEMENT