Item Search

NameAudit NamePluginCategory
1.2.18 Ensure that the --audit-log-path argument is setCIS Red Hat OpenShift Container Platform v1.9.0 L1OpenShift

AUDIT AND ACCOUNTABILITY

1.6.2 Configure ExecShield - kernel.exec-shield = 1CIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

1.6.4 Enable XD/NX Support on 32-bit x86 Systems - cpuinfoCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

1.6.4 Enable XD/NX Support on 32-bit x86 Systems - kernel-PAECIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

1.44 WN19-00-000440CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIIWindows

AUDIT AND ACCOUNTABILITY

1.44 WN19-00-000440CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIIWindows

AUDIT AND ACCOUNTABILITY

4.2 Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin RoleCIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

ACCESS CONTROL

4.2 Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin RoleCIS Microsoft SQL Server 2022 v1.3.0 L1 Database Engine MS_SQLDBMS_SQLDB

ACCESS CONTROL

4.4.2 Disable IPv6 - options ipv6 disable=1CIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

4.6.2 Disable SCTPCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

4.6.4 Disable TIPCCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS SQL Server 2014 Database L1 AWS RDS v1.5.0MS_SQLDB

AUDIT AND ACCOUNTABILITY

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS SQL Server 2014 Database L1 DB v1.5.0MS_SQLDB

AUDIT AND ACCOUNTABILITY

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS SQL Server 2017 Database L1 DB v1.3.0MS_SQLDB

AUDIT AND ACCOUNTABILITY

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS Microsoft SQL Server 2025 v1.0.0 L1 AWS RDS MS_SQLDBMS_SQLDB

AUDIT AND ACCOUNTABILITY

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS Microsoft SQL Server 2025 v1.0.0 L1 Database Engine MS_SQLDBMS_SQLDB

AUDIT AND ACCOUNTABILITY

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS Microsoft SQL Server 2019 v1.6.0 L1 Database Engine MS_SQLDBMS_SQLDB

AUDIT AND ACCOUNTABILITY

9.1.4 Ensure 'Windows Firewall: Domain: Logging: Name' is configuredCIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

AUDIT AND ACCOUNTABILITY

9.2.3 Verify No Legacy '+' Entries Exist in /etc/shadow File - + Entries Exist in /etc/shadow FileCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

9.2.4 Ensure 'Windows Firewall: Private: Logging: Name' is configuredCIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

SYSTEM AND COMMUNICATIONS PROTECTION

9.2.4 Ensure 'Windows Firewall: Private: Logging: Name' is configuredCIS Microsoft Windows 10 Enterprise v5.0.0 L1Windows

AUDIT AND ACCOUNTABILITY

9.2.4 Ensure 'Windows Firewall: Private: Logging: Name' is configuredCIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

AUDIT AND ACCOUNTABILITY

9.2.4 Ensure 'Windows Firewall: Private: Logging: Name' is configuredCIS Microsoft Windows Server 2019 Stand-alone v4.0.0 L1 MSWindows

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.2.4 Ensure 'Windows Firewall: Private: Logging: Name' is configuredCIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.3.4 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

SYSTEM AND COMMUNICATIONS PROTECTION

9.3.4 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows 11 Stand-alone v5.0.0 L1Windows

AUDIT AND ACCOUNTABILITY

9.3.4 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows 10 Stand-alone v5.0.0 L1 NGWindows

AUDIT AND ACCOUNTABILITY

9.3.6 (L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows Server 2019 v5.0.0 L1 DCWindows

SYSTEM AND COMMUNICATIONS PROTECTION

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows Server 2022 v5.1.0 L1 DCWindows

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

AUDIT AND ACCOUNTABILITY

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

AUDIT AND ACCOUNTABILITY

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows Server 2025 v2.1.0 L1 DCWindows

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.3.6 Ensure 'Windows Firewall: Public: Logging: Name' is configuredCIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

AUDIT AND ACCOUNTABILITY

9.3.8 (L1) Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

AUDIT AND ACCOUNTABILITY

18.9.25.2 (L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.24.2 (L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)CIS Windows Server 2012 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.24.2 (L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

Audit LogonMSCT Windows 11 v24H2 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit LogonMSCT Windows Server v2004 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit LogonMSCT Windows Server v2004 MS v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit logon eventsMSCT Windows Server 2016 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

DO3630-ORACLE11 - The Oracle Listener should be configured to require administration authentication - 'LSNRCTL Security'DISA STIG Oracle 11 Installation v9r1 WindowsWindows
DO3630-ORACLE11 - The Oracle Listener should be configured to require administration authentication - 'LSNRCTL Security'DISA STIG Oracle 11 Installation v9r1 LinuxUnix
O112-BP-022700 - The Oracle Listener must be configured to require administration authentication.DISA STIG Oracle 11.2g v2r5 WindowsWindows

CONFIGURATION MANAGEMENT

PHTN-67-000999 - The version of the Photon OS running on the server must be a supported version.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

Turn off encryption supportMSCT Windows Server 2016 MS v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

Turn off encryption supportMSCT MSCT Windows Server 2022 DC v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-18-010387 - The Ubuntu operating system must generate records for successful/unsuccessful uses of init_module or finit_module syscalls.DISA STIG Ubuntu 18.04 LTS v2r15Unix

AUDIT AND ACCOUNTABILITY

VCPG-67-000022 - Rsyslog must be configured to monitor VMware Postgres logs - logDISA STIG VMware vSphere 6.7 PostgreSQL v1r2Unix

AUDIT AND ACCOUNTABILITY