Item Search

NameAudit NamePluginCategory
1.4.4 (L2) Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'CIS Microsoft Intune for Edge v1.0.0 L2Windows

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.8.9 Ensure GNOME Screensaver period of inactivity is configuredCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

ACCESS CONTROL

2.3.31.2 Ensure 'Suppress external signature services menu item' is set to 'Enabled'CIS Microsoft Office Enterprise v1.2.0 L1Windows

CONFIGURATION MANAGEMENT

5.1.20 Set 'Restrict ActiveX Install: outlook.exe' to 'Enabled:True'CIS MS Office Outlook 2010 v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.3.1 Ensure that Azure Admin Accounts Are Not Used for Daily OperationsCIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

ACCESS CONTROL

8.1.2 Configure a Server-side Stash File for TLS (SSL_SVR_STASH)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

8.1.12 Ensure That 'All users with the following roles' is Set to 'Owner'CIS Microsoft Azure Foundations v6.0.0 L1microsoft_azure

INCIDENT RESPONSE

17.2.1 (L1) Ensure 'Audit Application Group Management' is set to 'Success and Failure'CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1Windows

AUDIT AND ACCOUNTABILITY

18.3.5 (L1) Ensure 'WDigest Authentication' is set to 'Disabled'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

18.3.9 (L1) Ensure 'WDigest Authentication' is set to 'Disabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

18.4.7 (L1) Ensure 'WDigest Authentication' is set to 'Disabled'CIS Windows Server 2012 DC L1 v3.0.0Windows

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

18.8.47.5.1 (L2) Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SECURITY ASSESSMENT AND AUTHORIZATION

18.9.3.1 Ensure 'Include command line in process creation events' is set to 'Enabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

18.9.3.1 Ensure 'Include command line in process creation events' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY

18.9.3.1 Ensure 'Include command line in process creation events' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

18.9.3.1 Ensure 'Include command line in process creation events' is set to 'Enabled'CIS Microsoft Windows Server 2019 Stand-alone v4.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

18.9.3.1 Ensure 'Include command line in process creation events' is set to 'Enabled'CIS Microsoft Windows Server 2019 v5.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

18.9.69.1 Ensure 'Turn off Automatic Download and Install of updates' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L1Windows

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

18.10.35.1 Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

18.10.35.1 Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1Windows

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

18.10.35.1 Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

33.3 Ensure 'Do not show feedback notifications' is set to 'Feedback notifications are disabled'CIS Microsoft Intune for Windows 10 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

33.5 Ensure 'Do not show feedback notifications' is set to 'Feedback notifications are disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

Allow Basic authentication for HTTPMSCT Edge v98 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Allow users to proceed from the HTTPS warning pageMSCT edge v96 v1.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

CIS_VMware_vSphere_8.0_vCenter_Appliance_Management_Interface_VAMI_STIG_v1.0.0_CAT_II.audit from CIS VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v1.0.0CIS VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v1.0.0 CAT IIUnix
CIS_VMware_vSphere_8.0_vCenter_Appliance_Photon_OS_4.0_STIG_v1.0.0_CAT_II.audit from CIS VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v1.0.0CIS VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v1.0.0 CAT IIUnix
CIS_VMware_vSphere_8.0_vCenter_Appliance_User_Interface_UI_STIG_v1.0.0_CAT_II.audit from CIS VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v1.0.0CIS VMware vSphere 8.0 vCenter Appliance User Interface UI STIG v1.0.0 CAT IIUnix
Configure Edge TyposquattingCheckerMSCT Edge v98 v1.0.0Windows

CONFIGURATION MANAGEMENT

Configure Edge TyposquattingCheckerMSCT edge v96 v1.0.0Windows

CONFIGURATION MANAGEMENT

Default Adobe Flash settingMSCT Microsoft Edge Version 80 v1.0.0Windows

CONFIGURATION MANAGEMENT

EDGE-00-000066 - Copilot must be disabled.DISA STIG Edge v2r3Windows

CONFIGURATION MANAGEMENT

Enable 3DES cipher suites in TLSMSCT Edge v98 v1.0.0Windows

CONFIGURATION MANAGEMENT

Enable site isolation for every siteMSCT Edge v98 v1.0.0Windows

CONFIGURATION MANAGEMENT

Enable site isolation for every siteMSCT Microsoft Edge Version 81 v1.0.0Windows

CONFIGURATION MANAGEMENT

Enable site isolation for every siteMSCT edge v96 v1.0.0Windows

CONFIGURATION MANAGEMENT

Enable site isolation for every siteMSCT Edge v84 v1.0.0Windows

CONFIGURATION MANAGEMENT

EPAS-00-008100 - The EDB Postgres Advanced Server must provide an immediate real-time alert to appropriate support staff of all audit log failures.EnterpriseDB PostgreSQL Advanced Server DB v2r1PostgreSQLDB

AUDIT AND ACCOUNTABILITY

MS.AAD.5.2v1 - Only administrators SHALL be allowed to consent to applications.CISA SCuBA Microsoft 365 Entra ID v1.5.0microsoft_azure

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

MS.AAD.6.1v1 - User passwords SHALL NOT expire.CISA SCuBA Microsoft 365 Entra ID v1.5.0microsoft_azure

CONFIGURATION MANAGEMENT

MS.TEAMS.3.1v1 - Contact with Skype users SHALL be blocked.CISA SCuBA Microsoft 365 Teams v1.5.0microsoft_azure

ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND SERVICES ACQUISITION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

PPS9-00-008100 - The EDB Postgres Advanced Server must provide an immediate real-time alert to appropriate support staff of all audit log failures.EDB PostgreSQL Advanced Server DB Audit v2r3PostgreSQLDB

AUDIT AND ACCOUNTABILITY

Show the Reload in Internet Explorer mode button in the toolbarMSCT Edge v98 v1.0.0Windows

CONFIGURATION MANAGEMENT

Specifies whether the display-capture permissions-policy is checked or skippedMSCT Edge v98 v1.0.0Windows

CONFIGURATION MANAGEMENT

Specifies whether to allow insecure websites to make requests to more-private network endpointsMSCT edge v96 v1.0.0Windows

CONFIGURATION MANAGEMENT

Supported authentication schemesMSCT Edge v98 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Supported authentication schemesMSCT edge v96 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Supported authentication schemesMSCT Microsoft Edge Version 81 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Supported authentication schemesMSCT Microsoft Edge Version 83 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Supported authentication schemesMSCT Edge v84 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION