Item Search

NameAudit NamePluginCategory
CIS_Aliyun_Linux_2_L1_v1.0.0.audit from CIS Aliyun Linux 2 Benchmark v1.0.0CIS Aliyun Linux 2 L1 v1.0.0Unix
CIS_Apache_Tomcat_11_v1.0.0_L1.audit from CIS Apache Tomcat 11 Benchmark v1.0.0CIS Apache Tomcat 11 v1.0.0 L1Unix
CIS_IBM_WebSphere_Liberty_v1.0.0_L1.audit from CIS IBM WebSphere Liberty Benchmark v1.0.0CIS IBM WebSphere Liberty v1.0.0 L1Unix
CIS_Microsoft_Exchange_Server_2019_v1.0.0_Level_1_Edge.audit from CIS Microsoft Exchange Server 2019 Benchmark v1.0.0CIS Microsoft Exchange Server 2019 L1 Edge v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

CIS_Microsoft_Exchange_Server_2019_v1.0.0_Level_2_Mailbox.audit from CIS Microsoft Exchange Server 2019 Benchmark v1.0.0CIS Microsoft Exchange Server 2019 L2 Mailbox v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

CIS_Microsoft_Windows_10_STIG_v1.0.0_CAT_III.audit from CIS Microsoft Windows 10 STIG Benchmark v1.0.0CIS Microsoft Windows 10 STIG v1.0.0 CAT IIIWindows
CIS_MongoDB_3.2_Benchmark_Level_2_OS_Unix_v1.0.0.audit from CIS MongoDB 3.2 Benchmark v1.0.0CIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix
CIS_Mozilla_Firefox_38_ESR_v1.0.0_Linux_Level1.audit for CIS Mozilla Firefox 38 ESR v1.0.0CIS Mozilla Firefox 38 ESR Linux L1 v1.0.0Unix
CIS_Mozilla_Firefox_102_ESR_v1.0.0_Linux_Level1.audit for CIS Mozilla Firefox 102 ESR v1.0.0CIS Mozilla Firefox 102 ESR Linux L1 v1.0.0Unix
CIS_Mozilla_Firefox_102_ESR_v1.0.0_Windows_Level1.audit for CIS Mozilla Firefox 102 ESR v1.0.0CIS Mozilla Firefox 102 ESR Windows L1 v1.0.0Windows
CIS_Mozilla_Firefox_102_ESR_v1.0.0_Windows_Level2.audit for CIS Mozilla Firefox 102 ESR v1.0.0CIS Mozilla Firefox 102 ESR Windows L2 v1.0.0Windows
CIS_Oracle_Linux_8_STIG_v1.0.0_CAT_I.audit from CIS Oracle Linux 8 STIG v1.0.0CIS Oracle Linux 8 STIG v1.0.0 CAT IUnix
CIS_VMware_ESXi_6.5_v1.0.0_L1_Bare_Metal.audit from CIS VMware ESXi 6.5 v1.0.0 benchmarkCIS VMware ESXi 6.5 v1.0.0 Level 2 Bare MetalUnix
WA000-WI100 IIS6 - The File System Object component, if not required, must be disabled. - '{0D43FE01-F093-11CF-8940-00A0C9054228} Check'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WA000-WI110 IIS6 - The command shell options must be disabled.DISA STIG IIS 6.0 Server v6r16Windows

ACCESS CONTROL

WA000-WI6080 IIS6 - The AllowRestrictedChars registry key must be disabled.DISA STIG IIS 6.0 Server v6r16Windows

SYSTEM AND INFORMATION INTEGRITY

WA000-WI6092 IIS6 - The PercentUAllowed registry entry must be set properly.DISA STIG IIS 6.0 Server v6r16Windows

SYSTEM AND INFORMATION INTEGRITY

WA000-WI6094 IIS6 - The UriMaxUriBytes registry entry must be set properly.DISA STIG IIS 6.0 Server v6r16Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WA000-WI6096 IIS6 - The UrlSegmentMaxCount registry entry must be set properly.DISA STIG IIS 6.0 Server v6r16Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WA060 IIS6 - A public web server, if hosted on the NIPRNet, must be isolated in an accredited DoD DMZ Extension.DISA STIG IIS 6.0 Server v6r16Windows
WA070 IIS6 - A private web server must be located on a separate controlled access subnet.DISA STIG IIS 6.0 Server v6r16Windows
WA120 IIS6 - Administrative users and groups with access privilege to the web server must be documented.DISA STIG IIS 6.0 Server v6r16Windows
WA155 IIS6 - Classified web servers must be afforded physical security commensurate with the classification of its content.DISA STIG IIS 6.0 Server v6r16Windows
WA230 IIS6 - The site software used with the web server must have all applicable security patches applied and documented.DISA STIG IIS 6.0 Server v6r16Windows
WG050 IIS6 - The web server service password(s) must be entrusted to the SA or Web Manager.DISA STIG IIS 6.0 Server v6r16Windows
WG060 IIS6 - The service account ID used to run the web service must have its password changed at least annually.DISA STIG IIS 6.0 Server v6r16Windows

ACCESS CONTROL

WG080 IIS6 - A compiler must not be installed on a production web server. - 'Lcc-win32.exe search'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG080 IIS6 - A compiler must not be installed on a production web server. - 'msc.exe search'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG080 IIS6 - A compiler must not be installed on a production web server. - 'msvc.exe search'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG130 IIS6 - Programs and features not necessary for operations must be removed.DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG190 IIS6 - The web server must use a vendor-supported version of the web server software.DISA STIG IIS 6.0 Server v6r16Windows

SYSTEM AND INFORMATION INTEGRITY

WG204 IIS6 - A web server must not be co-hosted with other servicesDISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG220 IIS6 - Access to web administration tools must be restricted to the Web Manager and the Web Manager's designees.DISA STIG IIS 6.0 Server v6r16Windows
WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub\ftproot'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub\ftproot\ftpfiles'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub\mailroot'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub\wwwroot'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\inetpub\wwwroot\images'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\*.exe'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\data'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\iisadmin'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\iisadmpwd'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\MBSchema.bin.00000000hDISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\MetaBack'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\metabase.binDISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG300 IIS6 - Web server system files must conform to minimum file permission requirements. - '\system32\inetsrv\oblt-undone.lobDISA STIG IIS 6.0 Server v6r16Windows

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

WG385 IIS6 - All web server documentation, sample code, example applications, and tutorials must be removed. - 'Inetpub\AdminScripts'DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

WG520 IIS6 - Web server and/or operating system information must be protected.DISA STIG IIS 6.0 Server v6r16Windows

CONFIGURATION MANAGEMENT

Word 6.0 binary documents and templatesMSCT M365 Apps for enterprise 2312 v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY