Item Search

NameAudit NamePluginCategory
1.2.6 - MobileIron - Delete Saved Password InformationMobileIron - CIS Apple iOS 9 v1.0.0 L2MDM

ACCESS CONTROL

1.2.7 - MobileIron - Delete Saved Credit Card InformationMobileIron - CIS Apple iOS 9 v1.0.0 L2MDM

ACCESS CONTROL

1.90 APPL-26-002060CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT IUnix

CONFIGURATION MANAGEMENT

APPL-11-000005 - The macOS system must be configured to lock the user session when a smart token is removed.DISA STIG Apple macOS 11 v1r5Unix

ACCESS CONTROL

APPL-11-000007 - The macOS system must be configured to disable hot corners - bottom rightDISA STIG Apple macOS 11 v1r5Unix

ACCESS CONTROL

APPL-11-000015 - The macOS system must utilize an Endpoint Security Solution (ESS) and implement all DoD required modules.DISA STIG Apple macOS 11 v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-11-000016 - The macOS system must be integrated into a directory services infrastructure.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-000022 - The macOS system must enforce the limit of three consecutive invalid logon attempts by a user before the user account is locked - maxFailedAttemptsDISA STIG Apple macOS 11 v1r5Unix

ACCESS CONTROL

APPL-11-000030 - The macOS system must be configured so that log files must not contain access control lists (ACLs).DISA STIG Apple macOS 11 v1r5Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

APPL-11-000051 - The macOS system must be configured with the SSH daemon ClientAliveInterval option set to 900 or less.DISA STIG Apple macOS 11 v1r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-000053 - The macOS system must be configured with the SSH daemon LoginGraceTime set to 30 or less.DISA STIG Apple macOS 11 v1r5Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-001020 - The macOS system must audit the enforcement actions used to restrict access associated with changes to the system - frDISA STIG Apple macOS 11 v1r5Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

APPL-11-001060 - The macOS system must accept and verify Personal Identity Verification (PIV) credentials, implement a local cache of revocation data to support path discovery and validation in case of the inability to access revocation information via the network, and only allow the use of DoD PKI-established certificate authorities to verify the establishment of protected sessions.DISA STIG Apple macOS 11 v1r5Unix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-11-002009 - The macOS system must be configured to disable AirDrop.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002020 - The macOS system must be configured to disable Siri and dictation - Assistant AllowedDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002020 - The macOS system must be configured to disable Siri and dictation - Ironwood AllowedDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002032 - The macOS system must be configured to disable the system preference pane for Internet Accounts - HiddenPreferencePanesDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002036 - The macOS system must be configured to disable the Privacy Setup services.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002040 - The macOS system must disable iCloud Keychain synchronization.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002041 - The macOS system must disable iCloud document synchronization.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002051 - The macOS system must be configured to disable the system preference pane for TouchID - DisabledPreferencePanesDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002052 - The macOS system must be configured to disable the system preference pane for Wallet & ApplePay - HiddenPreferencePanesDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002063 - The macOS system must enforce access restrictions.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002064 - The macOS system must have the security assessment policy subsystem enabled.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002066 - The macOS system must not allow an unattended or automatic logon to the system.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002067 - The macOS system must prohibit user installation of software without explicit privileged status.DISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - User directory permissionsDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002068 - The macOS system must set permissions on user home directories to prevent users from having access to read or modify another user's files - User subdirectory Public permissionsDISA STIG Apple macOS 11 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-11-002069 - The macOS system must authenticate peripherals before establishing a connection.DISA STIG Apple macOS 11 v1r5Unix

IDENTIFICATION AND AUTHENTICATION

APPL-11-003011 - The macOS system must enforce password complexity by requiring that at least one special character be used - allowSimpleDISA STIG Apple macOS 11 v1r5Unix

IDENTIFICATION AND AUTHENTICATION

APPL-13-000001 - The macOS system must be configured to prevent Apple Watch from terminating a session lock.DISA STIG Apple macOS 13 v1r5Unix

ACCESS CONTROL

APPL-13-000004 - The macOS system must initiate a session lock after a 15-minute period of inactivity.DISA STIG Apple macOS 13 v1r5Unix

ACCESS CONTROL

APPL-13-000006 - The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.DISA STIG Apple macOS 13 v1r5Unix

ACCESS CONTROL

APPL-13-000014 - The macOS system must compare internal information system clocks at least every 24 hours with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DOD network (NIPRNet/SIPRNet) and/or the Global Positioning System (GPS).DISA STIG Apple macOS 13 v1r5Unix

AUDIT AND ACCOUNTABILITY

APPL-13-000031 - The macOS system must be configured so that log folders do not contain access control lists (ACLs).DISA STIG Apple macOS 13 v1r5Unix

AUDIT AND ACCOUNTABILITY

APPL-13-000032 - The macOS system must be configured with dedicated user accounts to decrypt the hard disk upon startup.DISA STIG Apple macOS 13 v1r5Unix

CONFIGURATION MANAGEMENT

APPL-13-001001 - The macOS system must generate audit records for all account creations, modifications, disabling, and termination events; privileged activities or other system-level access; all kernel module load, unload, and restart actions; all program initiations; and organizationally defined events for all nonlocal maintenance and diagnostic sessions.DISA STIG Apple macOS 13 v1r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-13-001012 - The macOS system must be configured with audit log files owned by root.DISA STIG Apple macOS 13 v1r5Unix

AUDIT AND ACCOUNTABILITY

DISA_IIS_6.0_Web_Server_v6r16.audit from DISA Microsoft IIS 6.0 Server v6r16 STIGDISA STIG IIS 6.0 Server v6r16Windows
DISA_STIG_Adobe_Acrobat_Pro_XI_v1r2.audit from DISA Adobe Acrobat Pro XI V1R2 STIGDISA Adobe Acrobat Pro XI STIG v1r2Windows
DISA_STIG_Apache_Tomcat_Application_Server_9_v3r4_Middleware.audit from DISA Apache Tomcat Application Server 9 v3r4 STIGDISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix
DISA_STIG_Canonical_Ubuntu_22.04_LTS_v2r9.audit from DISA Canonical Ubuntu 22.04 LTS STIG v2r9DISA Canonical Ubuntu 22.04 LTS STIG v2r9Unix
DISA_STIG_MariaDB_Enterprise_10.x_v2r5_Unix.audit from DISA MariaDB Enterprise 10.x STIG v2r5DISA MariaDB Enterprise 10.x STIG v2r5 UnixUnix
DISA_STIG_Microsoft_Office_365_ProPlus_v3r5.audit from DISA Microsoft Office 365 ProPlus STIG v3r5DISA Microsoft Office 365 ProPlus STIG v3r5Windows
DISA_STIG_Microsoft_Office_System_2010_v1r13.audit from DISA Microsoft Office System 2010 v1r13 STIGDISA STIG Office System 2010 v1r13Windows
DISA_STIG_Microsoft_Office_System_2016_v2r5.audit from DISA Microsoft Office System 2016 STIG v2r5DISA Microsoft Office System 2016 STIG v2r5Windows
DISA_STIG_Microsoft_Windows_Server_2022_v2r10.audit from DISA Microsoft Windows Server 2022 STIG v2r10DISA Microsoft Windows Server 2022 STIG v2r10Windows
DISA_STIG_Oracle_WebLogic_Server_12c_Windows_v2r2.audit from DISA Oracle WebLogic Server 12c v2r2 STIGOracle WebLogic Server 12c Windows v2r2Windows
DISA_STIG_VMware_vSphere_7.0_ESXi_Bare_Metal_Host_v1r4.audit from DISA VMware vSphere 7.0 ESXi v1r4 STIGDISA VMware vSphere 7.0 ESXi STIG v1r4 UnixUnix
DISA_STIG_VMware_vSphere_7.0_VAMI_v1r2.audit from DISA VMware vSphere 7.0 VAMI v1r2 STIGDISA STIG VMware vSphere 7.0 VAMI v1r2Unix