Item Search

NameAudit NamePluginCategory
1.65 OL08-00-010379CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.87 OL08-00-010480CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.89 OL08-00-010500CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.92 OL08-00-010522CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.95 OL08-00-010542CIS Oracle Linux 8 STIG v1.0.0 CAT IIIUnix

CONFIGURATION MANAGEMENT

1.122 APPL-14-003013CIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.141 APPL-14-005050CIS Apple macOS 14 (Sonoma) STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.335 OL08-00-040180CIS Oracle Linux 8 STIG v1.0.0 CAT IIIUnix

CONFIGURATION MANAGEMENT

1.358 OL08-00-040286CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.366 OL08-00-040341CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

ALMA-09-011570 - AlmaLinux OS 9 must disable core dump backtraces.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-011790 - AlmaLinux OS 9 cron configuration files directory must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-012120 - AlmaLinux OS 9 /etc/crontab file must have mode 0600.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-012450 - All AlmaLinux OS 9 local files and directories must have a valid group owner.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-012670 - AlmaLinux OS 9 /etc/group- file must be group owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-013880 - AlmaLinux OS 9 /etc/gshadow- file must have mode 0000 or less permissive to prevent unauthorized access.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-013990 - AlmaLinux OS 9 /etc/gshadow file must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-014980 - A separate file system must be used for user home directories (such as /home or an equivalent).DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-015640 - AlmaLinux OS 9 must enforce a delay of at least four seconds between logon prompts following a failed logon attempt.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-016520 - AlmaLinux OS 9 /etc/passwd file must have mode 0644 or less permissive to prevent unauthorized access.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-016630 - AlmaLinux OS 9 /etc/shadow- file must be group-owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-016850 - AlmaLinux OS 9 /etc/shadow- file must have mode 0000 or less permissive to prevent unauthorized access.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-017070 - AlmaLinux OS 9 /etc/shadow file must be owned by root.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-018170 - AlmaLinux OS 9 must use a file integrity tool that is configured to use FIPS 140-3-approved cryptographic hashes for validating file contents and directories.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-018940 - AlmaLinux OS 9 must limit the number of bogus Internet Control Message Protocol (ICMP) response errors logs.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-019160 - AlmaLinux OS 9 must not enable IP packet forwarding unless the system is a router.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-020810 - AlmaLinux OS 9 must not allow a noncertificate trusted host SSH logon to the system.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-022240 - AlmaLinux OS 9 must have the gnutls-utils package installed.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-022350 - The kdump service on AlmaLinux OS 9 must be disabled.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-022790 - AlmaLinux OS 9 must prevent code from being executed on file systems that are used with removable media.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

ALMA-09-025760 - AlmaLinux OS 9 must use cron logging.DISA CloudLinux AlmaLinux OS 9 STIG v1r3Unix

CONFIGURATION MANAGEMENT

CISC-RT-000236 - The Cisco router must be configured to advertise a hop limit of at least 32 in Router Advertisement messages for IPv6 stateless auto-configuration deployments.DISA Cisco IOS Router RTR STIG v3r3Cisco

CONFIGURATION MANAGEMENT

CNTR-K8-003190 - The Kubernetes kubelet KubeConfig must have file permissions set to 644 or more restrictive.DISA STIG Kubernetes v2r4Unix

CONFIGURATION MANAGEMENT

CNTR-K8-003210 - The Kubernetes kubeadm.conf must be owned by root.DISA STIG Kubernetes v2r4Unix

CONFIGURATION MANAGEMENT

CNTR-K8-003230 - The Kubernetes kubelet config must have file permissions set to 644 or more restrictive.DISA STIG Kubernetes v2r4Unix

CONFIGURATION MANAGEMENT

CNTR-K8-003300 - The Kubernetes API Server must be set to audit log maximum backup.DISA STIG Kubernetes v2r4Unix

CONFIGURATION MANAGEMENT

ESXI-80-000218 - The ESXi host must configure virtual switch security policies to reject promiscuous mode requests.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

CONFIGURATION MANAGEMENT

ESXI-80-000226 - The ESXi host must configure a session timeout for the vSphere API.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

CONFIGURATION MANAGEMENT

ESXI-80-000231 - The ESXi host OpenSLP service must be disabled.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

CONFIGURATION MANAGEMENT

ESXI-80-000239 - The ESXi host must configure the firewall to restrict access to services running on the host.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

CONFIGURATION MANAGEMENT

ESXI-80-000250 - The ESXi host must disable virtual hardware management network interfaces.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

CONFIGURATION MANAGEMENT

O19C-00-008400 - Oracle Database must be configured in accordance with the security configuration settings based on DOD security configuration and implementation guidance, including STIGs, NSA configuration guides, CTOs, DTMs, and IAVMs.DISA Oracle Database 19c STIG v1r2 OracleDBOracleDB

CONFIGURATION MANAGEMENT

O19C-00-008600 - Oracle instance names must not contain Oracle version numbers.DISA Oracle Database 19c STIG v1r2 OracleDBOracleDB

CONFIGURATION MANAGEMENT

VCSA-80-000269 - The vCenter Server must set the distributed port group Media Access Control (MAC) Address Change policy to "Reject".DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000275 - The vCenter Server must configure the "vpxuser" auto-password to be changed every 30 days.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000277 - The vCenter Server must be isolated from the public internet but must still allow for patch notification and delivery.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000287 - The vCenter Server must have new Key Encryption Keys (KEKs) reissued at regular intervals for vSAN encrypted datastore(s).DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000291 - The vCenter Server must limit membership to the "TrustedAdmins" Single Sign-On (SSO) group.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000296 - The vCenter server must enable the OVF security policy for content libraries.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT

VCSA-80-000299 - The vCenter Server must disable CDP/LLDP on distributed switches.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

CONFIGURATION MANAGEMENT