Item Search

NameAudit NamePluginCategory
1.20 UBTU-22-232025CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT IIUnix

SYSTEM AND INFORMATION INTEGRITY

5.232 - Search - Encrypted Files IndexingDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

DTBI470 - MIME sniffing must be disallowed (Restricted Sites zone).DISA STIG Microsoft Internet Explorer 9 v1r15Windows

SYSTEM AND INFORMATION INTEGRITY

DTBI485 - Protected Mode must be enforced (Internet zone).DISA STIG Microsoft Internet Explorer 9 v1r15Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTBI605 - Internet Explorer Processes for MK protocol must be enforced (IExplore).DISA STIG Microsoft Internet Explorer 9 v1r15Windows

CONFIGURATION MANAGEMENT

DTBI715 - Crash Detection must be enforced.DISA STIG Microsoft Internet Explorer 9 v1r15Windows

CONFIGURATION MANAGEMENT

DTBI725 - AutoComplete feature for user names and passwords on forms must be disallowed.DISA STIG Microsoft Internet Explorer 9 v1r15Windows

CONFIGURATION MANAGEMENT

DTOO118 - Excel - Corrupt workbook options must be disallowed.DISA STIG Office 2010 Excel v1r11Windows

CONFIGURATION MANAGEMENT

DTOO139 - Excel - Save files default format must be configured.DISA STIG Office 2010 Excel v1r11Windows

CONFIGURATION MANAGEMENT

DTOO146 - Word - Trust access for VBA must be disallowed.DISA STIG Office 2010 Word v1r12Windows

CONFIGURATION MANAGEMENT

DTOO182 - Office System - The Help Improve Proofing Tools feature for Office must be configured.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO183 - Office System - The Opt-In Wizard must be disabled.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO188 - Office System - Document metadata for password protected files must be protected.DISA STIG Office System 2010 v1r13Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO195 - Office System - Passwords for secured documents must be enforced.DISA STIG Office System 2010 v1r13Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO198 - Office System - The Internet Fax Feature must be disabled.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO204 - Office System - External Signature Services Menu for Office must be suppressed.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO208 - Office System - Office client polling of Sharepoint servers published links must be disabled.DISA STIG Office System 2010 v1r13Windows

ACCESS CONTROL

DTOO214 - Outlook - Read EMail as plain text must be enforced.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO215 - Outlook - Read signed email as plain text must be enforced.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO218 - Outlook - Level of calendar details that a user can publish must be restricted.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO220 - Outlook - Upload method for publishing calendars to Office Online must be restricted.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO273 - Outlook - IE Trusted Zones assumed 'trusted' must be blocked.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO286 - Outlook - User Entries to Server List must be disallowed.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO304 - Access - Warning Bar settings for VBA macros must be configured.DISA STIG Office 2010 Access v1r11Windows

CONFIGURATION MANAGEMENT

DTOO304 - Warning Bar settings for VBA macros must be configuredDISA STIG Microsoft Publisher 2016 v1r3Windows

CONFIGURATION MANAGEMENT

DTOO304 - Word - Warning Bar settings for VBA macros must be configured.DISA STIG Office 2010 Word v1r12Windows

CONFIGURATION MANAGEMENT

DTOO306 - Office System - Hyperlinks to web templates in File | New and task panes must be disabled.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO311 - Office System - Key Usage Filtering must be allowed.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

DTOO313 - Outlook - Automatically downloading enclosures on RSS must be disallowed.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO315 - Outlook - Outlook must be configured not to prompt users to choose security settings if default settings fail.DISA Microsoft Outlook 2010 STIG v1r14Windows

CONFIGURATION MANAGEMENT

DTOO345 - Office System - Online content options must be configured for offline content availability.DISA STIG Office System 2010 v1r13Windows

CONFIGURATION MANAGEMENT

GEN000242 - The system must use at least two time sources for clock synchronization - 'at least 2 servers are configured'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN000290 - The system must not have unnecessary accounts - 'ftp does not exsit'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000410 - The FTPS/FTP service on the system must be configured with the DoD login banner - '/etc/ftpaccess.ctl contains herald'DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000500 - Graphical desktop environments provided by the system must automatically lock after 15 minutes of inactivity.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN000595 - Password hashes must have been generated using a FIPS 140-2 hashing algorithm - 'Verify no password hashes in /etc/passwd'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN000920 - The root account's home directory (other than /) must have mode 0700 - Not ApplicableDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001373 - The /etc/nsswitch.conf file must have mode 0644 or less permissive - Not ApplicableDISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001700 - System start-up files must only execute programs owned by a privileged UID or an application.DISA AIX 5.3 STIG v1r2Unix

ACCESS CONTROL

GEN001980 - The /etc/group file must not contain a plus (+) without defining entries for NIS+ netgroups - '/etc/group'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001980 - The /etc/passwd file must not contain a plus (+) without defining entries for NIS+ netgroups - '/etc/passwd'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN001980 - The shosts.equiv file must not contain a plus (+) without defining entries for NIS+ netgroups - '~/shosts.equiv'DISA AIX 5.3 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

GEN002400 - The system must be checked weekly for unauthorized setuid files, and unauthorized modification to authorized setuid files.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002660 - Auditing must be implemented.DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002720 - System must be configured to audit failed attempts to access files/programs - '/etc/security/audit/events FILE_Open exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002740 - The audit system must be configured to audit file deletions - '/etc/security/audit/config FILE_Unlink exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config DEV_Change exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FILE_Fchpriv exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN002760 - System must be configured to audit all admin/privileged/security actions - '/etc/security/audit/config FILE_Owner exists'DISA AIX 5.3 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN005201 - X11 forwarding for SSH must be disabled.DISA STIG Solaris 10 SPARC v2r4Unix

CONFIGURATION MANAGEMENT