Item Search

NameAudit NamePluginCategory
1.8.2 Ensure GDM login banner is configured - banner message enabledCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.8.2 Ensure GDM login banner is configured - user-db:userCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

1.43 ALMA-09-007280CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL

1.135 OL09-00-000715CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL

1.151 SLES-15-030640CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT IIIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

1.413 RHEL-10-800120CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

SYSTEM AND COMMUNICATIONS PROTECTION

1.422 RHEL-10-800210CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT IIUnix

SYSTEM AND COMMUNICATIONS PROTECTION

2.6.4 Enable Firewall Stealth ModeCIS Apple macOS 10.12 L1 v1.2.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.1 Validate Proxy SettingsCIS Mozilla Firefox 38 ESR Linux L1 v1.0.0Unix
3.1 Validate Proxy SettingsCIS Mozilla Firefox 38 ESR Windows L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

5.1.1 Ensure Home Folders Are SecureCIS Apple macOS 10.14 v2.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

5.1.1 Secure Home FoldersCIS Apple macOS 10.13 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.12 Disable ability to login to another user's active and locked sessionCIS Apple macOS 10.13 L1 v1.1.0Unix

ACCESS CONTROL

8.1.1 Set Warning Banner for Standard Login Services - /etc/issueCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

8.1.1 Set Warning Banner for Standard Login Services - /etc/issue.net permsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

8.1.1 Set Warning Banner for Standard Login Services - /etc/motdCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

8.1.1 Set Warning Banner for Standard Login Services - /etc/motd permsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

ACCESS CONTROL

ALMA-09-007280 - AlmaLinux OS 9 must audit uses of the "execve" system call.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

ACCESS CONTROL

AZLX-23-002110 - Amazon Linux 2023 must audit uses of the "execve" system call.DISA Amazon Linux 2023 STIG v1r4Unix

ACCESS CONTROL

BIND-9X-001500 - A BIND 9.x server implementation must be operating on a Current-Stable version as defined by ISC.DISA BIND 9.x STIG v3r2Unix

CONFIGURATION MANAGEMENT

CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_I.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IUnix
CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_II.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix
CIS_Cloud_Linux_AlmaLinux_OS_9_STIG_v1.0.0_CAT_III.audit from CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIIUnix
DISA STIG VMware vSphere ESXi 6 Security Technical Implementation Guide Version 1 Release 5DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix
DISA_STIG_McAfee_VSEL_1.9.x_2.0.x_Local_Client_v1r6.audit from DISA McAfee VSEL 1.9/2.0 Local Client v1r6 STIGMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix
DISA_STIG_Server_2012_and_2012_R2_MS_v3r7.audit from DISA Microsoft Windows Server 2012/2012 R2 Member Server v3r7 STIGDISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows
DISA_STIG_VMware_vSphere_8.0_vCenter_Appliance_Management_Interface_VAMI_v2r2.audit from DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r2DISA VMware vSphere 8.0 vCenter Appliance Management Interface VAMI STIG v2r2Unix
DTAM092 - McAfee VirusScan On-Access General Policies must be configured to unblock connections after a minimum of 30 minutes.DISA McAfee VirusScan 8.8 Managed Client STIG v6r1Windows

SYSTEM AND INFORMATION INTEGRITY

DTAVSEL-015 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to Clean as first action when programs and jokes are found.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

EP11-00-004000 - Access to external executables must be disabled or restricted.EDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows

CONFIGURATION MANAGEMENT

EPAS-00-001100 - The EDB Postgres Advanced Server must allow only the ISSM (or individuals or roles appointed by the ISSM) to select which auditable events are to be audited.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

AUDIT AND ACCOUNTABILITY

EPAS-00-003100 - The EDB Postgres Advanced Server must protect its audit features from unauthorized removal.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

AUDIT AND ACCOUNTABILITY

EPAS-00-003400 - Database software, including EDB Postgres Advanced Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

CONFIGURATION MANAGEMENT

EPAS-00-003900 - Unused database components which are integrated in the EDB Postgres Advanced Server and cannot be uninstalled must be disabled.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

CONFIGURATION MANAGEMENT

EPAS-00-009500 - The EDB Postgres Advanced Server must maintain the confidentiality and integrity of information during preparation for transmission.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

EPAS-00-012900 - The EDB Postgres Advanced Server must implement NIST FIPS 140-2 or 140-3 validated cryptographic modules to protect unclassified information requiring confidentiality and cryptographic protection, in accordance with the requirements of the data owner.EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

IBMW-LS-000380 - The WebSphere Liberty Server must use an LDAP user registry.DISA IBM WebSphere Liberty Server STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

O112-C2-012900 - The DBMS must use multifactor authentication for access to user accounts.DISA STIG Oracle 11.2g v2r5 LinuxUnix

IDENTIFICATION AND AUTHENTICATION

O112-C2-012900 - The DBMS must use multifactor authentication for access to user accounts.DISA STIG Oracle 11.2g v2r5 WindowsWindows

IDENTIFICATION AND AUTHENTICATION

OL08-00-030000 - The OL 8 audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.DISA Oracle Linux 8 STIG v2r9Unix

ACCESS CONTROL

PHTN-30-000054 - The Photon operating system must audit the execution of privileged functions.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

PHTN-40-000107 - The Photon operating system must audit the execution of privileged functions.DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r2Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

PHTN-67-000056 - The Photon operating system must audit the execution of privileged functions.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

RHEL-08-030000 - The RHEL 8 audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

ACCESS CONTROL

RHEL-09-654010 - RHEL 9 must audit uses of the "execve" system call.DISA Red Hat Enterprise Linux 9 STIG v2r9Unix

ACCESS CONTROL

UBTU-16-020350 - The audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software - egid b32DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL

UBTU-16-020350 - The audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software - egid b64DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL

UBTU-16-020350 - The audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software - euid b32DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL

UBTU-16-020350 - The audit system must be configured to audit the execution of privileged functions and prevent all software from executing at higher privilege levels than users executing the software - euid b64DISA STIG Ubuntu 16.04 LTS v2r3Unix

ACCESS CONTROL

WN11-CC-000204 - Enhanced diagnostic data must be limited to the minimum required to support Windows Analytics.DISA Microsoft Windows 11 STIG v2r8Windows

CONFIGURATION MANAGEMENT