Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS SUSE Linux Enterprise Server 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabled - modprobeCIS SUSE Linux Enterprise Server 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabled - modprobeCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabled - /etc/modprobe.d/*CIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabled - modprobeCIS SUSE Linux Enterprise Server 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - lsmodCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabled - lsmodCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabled - modprobeCIS SUSE Linux Enterprise Server 11 L1 v2.1.1Unix

CONFIGURATION MANAGEMENT

1.4.4 Ensure core dump storage is disabledCIS Rocky Linux 8 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.7.3 Ensure GDM disable-user-list option is enabledCIS Red Hat Enterprise Linux 7 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.8.3 Ensure GDM disable-user-list option is enabledCIS Rocky Linux 8 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service 100083 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service 100146 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service 100155 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service 100232 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1.1 Disable Bluetooth, if no paired devices exist - Bluetooth is disabledCIS Apple OSX 10.11 El Capitan L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

2.2.14 Ensure dnsmasq is not installedCIS Red Hat EL9 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

3.1 Disable login: prompts on serial ports - Check if x is added to the flag field for ttybCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.2 Ensure that MongoDB only listens for network connections on authorized interfacesCIS MongoDB L1 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT

3.3 Disable WebRTC - media.peerconnection.enabledCIS Mozilla Firefox 102 ESR Linux L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

4.2.20 Ensure sshd PermitUserEnvironment is disabledCIS Rocky Linux 8 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

5.2 Disable Scripting of Plugins by JavaScriptCIS Mozilla Firefox 38 ESR Windows L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

5.2 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

5.2.20 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMax sshd_configCIS Oracle Linux 9 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.2.20 Ensure SSH Idle Timeout Interval is configured - ClientAliveInterval sshd outputCIS Oracle Linux 9 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.2.20 Ensure SSH Idle Timeout Interval is configured - ClientAliveInterval sshd outputCIS Rocky Linux 9 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.5 Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

5.20 Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

5.34 Ensure 'Windows Media Center Scheduler Service (ehSched)' is set to 'Disabled' or 'Not Installed'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

5.35 Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

5.37 Ensure 'WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled'CIS Windows 7 Workstation Level 1 v3.2.0Windows

CONFIGURATION MANAGEMENT

6.1 Configure New Tab Page - browser.urlbar.suggest.historyCIS Mozilla Firefox 102 ESR Linux L2 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.2.11 Ensure no users have .netrc filesCIS Red Hat EL8 Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.2.13 Ensure no users have .rhosts filesCIS Red Hat EL8 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.4 Ensure that server-side scripting is disabled if not neededCIS MongoDB L2 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT

6.5 Disable Geolocation SerivcesCIS Mozilla Firefox 38 ESR Linux L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

6.5 Ensure that the HTTP interface is disabledCIS MongoDB L2 Unix Audit v1.0.0Unix

CONFIGURATION MANAGEMENT

6.6 Ensure that JSONP access via an HTTP interface is disabledCIS MongoDB L2 Unix Audit v1.0.0Unix

CONFIGURATION MANAGEMENT

6.6 Ensure that JSONP access via an HTTP interface is disabledCIS MongoDB L2 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT

8.2 Disable JAR from Opening Unsafe File TypesCIS Mozilla Firefox 38 ESR Linux L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

9.3.1 Set SSH Protocol to 2CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

18.6.4.1 Ensure 'Configure NetBIOS settings' is set to 'Enabled: Disable NetBIOS name resolution on public networks' - Enabled: Disable NetBIOS name resolution on public networksCIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

18.10.10.1 Ensure 'Allow Use of Camera' is set to 'Disabled' - DisabledCIS Microsoft Windows Server 2019 Standalone DC L2 v1.0.0Windows

CONFIGURATION MANAGEMENT

18.10.56.3.3.4 (L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'CIS Microsoft Windows Server 2016 v3.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.56.3.3.6 (L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'CIS Microsoft Windows Server 2022 v3.0.0 L2 Member ServerWindows

CONFIGURATION MANAGEMENT

18.10.59.4 Ensure 'Allow search highlights' is set to 'Disabled'CIS Microsoft Windows Server 2019 Standalone DC L2 v1.0.0Windows

CONFIGURATION MANAGEMENT

19.7.7.5 Ensure 'Turn off Spotlight collection on Desktop' is set to 'Enabled' - EnabledCIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

19.7.8.2 (L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'CIS Microsoft Windows Server 2019 v3.0.0 L1 Member ServerWindows

CONFIGURATION MANAGEMENT

19.7.8.2 (L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'CIS Microsoft Windows Server 2022 v3.0.0 L1 Domain ControllerWindows

CONFIGURATION MANAGEMENT

19.7.8.2 (L1) Ensure 'Do not suggest third-party content in Windows spotlight' is set to 'Enabled'CIS Microsoft Windows Server 2022 v3.0.0 L1 Member ServerWindows

CONFIGURATION MANAGEMENT