Detections
Analytics

Item Search

NameAudit NamePluginCategory
1.5 Disable Interactive LoginCIS MySQL 5.7 Windows OS L2 v1.0.0Windows
2.2.5 Ensure 'Allow log on locally' is set to 'Administrators, Users'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
2.2.6 Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.19 Ensure 'Deny log on locally' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
2.2.19 Ensure 'Deny log on locally' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BLWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.2.27 Ensure 'Lock pages in memory' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.31 Ensure 'Modify an object label' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
2.2.31 Ensure 'Modify an object label' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.1.2 Ensure 'Accounts: Block Microsoft accounts' is set to 'Users can't add or log on with Microsoft accounts'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BLWindows
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
2.3.6.5 Ensure 'Domain member: Maximum machine account password age' is set to '30 or fewer days, but not 0'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BLWindows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BLWindows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + NGWindows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + NGWindows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
2.3.10.2 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.10.3 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
2.3.11.6 Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
5.4.1.1 Ensure password expiration is 365 days or less - usersCIS SUSE Linux Enterprise Server 11 L1 v2.1.0Unix
5.4.1.3 Ensure password expiration warning days is 7 or more - login.defsCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
5.5.1.1 Ensure minimum days between password changes is configured - usersCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0Unix
5.5.1.3 Ensure password expiration warning days is 7 or more - login.defsCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0Unix
5.5.1.3 Ensure password expiration warning days is 7 or more - usersCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0Unix
5.5.1.4 Ensure inactive password lock is 30 days or less - usersCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0Unix
5.5.2 Ensure system accounts are securedCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.1.0Unix
5.5.2 Ensure system accounts are securedCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0Unix
6.2.2 Ensure password fields are not emptyCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0Unix
6.2.15 Ensure all groups in /etc/passwd exist in /etc/groupCIS SUSE Linux Enterprise Server 11 L1 v2.1.0Unix
6.2.15 Ensure no duplicate user names existCIS Ubuntu Linux 18.04 LTS Server L1 v2.1.0Unix
6.2.17 Ensure no duplicate GIDs existCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
6.2.19 Ensure no duplicate group names existCIS SUSE Linux Enterprise Workstation 11 L1 v2.1.0Unix
17.2.1 Ensure 'Audit Application Group Management' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
17.2.2 Ensure 'Audit Security Group Management' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
17.5.2 Ensure 'Audit Group Membership' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BLWindows
18.4.1 Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
18.8.4.2 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BLWindows
18.8.4.2 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows