Item Search

NameAudit NamePluginCategory
1.1.8 Ensure auditing is configured for Docker files and directories - containerd.sockCIS Docker v1.8.0 L2 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

1.1.14 Ensure auditing is configured for Docker files and directories - /usr/bin/containerdCIS Docker v1.8.0 L2 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

1.1.15 Ensure auditing is configured for Docker files and directories - /usr/bin/containerd-shimCIS Docker v1.8.0 L2 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

1.1.18 Ensure auditing is configured for Docker files and directories - /usr/bin/runcCIS Docker v1.8.0 L2 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

1.6 Audit Docker files and directories - /var/lib/dockerCIS Docker 1.13.0 v1.0.0 L1 LinuxUnix

AUDIT AND ACCOUNTABILITY

1.6 Ensure auditing is configured for Docker files and directories - /var/lib/dockerCIS Docker Community Edition v1.1.0 L1 Linux Host OSUnix

AUDIT AND ACCOUNTABILITY

1.9 Audit Docker files and directories - docker.socketCIS Docker 1.13.0 v1.0.0 L1 LinuxUnix

AUDIT AND ACCOUNTABILITY

1.9 Ensure auditing is configured for Docker files and directories - docker.socketCIS Docker Community Edition v1.1.0 L1 Linux Host OSUnix

AUDIT AND ACCOUNTABILITY

1.68 AZLX-23-001300CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

IDENTIFICATION AND AUTHENTICATION

1.113 AZLX-23-002215CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.428 ALMA-09-055350CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

3.1.19 Secure permissions for the tertiary archive log location - FAILARCHPATH OS PermissionCIS IBM DB2 v10 v1.1.0 Linux OS Level 1Unix
3.1.19 Secure permissions for the tertiary archive log location - FAILARCHPATH OS PermissionsCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
3.1.19 Secure permissions for the tertiary archive log location - FAILARCHPATH OS PermissionsCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows
3.1.19 Secure permissions for the tertiary archive log location - FAILARCHPATH SettingCIS IBM DB2 v10 v1.1.0 Windows OS Level 2Windows

AUDIT AND ACCOUNTABILITY

3.1.20 Ensure 'log_connections' is enabledCIS PostgreSQL 17 v1.0.0 L1 PostgreSQLPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.31 Ensure 'log_parser_stats' is disabledCIS PostgreSQL 9.5 DB v1.1.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.33 Ensure 'log_executor_stats' is disabledCIS PostgreSQL 9.5 DB v1.1.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.5 Control access to audit records - /etc/security/audit_controlCIS Apple macOS 10.13 L1 v1.1.0Unix
3.5 Control access to audit records - /var/auditCIS Apple macOS 10.13 L1 v1.1.0Unix

AUDIT AND ACCOUNTABILITY

3.14 Remove HTTP Proxy ServerCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

4.8 Ensure the set_user extension is installedCIS PostgreSQL 14 DB v 1.3.0PostgreSQLDB

ACCESS CONTROL

4.8 Make use of default rolesCIS PostgreSQL 11 DB v1.0.0PostgreSQLDB

CONFIGURATION MANAGEMENT

4.9 Make use of predefined rolesCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

4.9 Make use of predefined rolesCIS PostgreSQL 14 DB v 1.3.0PostgreSQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

4.9 Make use of predefined rolesCIS PostgreSQL 17 v1.0.0 L1 PostgreSQLPostgreSQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

8.1 Ensure PostgreSQL configuration files are outside the data clusterCIS PostgreSQL 10 DB v1.0.0PostgreSQLDB

CONFIGURATION MANAGEMENT

11.1 Ensure SELinux Is Enabled in Enforcing ModeCIS Apache HTTP Server 2.4 v2.3.0 L2Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION

17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows Server 2022 v5.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

AUDIT AND ACCOUNTABILITY

17.5.3 Ensure 'Audit Logoff' is set to include 'Success'CIS Microsoft Windows 11 Enterprise v5.0.1 L1Windows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1Windows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows 11 Enterprise v5.0.1 L1 BLWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows Server 2025 v2.0.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows Server 2019 v5.0.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows Server 2019 v5.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

17.7.1 Ensure 'Audit Audit Policy Change' is set to include 'Success'CIS Microsoft Windows 11 Enterprise v5.0.1 L1Windows

AUDIT AND ACCOUNTABILITY

AIX7-00-002015 - Audit logs on the AIX system must be set to 660 or less permissive.DISA IBM AIX 7.x STIG v3r2Unix

AUDIT AND ACCOUNTABILITY

ALMA-09-055350 - AlmaLinux OS 9 must securely compare internal information system clocks at least every 24 hours.DISA Cloud Linux AlmaLinux OS 9 STIG v1r6Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002390 - Amazon Linux 2023 must prevent the use of dictionary words for passwords.DISA Amazon Linux 2023 STIG v1r3Unix

CONFIGURATION MANAGEMENT

AZLX-23-002520 - Amazon Linux 2023 must allocate an audit_backlog_limit of sufficient size to capture processes that start prior to the audit daemon.DISA Amazon Linux 2023 STIG v1r3Unix

AUDIT AND ACCOUNTABILITY

DISA_F5_BIG-IP_ASM_v2r2.audit from DISA F5 BIG-IP Application Security Manager v2r2 STIGDISA F5 BIG-IP Application Security Manager STIG v2r2F5
JBOS-AS-000135 - JBoss ROOT logger must be configured to utilize the appropriate logging level.DISA JBoss Enterprise Application Platform 6.3 STIG v2r6Unix

AUDIT AND ACCOUNTABILITY

O121-C2-009300 - The system must protect audit information from any type of unauthorized access.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

PGS9-00-010700 - PostgreSQL must protect its audit features from unauthorized access - roles.DISA STIG PostgreSQL 9.x on RHEL OS v2r5Unix

AUDIT AND ACCOUNTABILITY

TCAT-AS-000750 - Tomcat must use FIPS-validated ciphers on secured connectors.DISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-653050 - Ubuntu 22.04 LTS must be configured to permit only authorized users ownership of the audit log files.DISA Canonical Ubuntu 22.04 LTS STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-653055 - Ubuntu 22.04 LTS must permit only authorized groups ownership of the audit log files.DISA Canonical Ubuntu 22.04 LTS STIG v2r8Unix

AUDIT AND ACCOUNTABILITY