Item Search

NameAudit NamePluginCategory
1.4 Ensure 'Automatically Lock' is set to 'Immediately'MobileIron - CIS Google Android v1.3.0 L1MDM

IDENTIFICATION AND AUTHENTICATION

1.4.1 Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0Palo_Alto

ACCESS CONTROL

1.21 Ensure 'Screen timeout' is set to '1 minute or less'MobileIron - CIS Google Android v1.3.0 L1MDM

ACCESS CONTROL

2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Windows 7 Workstation Level 1 v3.2.0Windows

ACCESS CONTROL

2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

ACCESS CONTROL

2.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessMobileIron - CIS Apple iOS 14 and iPadOS 14 v1.0.0 End User Owned L1MDM

ACCESS CONTROL

2.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessMobileIron - CIS Apple iOS 13 and iPadOS 13 v1.0.0 End User Owned L1MDM

ACCESS CONTROL

3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessAirWatch - CIS Apple iOS 14 and iPadOS 14 Institution Owned L1MDM

ACCESS CONTROL

3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or lessMobileIron - CIS Apple iOS 14 and iPadOS 14 Institution Owned L1MDM

ACCESS CONTROL

5.2.14 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMaxCIS Aliyun Linux 2 L1 v1.0.0Unix

ACCESS CONTROL

5.2.16 Ensure SSH Idle Timeout Interval is configured - 'ClientAliveInterval'CIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

ACCESS CONTROL

5.2.16 Ensure SSH Idle Timeout Interval is configured - 'ClientAliveInterval'CIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

ACCESS CONTROL

5.2.16 Ensure SSH Idle Timeout Interval is configured - ClientAliveIntervalCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

ACCESS CONTROL

5.3.17 Ensure SSH Idle Timeout Interval is configured - ClientAliveCountMaxCIS Red Hat 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.3.17 Ensure SSH Idle Timeout Interval is configured - ClientAliveIntervalCIS CentOS 6 Server L1 v3.0.0Unix

ACCESS CONTROL

5.3.18 Ensure SSH LoginGraceTime is set to one minute or lessCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

5.3.18 Ensure SSH LoginGraceTime is set to one minute or lessCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

5.4.5 Ensure default user shell timeout is 900 seconds or less - /etc/bash.bashrcCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

ACCESS CONTROL

5.4.5 Ensure default user shell timeout is 900 seconds or less - /etc/profileCIS Distribution Independent Linux Server L2 v2.0.0Unix

ACCESS CONTROL

5.4.5 Ensure default user shell timeout is 900 seconds or less - /etc/profile /etc/profile.dCIS Ubuntu Linux 18.04 LXD Host L1 Workstation v1.0.0Unix

ACCESS CONTROL

18.9.59.2.2 Ensure 'Do not allow passwords to be saved' is set to 'Enabled'CIS Windows 7 Workstation Level 1 v3.2.0Windows

IDENTIFICATION AND AUTHENTICATION

18.9.59.3.10.1 Ensure 'Set time limit for active but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or less'CIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0Windows

ACCESS CONTROL

Audit Credential ValidationMSCT Windows 10 1903 v1.19.9Windows

AUDIT AND ACCOUNTABILITY

Audit Credential ValidationMSCT Windows Server v1909 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Credential ValidationMSCT Windows Server 2019 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Disallow WinRM from storing RunAs credentialsMSCT Windows Server 1903 MS v1.19.9Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server v1909 DC v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server v2004 DC v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server 2016 DC v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server v20H2 DC v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server 1903 DC v1.19.9Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server v2004 MS v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows Server 2019 DC v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 v1507 v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 1803 v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 1809 v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 1903 v1.19.9Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 1909 v1.0.0Windows

ACCESS CONTROL

Do not allow passwords to be savedMSCT Windows Server v2004 MS v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Do not allow passwords to be savedMSCT Windows Server v20H2 DC v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Do not allow passwords to be savedMSCT Windows Server 2016 DC v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Do not allow passwords to be savedMSCT Windows 10 1803 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Do not allow passwords to be savedMSCT Windows 10 1903 v1.19.9Windows

IDENTIFICATION AND AUTHENTICATION

Do not allow passwords to be savedMSCT Windows 10 v2004 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows Server 1903 DC v1.19.9Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows 10 v20H2 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows 10 v21H2 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows Server 2019 DC v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows 10 1903 v1.19.9Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows 10 v2004 v1.0.0Windows

ACCESS CONTROL