Detections
Analytics

Item Search

NameAudit NamePluginCategory
1.10 Ensure That 'Notify all admins when other admins reset their password?' is set to 'Yes'CIS Microsoft Azure Foundations v1.5.0 L1microsoft_azure
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1Windows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Windows Server 2012 MS L1 v2.4.0Windows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Windows Server 2019 DC L1 v1.2.1Windows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Windows Server 2019 DC L1 v1.3.0Windows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + NGWindows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BLWindows
2.2.1 Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'CIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BLWindows
2.2.4 Ensure 'Act as part of the operating system' is set to 'No One'CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0Windows
2.2.14 Ensure 'Create a token object' is set to 'No One'CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0Windows
2.2.16 Ensure 'Create permanent shared objects' is set to 'No One'CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0Windows
2.2.34 Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0Windows
2.2.34 Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0Windows
4.1.3 Ensure changes to system administration scope (sudoers) is collected - auditctl /etc/sudoersCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.3 Ensure changes to system administration scope (sudoers) is collected - auditctl /etc/sudoersCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.3.1 Ensure changes to system administration scope (sudoers) is collectedCIS Debian Linux 11 Workstation L2 v.1.0.0Unix
4.1.3.1 Ensure changes to system administration scope (sudoers) is collected - auditctl /etc/sudoers.dCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.8 Ensure events that modify user/group information are collectedCIS Debian Linux 11 Server L2 v.1.0.0Unix
4.1.3.8 Ensure events that modify user/group information are collected - /etc/groupCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.8 Ensure events that modify user/group information are collected - /etc/security/opasswdCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.3.8 Ensure events that modify user/group information are collected - /etc/shadowCIS AlmaLinux OS 8 Workstation L2 v2.0.0Unix
4.1.3.8 Ensure events that modify user/group information are collected - auditctl /etc/security/opasswdCIS AlmaLinux OS 8 Server L2 v2.0.0Unix
4.1.4 Ensure events that modify user/group information are collected - '/etc/security/opasswd'CIS CentOS 7 v3.1.1 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - '/etc/shadow'CIS CentOS 7 v3.1.2 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - '/etc/shadow'CIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.4 Ensure events that modify user/group information are collected - /etc/gshadowCIS Debian 10 Server L2 v1.0.0Unix
4.1.4 Ensure events that modify user/group information are collected - /etc/passwdCIS Debian 10 Server L2 v1.0.0Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/gshadow'CIS CentOS 7 v3.1.2 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/passwd'CIS CentOS 7 v3.1.2 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/passwd'CIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/security/opasswd'CIS CentOS 7 v3.1.2 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/security/opasswd'CIS CentOS 7 v3.1.1 Server L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl '/etc/security/opasswd'CIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl /etc/groupCIS Debian 10 Workstation L2 v1.0.0Unix
4.1.4 Ensure events that modify user/group information are collected - auditctl /etc/gshadowCIS Debian 10 Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - /etc/groupCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - /etc/passwdCIS CentOS Linux 8 Server L2 v1.0.1Unix
4.1.11 Ensure events that modify user/group information are collected - /etc/passwdCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - /etc/passwdCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - /etc/shadowCIS CentOS Linux 8 Server L2 v1.0.1Unix
4.1.11 Ensure events that modify user/group information are collected - auditctl /etc/gshadowCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - auditctl /etc/passwdCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - auditctl /etc/security/opasswdCIS Fedora 28 Family Linux Workstation L2 v1.0.0Unix
4.1.11 Ensure events that modify user/group information are collected - auditctl /etc/shadowCIS CentOS Linux 8 Server L2 v1.0.1Unix
4.1.11 Ensure events that modify user/group information are collected - auditctl /etc/shadowCIS AlmaLinux OS 8 Workstation L2 v1.0.0Unix
4.1.14 Ensure changes to system administration scope (sudoers) is collected - /etc/sudoers.dCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl /etc/sudoers.dCIS Amazon Linux 2 v2.0.0 L2Unix
4.1.14 Ensure changes to system administration scope (sudoers) is collected - auditctl sudoersCIS CentOS 7 v3.1.1 Workstation L2Unix
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoersCIS CentOS 7 v3.1.2 Workstation L2Unix
4.1.14 Ensure changes to system administration scope (sudoers) is collected - sudoers.dCIS CentOS 7 v3.1.2 Workstation L2Unix