Item Search

NameAudit NamePluginCategory
1.1.27 Disable AutomountingCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L2 WorkstationUnix

MEDIA PROTECTION

1.1.27 Disable AutomountingCIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 ServerUnix

MEDIA PROTECTION

1.31 WN16-00-000340CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.31 WN16-00-000340CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

1.31 WN19-00-000310CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.31 WN22-00-000310CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

ACCESS CONTROL

1.59 WN16-AU-000030CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIWindows

AUDIT AND ACCOUNTABILITY

1.60 WN16-AU-000040CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows

AUDIT AND ACCOUNTABILITY

1.61 WN16-AU-000050CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows

AUDIT AND ACCOUNTABILITY

2.2.37 Ensure 'Shut down the system' is set to 'Administrators, Users'CIS Microsoft Windows 10 Enterprise v5.0.0 L1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.37 Ensure 'Shut down the system' is set to 'Administrators, Users'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.37 Ensure 'Shut down the system' is set to 'Administrators, Users'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higherCIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL

4.10.26.1 Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'CIS Microsoft Intune for Windows 10 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.016 - Internet Information System (IIS) or its subcomponents are installed on a workstation.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

7.2 Set Strong Password Creation PoliciesCIS Oracle Solaris 11.4 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - DICTIONLIST = /usr/share/lib/dict/wordsCIS Solaris 11.2 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MINALPHA = 2CIS Solaris 11 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies - MINUPPER = 1CIS Solaris 11.1 L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

7.2 Set Strong Password Creation Policies- MAXREPEATS = 0CIS Solaris 11.2 L1 v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

17.5.4 (L1) Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION

17.5.4 Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

AUDIT AND ACCOUNTABILITY

18.6.8.1 Ensure 'Audit insecure guest logon' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1Windows

AUDIT AND ACCOUNTABILITY

18.6.8.1 Ensure 'Audit insecure guest logon' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

AUDIT AND ACCOUNTABILITY

18.7.8 Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.7.8 Ensure 'Configure RPC packet level privacy setting for incoming connections' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.9.29.1 Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1 BLWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

18.9.29.1 Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

18.9.29.1 Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

ALMA-09-033240 - AlmaLinux OS 9 SSHD must accept public key authentication.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

IDENTIFICATION AND AUTHENTICATION

AMLS-NM-000220 - The Arista Multilayer Switch must use multifactor authentication for local access to privileged accounts.DISA STIG Arista MLS DCS-7000 Series NDM v1r4Arista

IDENTIFICATION AND AUTHENTICATION

Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged FunctionsNIST macOS Catalina v1.5.0 - All ProfilesUnix

ACCESS CONTROL

Catalina - Configure the System to Block Non-Privileged Users from Executing Privileged FunctionsNIST macOS Catalina v1.5.0 - CNSSI 1253Unix

ACCESS CONTROL

DB2X-00-011600 - DB2 must generate audit records for all privileged activities or other system-level accessDISA STIG IBM DB2 v10.5 LUW v2r1 DatabaseIBM_DB2DB

AUDIT AND ACCOUNTABILITY

DG0040-ORACLE11 - The DBMS software installation account should be restricted to authorized users - 'Oracle base directory file permissions are correct'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DG0040-ORACLE11 - The DBMS software installation account should be restricted to authorized users - 'Oracle home directory file permissions are correct'DISA STIG Oracle 11 Installation v9r1 WindowsWindows

CONFIGURATION MANAGEMENT

DG0040-ORACLE11 - The DBMS software installation account should be restricted to authorized users - 'Oracle install account is disabled'DISA STIG Oracle 11 Installation v9r1 LinuxUnix

ACCESS CONTROL

ESXI-67-000040 - The ESXi host must use multifactor authentication for local DCUI access to privileged accounts.DISA STIG VMware vSphere 6.7 ESXi v1r3VMware

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

O19C-00-006000 - Oracle Database must provide an immediate real-time alert to appropriate support staff of all audit log failures.DISA Oracle Database 19c STIG v1r3 WindowsWindows

AUDIT AND ACCOUNTABILITY

O19C-00-009900 - The Oracle Listener must be configured to require administration authentication.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-011200 - Network access to Oracle Database must be restricted to authorized personnel.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-011600 - Remote administration must be disabled for the Oracle connection manager.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-011700 - Network client connections must be restricted to supported versions.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-013200 - OS accounts used to run external procedures called by Oracle Database must have limited privileges.DISA Oracle Database 19c STIG v1r3 WindowsWindows

CONFIGURATION MANAGEMENT

O19C-00-017700 - Oracle Database must employ cryptographic mechanisms preventing the unauthorized disclosure of information during transmission unless the transmitted data is otherwise protected by alternative physical measures.DISA Oracle Database 19c STIG v1r3 WindowsWindows

SYSTEM AND COMMUNICATIONS PROTECTION

O19C-00-020400 - Oracle Database must include only approved trust anchors in trust stores or certificate stores managed by the organization.DISA Oracle Database 19c STIG v1r3 WindowsWindows

SYSTEM AND COMMUNICATIONS PROTECTION

O121-C1-004500 - DBA OS accounts must be granted only those host system privileges necessary for the administration of the DBMS.DISA Oracle Database 12c STIG v3r5 WindowsWindows

CONFIGURATION MANAGEMENT

PGS9-00-005800 - PostgreSQL must generate audit records for all privileged activities or other system-level access.DISA STIG PostgreSQL 9.x on RHEL DB v2r5PostgreSQLDB

AUDIT AND ACCOUNTABILITY

RHEL-07-020023 - The Red Hat Enterprise Linux operating system must elevate the SELinux context when an administrator calls the sudo command.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

ACCESS CONTROL

WN12-UR-000019-MS - The Deny log on as a service user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

ACCESS CONTROL