Item Search

NameAudit NamePluginCategory
1.1.3.17.2 Set 'User Account Control: Detect application installations and prompt for elevation' to 'Enabled'CIS Windows 8 L1 v1.0.0Windows

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

1.1.17 - AirWatch - Disable 'Unknown sources'AirWatch - CIS Google Android 4 v1.0.0 L1MDM

ACCESS CONTROL

1.2.1 Ensure GPG keys are configuredCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.2.1.8 Ensure 'Scripted Window Security Restrictions' is set to Enabled - outlook.exeCIS Microsoft Office 2016 v1.1.0Windows

CONFIGURATION MANAGEMENT

1.2.1.8 Ensure 'Scripted Window Security Restrictions' is set to Enabled - pptview.exeCIS Microsoft Office 2016 v1.1.0Windows

CONFIGURATION MANAGEMENT

1.2.2 Ensure GPG keys are configuredCIS Debian Family Workstation L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.2.2 Ensure GPG keys are configuredCIS Debian 8 Workstation L1 v2.0.2Unix

RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY

1.2.2 Ensure GPG keys are configuredCIS Ubuntu Linux 18.04 LXD Container L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.3.2 Ensure filesystem integrity is regularly checkedCIS Amazon Linux 2 STIG v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.3.2 Ensure filesystem integrity is regularly checkedCIS Fedora 28 Family Linux Workstation L1 v2.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.3.2 Ensure filesystem integrity is regularly checkedCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

AUDIT AND ACCOUNTABILITY

1.3.2 Ensure filesystem integrity is regularly checkedCIS Amazon Linux 2023 Server L1 v1.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.6.2.5 Ensure the MCS Translation Service (mcstrans) is not installedCIS Distribution Independent Linux Server L2 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.6.2.5 Ensure the MCS Translation Service (mcstrans) is not installedCIS Distribution Independent Linux Workstation L2 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

4.2.1.1 Ensure rsyslog is installedCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

AUDIT AND ACCOUNTABILITY

4.3 Ensure Windows Authentication uses Kerberos and not the NT Lan Manager (NTLM) authentication protocolCIS Microsoft SharePoint 2016 OS v1.1.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

5.3.2 Ensure filesystem integrity is regularly checkedCIS AlmaLinux OS 8 Server L1 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

5.3.2 Ensure filesystem integrity is regularly checkedCIS Oracle Linux 7 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

5.3.2 Ensure filesystem integrity is regularly checkedCIS Oracle Linux 8 Workstation L1 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

5.3.2 Ensure filesystem integrity is regularly checkedCIS Red Hat EL8 Server L1 v3.0.0Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.1.2 Ensure filesystem integrity is regularly checkedCIS Red Hat Enterprise Linux 9 v2.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.1.2 Ensure filesystem integrity is regularly checkedCIS Rocky Linux 9 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.1.2 Ensure filesystem integrity is regularly checkedCIS AlmaLinux OS 9 v2.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.1.2 Ensure filesystem integrity is regularly checkedCIS Oracle Linux 9 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.11 Ensure all HTTP Header Logging options are enabledCIS Palo Alto Firewall 10 v1.2.0 L1Palo_Alto

AUDIT AND ACCOUNTABILITY, SYSTEM AND COMMUNICATIONS PROTECTION

6.11 Ensure all HTTP Header Logging options are enabledCIS Palo Alto Firewall 11 v1.1.0 L1Palo_Alto

AUDIT AND ACCOUNTABILITY, SYSTEM AND COMMUNICATIONS PROTECTION

6.12 Ensure all HTTP Header Logging options are enabled - User-AgentCIS Palo Alto Firewall 9 v1.1.0 L1Palo_Alto

AUDIT AND ACCOUNTABILITY, SYSTEM AND COMMUNICATIONS PROTECTION

8.3.4 Use templates to deploy VMs whenever possibleCIS VMware ESXi 5.1 v1.0.1 Level 1VMware
AS24-U1-000270 - The Apache web server must provide install options to exclude the installation of documentation, sample code, example applications, and tutorials - Welcome pageDISA STIG Apache Server 2.4 Unix Server v3r2 MiddlewareUnix

CONFIGURATION MANAGEMENT

CIS_IBM_DB2_9_Benchmark_v3.0.1_Level_2_OS_Windows.audit from CIS IBM DB2 9 Benchmark v3.0.1CIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS WindowsWindows
CIS_Microsoft_SQL_Server_2008_R2_v1.7.0_Level_1_OS.audit from CIS Microsoft SQL Server 2008 R2 DatabaseCIS SQL Server 2008 R2 DB OS L1 v1.7.0Windows
CIS_Microsoft_SQL_Server_2012_Database_v1.6.0_Level_1_OS.audit from Microsoft SQL Server 2012 Database, version 1.6.0CIS SQL Server 2012 Database L1 OS v1.6.0Windows
CIS_Oracle_Server_12c_v3.0.0_L1_Windows.audit from CIS Oracle Database 12c Benchmark v3.0.0CIS Oracle Server 12c Windows v3.0.0Windows
CIS_Oracle_Server_18c_v1.1.0_L1_Windows.audit from CIS Oracle Database 18c Benchmark v1.1.0CIS Oracle Server 18c Windows v1.1.0Windows
CIS_Oracle_Server_19c_v1.2.0_L1_Windows.audit from CIS Oracle Database 19c Benchmark v1.2.0CIS Oracle Server 19c Windows v1.2.0Windows
CIS_Sybase_15_0_v1_1_0_L1_OS_Windows.audit from Sybase ASE 15.0 Version 1.1.0CIS Sybase 15.0 L1 OS Windows v1.1.0Windows
CIS_v1.1.0_Oracle_11g_OS_Windows_Level_1.audit from CIS v1.1.0 Oracle 11gCIS v1.1.0 Oracle 11g OS Windows Level 1Windows
DB2X-00-008100 - DB2 and the operating system must enforce access restrictions associated with changes to the configuration of DB2 or database(s)DISA STIG IBM DB2 v10.5 LUW v2r1 OS LinuxUnix

CONFIGURATION MANAGEMENT

DISA_Oracle_11g_Installation_v9r1_OS_Linux.audit from DISA Oracle Database 11g Installation STIG v9r1 STIGDISA STIG Oracle 11 Installation v9r1 LinuxUnix
DISA_STIG_EDB_PostgreSQL_Advanced_Server_v11_Windows_v2r4_OS.audit from DISA EDB Postgres Advanced Server v11 on Windows v2r4 STIGEDB PostgreSQL Advanced Server v11 Windows OS Audit v2r4Windows
DISA_STIG_IBM_DB2_v10.5_LUW_v2r1_OS_Windows.audit from DISA IBM DB2 V10.5 LUW v2r1 STIGDISA STIG IBM DB2 v10.5 LUW v2r1 OS WindowsWindows
DISA_STIG_MS_Windows_Privileged_Access_Workstation_v3r1.audit from DISA Microsoft Windows PAW v3r1 STIGDISA MS Windows Privileged Access Workstation v3r1Windows
DISA_STIG_MSSQL_2016_Instance-OS_v3r4.audit from DISA MS SQL Server 2016 Instance v3r4 STIGDISA STIG SQL Server 2016 Instance OS Audit v3r4Windows
Ensure prelink is disabled - dpkgTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure TCP Wrappers is installed - zypperTenable Cisco Firepower Management Center OS Best Practices AuditUnix

SYSTEM AND COMMUNICATIONS PROTECTION

KNOX-07-901500 - The Samsung must be configured to enforce a Container application install policy by specifying an application whitelist.MobileIron - DISA Samsung Android 7 with Knox 2.x v1r1MDM

CONFIGURATION MANAGEMENT

SQL4-00-035500 - Software updates to SQL Server must be tested before being applied to production systems.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

SSO : no-SSO-self-signed-certsVMWare vSphere 5.X Hardening GuideVMware
WN16-00-000200 - Non-administrative accounts or groups must only have print permissions on printer shares.DISA Microsoft Windows Server 2016 STIG v2r10Windows

ACCESS CONTROL

WN16-CC-000050 - Source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing.DISA Microsoft Windows Server 2016 STIG v2r10Windows

CONFIGURATION MANAGEMENT