Item Search

NameAudit NamePluginCategory
1.2 Use the updated Linux KernelCIS Docker 1.12.0 v1.0.0 L1 LinuxUnix

SYSTEM AND INFORMATION INTEGRITY

1.2 Use the updated Linux KernelCIS Docker 1.6 v1.0.0 L1 LinuxUnix

SYSTEM AND INFORMATION INTEGRITY

3.4.1.1 Ensure iptables is installedCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.4.1.1 Ensure iptables is installedCIS Red Hat Enterprise Linux 7 v4.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.121 - The system does not have a backup administrator accountDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.1 Ensure All Auditable System Actions Commands Are AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

5.1 Ensure All Auditable System Actions Commands Are AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

AUDIT AND ACCOUNTABILITY

5.1 Ensure All Auditable System Actions Commands Are AuditedCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

5.1 Ensure All Auditable System Actions Commands Are AuditedCIS Oracle Database 23ai v1.1.0 L1 RDBMSOracleDB

AUDIT AND ACCOUNTABILITY

5.1.1 Ensure All Auditable System Actions Commands Are AuditedCIS Oracle Database 19c v2.0.0 L1 RDBMSOracleDB

AUDIT AND ACCOUNTABILITY

DO0270-ORACLE11 - A minimum of two Oracle redo log groups/files should be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device - 'V$LOG count > 2'DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB

AUDIT AND ACCOUNTABILITY

DTAVSEL-200 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x must scan all media used for system maintenance prior to use.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

MAINTENANCE

O19C-00-000800 - Oracle Database must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

ACCESS CONTROL

O112-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device.DISA STIG Oracle 11.2g v2r5 DatabaseOracleDB

CONFIGURATION MANAGEMENT

O121-BP-021600 - A minimum of two Oracle redo log groups/files must be defined and configured to be stored on separate, archived physical disks or archived directories on a RAID device.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

CONFIGURATION MANAGEMENT

SQL6-D0-004300 - SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components.DISA MS SQL Server 2016 Instance STIG v3r6 MS_SQLDBMS_SQLDB

AUDIT AND ACCOUNTABILITY

WBLC-02-000069 - Oracle WebLogic must generate audit records for the DoD-selected list of auditable events.Oracle WebLogic Server 12c Windows v2r2Windows

AUDIT AND ACCOUNTABILITY

WN22-00-000130 - Windows Server 2022 local volumes must use a format that supports NTFS attributes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000170 - Windows Server 2022 default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000180 - Windows Server 2022 nonadministrative accounts or groups must only have print permissions on printer shares.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000210 - Windows Server 2022 passwords must be configured to expire.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000220 - Windows Server 2022 system files must be monitored for unauthorized changes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000270 - Windows Server 2022 must have the roles and features required by the system documented.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000330 - Windows Server 2022 must not have the Microsoft FTP service installed unless required by the organization.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000410 - Windows Server 2022 must not have Windows PowerShell 2.0 installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-AC-000040 - Windows Server 2022 password history must be configured to 24 passwords remembered.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-AU-000070 - Windows Server 2022 must be configured to audit Account Logon - Credential Validation successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000110 - Windows Server 2022 must be configured to audit Account Management - User Account Management successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000120 - Windows Server 2022 must be configured to audit Account Management - User Account Management failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000130 - Windows Server 2022 must be configured to audit Detailed Tracking - Plug and Play Events successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000180 - Windows Server 2022 must be configured to audit logoff successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000210 - Windows Server 2022 must be configured to audit Logon/Logoff - Special Logon successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000240 - Windows Server 2022 must be configured to audit Object Access - Removable Storage successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000250 - Windows Server 2022 must be configured to audit Object Access - Removable Storage failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000370 - Windows Server 2022 must be configured to audit System - Security System Extension successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000390 - Windows Server 2022 must be configured to audit System - System Integrity failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000588 - Windows Server 2022 must be configured to audit sensitive privilege use failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000020 - Windows Server 2022 must have WDigest Authentication disabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000060 - Windows Server 2022 must be configured to ignore NetBIOS name release requests except from WINS servers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-CC-000100 - Windows Server 2022 must be configured to enable Remote host allows delegation of nonexportable credentials.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000140 - Windows Server 2022 group policy objects must be reprocessed even if they have not changed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000180 - Windows Server 2022 users must be prompted to authenticate when the system wakes from sleep (on battery).DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000220 - Windows Server 2022 default AutoRun behavior must be configured to prevent AutoRun commands.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000230 - Windows Server 2022 AutoPlay must be disabled for all drives.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000240 - Windows Server 2022 administrator accounts must not be enumerated during elevation.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-CC-000310 - Windows Server 2022 Explorer Data Execution Prevention must be enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND INFORMATION INTEGRITY

WN22-CC-000450 - Windows Server 2022 must disable automatically signing in the last interactive user after a system-initiated restart.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000490 - Windows Server 2022 Windows Remote Management (WinRM) client must not use Digest authentication.DISA Microsoft Windows Server 2022 STIG v2r8Windows

MAINTENANCE

WN22-DC-000020 - Windows Server 2022 Kerberos user logon restrictions must be enforced.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000100 - Windows Server 2022 Active Directory Domain Controllers Organizational Unit (OU) object must have the proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL