Item Search

NameAudit NamePluginCategory
AIX7-00-002057 - AIX audit logs must be rotated daily.DISA IBM AIX 7.x STIG v3r3Unix

CONFIGURATION MANAGEMENT

CIS_Amazon_Linux_2_STIG_v2.0.1_L1_Server.audit from CIS Amazon Linux 2 STIG v2.0.1CIS Amazon Linux 2 STIG v2.0.1 L1 ServerUnix
CIS_Amazon_Linux_2_STIG_v2.0.1_L2_Server.audit from CIS Amazon Linux 2 STIG v2.0.1CIS Amazon Linux 2 STIG v2.0.1 L2 ServerUnix
CIS_Amazon_Linux_2_STIG_v2.0.1_STIG.audit from CIS Amazon Linux 2 STIG v2.0.1CIS Amazon Linux 2 STIG v2.0.1 STIGUnix
CIS_Amazon_Linux_2023_STIG_v1.0.0_CAT_I.audit from CIS Amazon Linux 2023 STIG v1.0.0CIS Amazon Linux 2023 STIG v1.0.0 CAT IUnix
CIS_Amazon_Linux_2023_STIG_v1.0.0_CAT_II.audit from CIS Amazon Linux 2023 STIG v1.0.0CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix
CIS_Amazon_Linux_2023_STIG_v1.0.0_CAT_III.audit from CIS Amazon Linux 2023 STIG v1.0.0CIS Amazon Linux 2023 STIG v1.0.0 CAT IIIUnix
CIS_Oracle_Linux_9_STIG_v1.0.0_CAT_II.audit from CIS Oracle Linux 9 STIG v1.0.0CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix
CIS_Oracle_Linux_9_STIG_v1.0.0_CAT_III.audit from CIS Oracle Linux 9 STIG v1.0.0CIS Oracle Linux 9 STIG v1.0.0 CAT IIIUnix
DISA_F5_BIG-IP_AFM_v2r2.audit from DISA F5 BIG-IP Advanced Firewall Manager v2r2 STIGDISA F5 BIG-IP Advanced Firewall Manager STIG v2r2F5
DISA_F5_BIG-IP_ASM_v2r2.audit from DISA F5 BIG-IP Application Security Manager v2r2 STIGDISA F5 BIG-IP Application Security Manager STIG v2r2F5
DISA_STIG_Microsoft_Excel_2010_v1r11.audit for Microsoft Excel 2010, from DISA STIG Microsoft Excel 2010 v1r11DISA STIG Office 2010 Excel v1r11Windows
DISA_STIG_VMware_vSphere_7.0_Photon_OS_v1r4.audit from DISA VMware vSphere 7.0 vCenter Appliance Photon OS v1r4 STIGDISA STIG VMware vSphere 7.0 Photon OS v1r4Unix
DISA_STIG_Windows_Firewall_v2r2.audit from DISA Microsoft Windows Defender Firewall with Advanced Security v2r2 STIGDISA Microsoft Windows Defender Firewall with Advanced Security STIG v2r2Windows
DKER-EE-001770 - Docker Incs official GPG key must be added to the host using the users operating systems respective package repository management tooling.DISA STIG Docker Enterprise 2.x Linux/Unix v2r2Unix

CONFIGURATION MANAGEMENT

DKER-EE-002070 - The Docker Enterprise default seccomp profile must not be disabled.DISA STIG Docker Enterprise 2.x Linux/Unix v2r2Unix

CONFIGURATION MANAGEMENT

DTAVSEL-109 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x Web UI must be disabled.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

CONFIGURATION MANAGEMENT

MD4X-00-005700 - MongoDB must prohibit the use of cached authenticators after an organization-defined time period.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

IDENTIFICATION AND AUTHENTICATION

RHEL-10-000520 - RHEL 10 must use a separate file system for the system audit data path.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-000530 - RHEL 10 must use a separate file system for user home directories (such as "/home" or an equivalent).DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-10-000560 - RHEL 10 must use a separate file system for "/var/log".DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-10-001050 - RHEL 10 must have GNU Privacy Guard (GPG) signature verification enabled for all software repositories.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-200010 - RHEL 10 must not have the "nfs-utils" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-200510 - RHEL 10 must have the "nss-tools" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-200532 - RHEL 10 must employ a deny-all, allow-by-exception policy for allowing connections to other systems.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-200541 - RHEL 10 must enable the chronyd service.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-200580 - RHEL 10 must have the "policycoreutils-python-utils" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-200610 - RHEL 10 must have the "pcsc-lite" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-10-200620 - RHEL 10 must have the "opensc" package installed.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-10-200631 - RHEL 10 must use cryptographic mechanisms to protect the integrity of audit tools.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-200635 - RHEL 10 must be configured so that the file integrity tool verifies extended attributes.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-10-200641 - RHEL 10 must have the rsyslog service set to active.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-200661 - RHEL 10 must enable the audit service.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

RHEL-10-300040 - RHEL 10 must be configured so that Secure Shell (SSH) servers use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL, MAINTENANCE

RHEL-10-400000 - RHEL 10 must be configured so that the "/etc/group" file is owned by root.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400015 - RHEL 10 must be configured so that the "/etc/group-" file is group-owned by "root".DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400065 - RHEL 10 must be configured so that the "/etc/shadow" file is group-owned by "root".DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400105 - RHEL 10 must be configured so that system commands are group-owned by root or a system account.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-400135 - RHEL 10 must be configured so that cron configuration files directories are group-owned by root.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400165 - RHEL 10 must enforce group ownership of audit logs by "root" or by a restricted logging group to prevent unauthorized read access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

RHEL-10-400175 - RHEL 10 must enforce "root" ownership of audit logs to prevent unauthorized access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

RHEL-10-400180 - RHEL 10 must enforce group ownership by "root" or a restricted logging group for audit log files to prevent unauthorized access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

RHEL-10-400185 - RHEL 10 must set mode "0600" or less permissive for the audit logs file to prevent unauthorized access to the audit log.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

RHEL-10-400190 - RHEL 10 must enforce the audit log directory to have a mode of "0750" or less permissive to prevent unauthorized read access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-400200 - RHEL 10 must enforce root group ownership of the "/etc/audit/" directory.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

RHEL-10-400210 - RHEL 10 must enforce mode "755" or less permissive on library directories.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-400215 - RHEL 10 must enforce mode "755" or less permissive for library files.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

CONFIGURATION MANAGEMENT

RHEL-10-400250 - RHEL 10 must enforce mode "0644" or less permissive for the "/etc/group-" file to prevent unauthorized access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400255 - RHEL 10 must enforce mode "0000" or less permissive for the "/etc/gshadow" file to prevent unauthorized access.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

ACCESS CONTROL

RHEL-10-400280 - RHEL 10 must be configured so that a sticky bit is set on all public directories.DISA Red Hat Enterprise Linux 10 STIG v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION