Item Search

NameAudit NamePluginCategory
3.4.1.1 Ensure iptables is installedCIS Oracle Linux 7 v4.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Verify SELinux security options, if applicableCIS Docker 1.12.0 v1.0.0 L2 DockerUnix

ACCESS CONTROL

5.2 Verify SELinux security options, if applicable (Scored)CIS Docker 1.6 v1.0.0 L2 DockerUnix

ACCESS CONTROL

WN22-00-000050 - Windows Server 2022 manually managed application account passwords must be at least 14 characters in length.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-00-000080 - Windows Server 2022 must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000120 - Windows Server 2022 must have a host-based intrusion detection and prevention service installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000260 - Windows Server 2022 must implement protection methods such as TLS, encrypted VPNs, or IPsec if the data owner has a strict requirement for ensuring data integrity and confidentiality is maintained at every step of the data transfer and handling process.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-00-000300 - Windows Server 2022 must automatically remove or disable temporary user accounts after 72 hours.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000310 - Windows Server 2022 must automatically remove or disable emergency accounts after the crisis is resolved or within 72 hours.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-00-000350 - Windows Server 2022 must not have Simple TCP/IP Services installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000360 - Windows Server 2022 must not have the Telnet Client installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000370 - Windows Server 2022 must not have the TFTP Client installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000380 - Windows Server 2022 must not the Server Message Block (SMB) v1 protocol installed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000390 - Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000400 - Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-00-000440 - The Windows Server 2022 time service must synchronize with an appropriate DOD time source.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AC-000020 - Windows Server 2022 must have the number of allowed bad logon attempts configured to three or less.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-AC-000030 - Windows Server 2022 must have the period of time before the bad logon counter is reset configured to 15 minutes or greater.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-AC-000060 - Windows Server 2022 minimum password age must be configured to at least one day.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-AU-000010 - Windows Server 2022 audit records must be backed up to a different system or media than the system being audited.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000040 - Windows Server 2022 permissions for the Security event log must prevent access by nonprivileged accounts.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000060 - Windows Server 2022 Event Viewer must be protected from unauthorized modification and deletion.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000160 - Windows Server 2022 must be configured to audit Logon/Logoff - Account Lockout failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000270 - Windows Server 2022 must be configured to audit Policy Change - Audit Policy Change failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-AU-000582 - Windows Server 2022 must be configured to audit file system successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000586 - Windows Server 2022 must be configured to audit registry successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-AU-000587 - Windows Server 2022 must be configured to audit sensitive privilege use successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000050 - Windows Server 2022 must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF)-generated routes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000130 - Windows Server 2022 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000270 - Windows Server 2022 Application event log size must be configured to 32768 KB or greater.DISA Microsoft Windows Server 2022 STIG v2r8Windows

AUDIT AND ACCOUNTABILITY

WN22-CC-000400 - Windows Server 2022 must disable Basic authentication for RSS feeds over HTTP.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-CC-000520 - Windows Server 2022 Windows Remote Management (WinRM) service must not store RunAs credentials.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000080 - Windows Server 2022 Active Directory SYSVOL directory must have the proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000090 - Windows Server 2022 Active Directory Group Policy objects must have proper access control permissions.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-DC-000150 - Windows Server 2022 directory data (outside the root DSE) of a nonpublic directory must be configured to prevent anonymous access.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-DC-000210 - Windows Server 2022 Active Directory AdminSDHolder object must be configured with proper audit settings.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000230 - Windows Server 2022 must be configured to audit Account Management - Computer Account Management successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000290 - Windows Server 2022 domain controller PKI certificates must be issued by the DOD PKI or an approved External Certificate Authority (ECA).DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000310 - Windows Server 2022 Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-DC-000405 - Windows Server 2022 must be configured for certificate-based authentication for domain controllers.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL

WN22-MS-000040 - Windows Server 2022 must restrict unauthenticated Remote Procedure Call (RPC) clients from connecting to the RPC server on domain-joined member servers and standalone or nondomain-joined systems.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000040 - Windows Server 2022 built-in guest account must be renamed.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000070 - Windows Server 2022 setting Domain member: Digitally encrypt secure channel data (when possible) must be configured to Enabled.DISA Microsoft Windows Server 2022 STIG v2r8Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN22-SO-000090 - Windows Server 2022 computer account password must not be prevented from being reset.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-SO-000100 - Windows Server 2022 maximum age for machine account passwords must be configured to 30 days or less.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000210 - Windows Server 2022 must not allow anonymous SID/Name translation.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000220 - Windows Server 2022 must not allow anonymous enumeration of Security Account Manager (SAM) accounts.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000240 - Windows Server 2022 must be configured to prevent anonymous users from having the same permissions as the Everyone group.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT

WN22-SO-000300 - Windows Server 2022 must be configured to prevent the storage of the LAN Manager hash of passwords.DISA Microsoft Windows Server 2022 STIG v2r8Windows

IDENTIFICATION AND AUTHENTICATION

WN22-UC-000010 - Windows Server 2022 must preserve zone information when saving attachments.DISA Microsoft Windows Server 2022 STIG v2r8Windows

CONFIGURATION MANAGEMENT