Item Search

NameAudit NamePluginCategory
1.5 Installing ISC BIND 9 - bind9 installationCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

CONFIGURATION MANAGEMENT

2.1.7 Disable USB Firmware and configuration installationCIS Fortigate 7.0.x v1.3.0 L2FortiGate

CONFIGURATION MANAGEMENT

4.5 Ensure 'mysqld' is Not Started with '--skip-grant-tables' - Doesn't existCIS MySQL 5.7 Community Windows OS L1 v2.0.0Windows

ACCESS CONTROL, MEDIA PROTECTION

18.9.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

MEDIA PROTECTION

18.9.8.2 Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Windows 7 Workstation Level 1 v3.2.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.7.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

MEDIA PROTECTION

18.10.7.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Windows Server 2012 DC L1 v3.0.0Windows

MEDIA PROTECTION

18.10.7.2 Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Domain ControllerWindows

MEDIA PROTECTION

18.10.7.2 Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows Server 2022 STIG v2.0.0 STIG MSWindows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 11 Enterprise v4.0.0 L1 BitLockerWindows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 10 Enterprise v4.0.0 L1Windows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 10 Enterprise v4.0.0 L1 BL NGWindows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 10 Enterprise v4.0.0 L1 NGWindows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 10 Stand-alone v4.0.0 L1Windows

MEDIA PROTECTION

18.10.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 10 Stand-alone v4.0.0 L1 BLWindows

MEDIA PROTECTION

Check for signatures on downloaded programsMSCT MSCT Windows Server 2022 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server v20H2 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server v2004 MS v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server 2019 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server 2019 MS v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 1803 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 11 v24H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 1809 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 v20H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server 2025 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 v1507 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server 1903 DC v1.19.9Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server v2004 DC v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 11 v22H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 1903 v1.19.9Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows Server v20H2 MS v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 v2004 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 v21H1 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 10 v22H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Check for signatures on downloaded programsMSCT Windows 11 v23H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

ESXi: esxi-8.supportedVMware vSphere Security Configuration and Hardening Guide 8.0 - Bare Metal HostUnix

CONFIGURATION MANAGEMENT

GEN004620 - The sendmail server must have the debug feature disabled.DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN008000 - If using LDAP for auth or account info, certs used must be provided from DoD or an approved external PKI - 'manual cert check'DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

IDENTIFICATION AND AUTHENTICATION

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG AIX 6.1 v1r14Unix

SYSTEM AND COMMUNICATIONS PROTECTION

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

GEN008680 - If the system boots from removable media, it must be stored in a safe or similarly secured container.DISA STIG for Red Hat Enterprise Linux 5 v1r18 AuditUnix

SYSTEM AND COMMUNICATIONS PROTECTION

IISW-SI-000241 - The IIS 8.5 private website have a server certificate issued by DoD PKI or DoD-approved PKI Certification Authorities (CAs).DISA IIS 8.5 Site v2r9Windows

SYSTEM AND COMMUNICATIONS PROTECTION

VCSA-70-000274 - The vCenter Server must not configure all port groups to virtual local area network (VLAN) values reserved by upstream physical switches.DISA STIG VMware vSphere 7.0 vCenter v1r3VMware

CONFIGURATION MANAGEMENT

WN12-AU-000201 - Audit data must be retained for at least one year.DISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows

CONFIGURATION MANAGEMENT

WN12-AU-000203-01 - Audit records must be backed up onto a different system or media than the system being audited.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

AUDIT AND ACCOUNTABILITY

WN12-AU-000203-02 - The operating system must, at a minimum, off-load audit records of interconnected systems in real time and off-load standalone systems weekly.DISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows

AUDIT AND ACCOUNTABILITY

WN16-00-000060 - Manually managed application account passwords must be at least 14 characters in length.DISA Microsoft Windows Server 2016 STIG v2r10Windows

IDENTIFICATION AND AUTHENTICATION

WN16-AU-000010 - Audit records must be backed up to a different system or media than the system being audited.DISA Microsoft Windows Server 2016 STIG v2r10Windows

AUDIT AND ACCOUNTABILITY

WN19-AU-000020 - Windows Server 2019 must, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.DISA Microsoft Windows Server 2019 STIG v3r4Windows

AUDIT AND ACCOUNTABILITY