Item Search

NameAudit NamePluginCategory
APPL-15-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000022 - The macOS system must limit consecutive failed login attempts to three.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000024 - The macOS system must enforce SSH to display a policy banner.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000025 - The macOS system must display the Standard Mandatory DoW Notice and Consent Banner at the login window.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-15-000090 - The macOS system must disable login to other users' active and locked sessions.DISA Apple macOS 15 Sequoia STIG v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-000110 - The macOS system must configure the SSH ServerAliveInterval to 900.DISA Apple macOS 15 Sequoia STIG v1r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-001003 - The macOS system must enable security auditing.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-15-001013 - The macOS system must configure audit log folders to be owned by root.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001014 - The macOS system must configure the audit log files group to wheel.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001017 - The macOS system must configure audit log folders to mode 700 or less permissive.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-001021 - The macOS system must be configured to audit all changes of object attributes.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

APPL-15-001100 - The macOS system must disable root login for SSH.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-001110 - The macOS system must configure audit_control group to wheel.DISA Apple macOS 15 Sequoia STIG v1r8Unix

AUDIT AND ACCOUNTABILITY

APPL-15-002004 - The macOS system must disable Location Services.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002016 - The macOS system must disable iCloud Notes.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002039 - The macOS system must disable Siri Setup during Setup Assistant.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002042 - The macOS system must disable iCloud Bookmarks.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002053 - The macOS system must disable the system settings pane for Siri.DISA Apple macOS 15 Sequoia STIG v1r8Unix

CONFIGURATION MANAGEMENT

APPL-15-002062 - The macOS system must disable Bluetooth when no approved device is connected.DISA Apple macOS 15 Sequoia STIG v1r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-002110 - The macOS system must disable Bluetooth Sharing.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-15-002271 - The macOS system must disable iPhone Mirroring.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-15-003001 - The macOS system must issue or obtain public key certificates from an approved service provider.DISA Apple macOS 15 Sequoia STIG v1r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

APPL-15-003012 - The macOS system must disable password hints.DISA Apple macOS 15 Sequoia STIG v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-004022 - The macOS system must require users to reauthenticate for privilege escalation when using the "sudo" command.DISA Apple macOS 15 Sequoia STIG v1r8Unix

IDENTIFICATION AND AUTHENTICATION

APPL-15-005070 - The macOS system must enable Authenticated Root.DISA Apple macOS 15 Sequoia STIG v1r8Unix

ACCESS CONTROL

APPL-26-000002 - The macOS system must enforce screen saver password.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000007 - The macOS system must disable hot corners.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-000031 - The macOS system must configure the audit log folder to not contain access control lists (ACLs).DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

APPL-26-000057 - The macOS system must limit SSH to FIPS-compliant connections.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-002038 - The macOS system must disable Trivial File Transfer Protocol (TFTP) service.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

APPL-26-002041 - The macOS system must disable iCloud Document Sync.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002042 - The macOS system must disable iCloud Bookmarks.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002150 - The macOS system must disable iCloud Desktop and Document folder sync.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002170 - The macOS system must disable iCloud Private Relay.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002230 - The macOS system must disable Dictation.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002240 - The macOS system must disable Printer Sharing.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002250 - The macOS system must disable Remote Management.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-002271 - The macOS system must disable iPhone Mirroring.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

APPL-26-003007 - The macOS system must require that passwords contain a minimum of one numeric character.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-003014 - The macOS system must remove password hints from user accounts.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-003080 - The macOS system must disable accounts after 35 days of inactivity.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-004030 - The macOS system must configure system log files owned by root and group to wheel.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-26-004040 - The macOS system must configure system log files to mode 640 or less permissive.DISA Apple macOS 26 Tahoe STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

APPL-26-004060 - The macOS system must configure sudoers timestamp type.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-005001 - The macOS system must ensure System Integrity Protection (SIP) is enabled.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

APPL-26-005052 - The macOS system must configure the login window to prompt for username and password.DISA Apple macOS 26 Tahoe STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

APPL-26-005060 - The macOS system must disable proximity-based password sharing requests.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-005070 - The macOS system must enable Authenticated Root.DISA Apple macOS 26 Tahoe STIG v1r4Unix

ACCESS CONTROL

APPL-26-005110 - The macOS system must enforce enrollment in Mobile Device Management (MDM).DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT

APPL-26-005140 - The macOS system must disable Genmoji AI Creation.DISA Apple macOS 26 Tahoe STIG v1r4Unix

CONFIGURATION MANAGEMENT