Item Search

NameAudit NamePluginCategory
1.1 Ensure packages are obtained from authorized repositoriesCIS PostgreSQL 11 OS v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1 Ensure packages are obtained from authorized repositoriesCIS PostgreSQL 10 OS v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1 Ensure packages are obtained from authorized repositoriesCIS PostgreSQL 9.6 OS v1.0.0Unix

CONFIGURATION MANAGEMENT

1.16 WN22-00-000160CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

ACCESS CONTROL

1.16 WN22-00-000160CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

ACCESS CONTROL

1.33 WN11-00-000155CIS Microsoft Windows 11 STIG v1.2.0 CAT IIWindows

CONFIGURATION MANAGEMENT

1.129 WN19-CC-000360CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.129 WN19-CC-000360CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.220 WN22-SO-000130CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

ACCESS CONTROL

1.223 WN22-SO-000160CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

SYSTEM AND COMMUNICATIONS PROTECTION

1.223 WN22-SO-000160CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

SYSTEM AND COMMUNICATIONS PROTECTION

2.1 Ensure the file permissions mask is correctCIS PostgreSQL 11 OS v1.0.0Unix

ACCESS CONTROL

2.1 Ensure the file permissions mask is correctCIS PostgreSQL 9.5 OS v1.1.0Unix

ACCESS CONTROL

3.1.12 Ensure syslog messages are not lost due to sizeCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.13 Ensure the program name for PostgreSQL syslog messages is correctCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.18 Ensure 'log_connections' is enabledCIS PostgreSQL 9.6 DB v1.0.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.21 Ensure 'log_connections' is enabledCIS PostgreSQL 9.5 DB v1.1.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

4.2 Ensure excessive administrative privileges are revokedCIS PostgreSQL 9.6 OS v1.0.0Unix

ACCESS CONTROL

4.2 Ensure valid public keys are installedCIS PostgreSQL 9.5 OS v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

4.3 Ensure excessive administrative privileges are revokedCIS PostgreSQL 9.5 OS v1.1.0Unix

ACCESS CONTROL

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 9.6 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 11 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.2 Ensure login via 'host' TCP/IP Socket is configured correctlyCIS PostgreSQL 10 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Ensure login via "host" TCP/IP Socket is configured correctlyCIS PostgreSQL 11 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.1 Ensure 'Attack Vectors' Runtime Parameters are ConfiguredCIS PostgreSQL 9.5 OS v1.1.0Unix
6.4 Ensure 'SIGHUP' Runtime Parameters are ConfiguredCIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDBPostgreSQLDB

CONFIGURATION MANAGEMENT

6.4 Ensure 'SIGHUP' Runtime Parameters are ConfiguredCIS PostgreSQL 10 DB v1.0.0PostgreSQLDB

SYSTEM AND SERVICES ACQUISITION

6.4 Ensure 'SIGHUP' Runtime Parameters are ConfiguredCIS PostgreSQL 16 v1.1.0 L1 OS Linux PostgreSQLDBPostgreSQLDB

CONFIGURATION MANAGEMENT

6.4 Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSLCIS Google Cloud Platform Foundation v5.0.0 L1GCP

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.5 Ensure 'Superuser' Runtime Parameters are ConfiguredCIS PostgreSQL 14 DB v 1.3.0PostgreSQLDB

CONFIGURATION MANAGEMENT

6.5 Ensure 'Superuser' Runtime Parameters are ConfiguredCIS PostgreSQL 12 DB v1.1.0PostgreSQLDB

CONFIGURATION MANAGEMENT

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 9.5 OS v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - fips_enabledCIS PostgreSQL 9.6 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 9.5 OS v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 10 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.7 Ensure FIPS 140-2 OpenSSL Cryptography Is Used - openssl versionCIS PostgreSQL 9.6 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

6.8 Ensure TLS is enabled and configured correctlyCIS PostgreSQL 14 DB v 1.3.0PostgreSQLDB

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Ensure WAL archiving is configured and functional - archive_modeCIS PostgreSQL 10 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Ensure WAL archiving is configured and functional - archive_modeCIS PostgreSQL 11 OS v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.4 Ensure WAL archiving is configured and functional- archive_commandCIS PostgreSQL 9.5 OS v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

8.3 Ensure the backup and restore tool, 'pgBackRest', is installed and configuredCIS PostgreSQL 9.5 OS v1.1.0Unix

CONTINGENCY PLANNING

9.2.6 Ensure root PATH IntegrityCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT

TCAT-AS-000560 - Example applications must be removed.DISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix

CONFIGURATION MANAGEMENT

TCAT-AS-000580 - Documentation must be removed.DISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix

CONFIGURATION MANAGEMENT

WN22-DC-000240 - Windows Server 2022 must be configured to audit DS Access - Directory Service Access successes.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000250 - Windows Server 2022 must be configured to audit DS Access - Directory Service Access failures.DISA Microsoft Windows Server 2022 STIG v2r8Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN22-DC-000260 - Windows Server 2022 must be configured to audit DS Access - Directory Service Changes successes.DISA Microsoft Windows Server 2022 STIG v2r10Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-DC-000250 - Windows Server 2025 must be configured to audit DS Access - Directory Service Access failures.DISA Microsoft Windows Server 2025 STIG v1r1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-DC-000260 - Windows Server 2025 must be configured to audit DS Access - Directory Service Changes successes.DISA Microsoft Windows Server 2025 STIG v1r3Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

WN25-DC-000270 - Windows Server 2025 must be configured to audit DS Access - Directory Service Changes failures.DISA Microsoft Windows Server 2025 STIG v1r3Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY