| 3.2.2 Ensure that the audit policy covers key security concerns | CIS Kubernetes v2.1.0 L2 Master Node | Unix | AUDIT AND ACCOUNTABILITY |
| 4.3 Host must log sufficient information for events | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.8 Host must store one week of audit records | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 5.1.16 Ensure sshd MaxAuthTries is configured | CIS AlmaLinux OS 10 v1.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 5.1.16 Ensure sshd MaxAuthTries is configured | CIS AlmaLinux OS 10 v1.0.0 L1 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 5.1.17 Ensure sshd MaxAuthTries is configured | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 5.1.18 Ensure sshd MaxAuthTries is configured | CIS Red Hat Enterprise Linux 8 v4.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3 Ensure sudo log file exists | CIS Red Hat Enterprise Linux 10 v1.0.1 L1 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3 Ensure sudo log file exists | CIS Oracle Linux 10 v1.0.0 L1 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3 Ensure sudo log file exists | CIS AlmaLinux OS 10 v1.0.0 L1 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.5 Ensure sudo log file exists | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.5 Ensure sudo log file exists | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.5 Ensure sudo log file exists | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.5 Ensure sudo log file exists | CIS AlmaLinux OS 9 v3.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.3.3 Ensure events that modify the sudo log file are collected | CIS Rocky Linux 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.3.13 Ensure events that modify /etc/passwd information are collected | CIS Rocky Linux 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.3.36 Ensure the running and on disk configuration is the same | CIS Rocky Linux 9 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.3 Ensure events that modify the sudo log file are collected | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.3 Ensure events that modify the sudo log file are collected | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.3 Ensure events that modify the sudo log file are collected | CIS Red Hat Enterprise Linux 8 v4.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.3 Ensure events that modify the sudo log file are collected | CIS Rocky Linux 8 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS Oracle Linux 8 v4.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS SUSE Linux Enterprise 15 v2.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS Red Hat Enterprise Linux 8 v4.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS Rocky Linux 8 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.6 Ensure use of privileged commands are collected | CIS AlmaLinux OS 8 v4.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.10 Ensure use of privileged commands are collected | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.10 Ensure use of privileged commands are collected | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.10 Ensure use of privileged commands are collected | CIS AlmaLinux OS 10 v1.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.21 Ensure the running and on disk configuration is the same | CIS SUSE Linux Enterprise 15 v2.0.1 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.22 Ensure the running and on disk configuration is the same | CIS Rocky Linux 8 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.3.3.37 Ensure the running and on disk configuration is the same | CIS Oracle Linux 10 v1.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.16 Ensure 'Detailed Tracking Audit PNP Activity' is set to include 'Success' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.24 Ensure 'System Audit I Psec Driver' is set to 'Success and Failure' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 6.25 Ensure 'System Audit Other System Events' is set to 'Success and Failure' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 7.1 Application specific logging | CIS Apache Tomcat 10.1 v1.1.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler exists inin default | CIS Apache Tomcat 10 L1 v1.1.0 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| 7.2 Specify file handler in logging.properties files - check if java.util.logging.ConsoleHandler logging is enabled in web application | CIS Apache Tomcat 10 L1 v1.1.0 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| 7.2 Specify file handler in logging.properties files - check if org.apache.juli.FileHandler exists in web application | CIS Apache Tomcat 10 L1 v1.1.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 7.2 Specify file handler in logging.properties files - check if org.apache.juli.FileHandler logging is enabled in default | CIS Apache Tomcat 10 L1 v1.1.0 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| 7.3 Ensure className is set correctly in context.xml | CIS Apache Tomcat 10.1 v1.1.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 7.5 Ensure pattern in context.xml is correct | CIS Apache Tomcat 10.1 v1.1.0 L1 | Unix | AUDIT AND ACCOUNTABILITY |
| 7.5 Ensure pattern in context.xml is correct | CIS Apache Tomcat 10 L1 v1.1.0 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| 7.25 Virtual machines must enable diagnostic logging | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| 7.25 Virtual machines must enable diagnostic logging | CIS VMware ESXi 9.0 v1.0.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 10.18 Use the logEffectiveWebXml and metadata-complete settings for deploying applications in production - context.xml | CIS Apache Tomcat 10 L1 v1.1.0 Middleware | Unix | AUDIT AND ACCOUNTABILITY |
| 45.1 Ensure 'Audit Client Does Not Support Encryption' is set to 'Enabled' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
| 46.3 Ensure 'Audit Server Does Not Support Signing' is set to 'Enabled' | CIS Microsoft Intune for Windows 11 v5.0.0 L1 | Windows | AUDIT AND ACCOUNTABILITY |
