Item Search

NameAudit NamePluginCategory
1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Debian Linux 10 v2.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 7 v4.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 9 v2.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure squashfs kernel module is not availableCIS Oracle Linux 9 v2.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Ubuntu Linux 20.04 LTS v3.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Ubuntu Linux 22.04 LTS v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 10 v1.0.1 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 10 v1.0.1 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Ubuntu Linux 24.04 LTS v2.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS SUSE Linux Enterprise 15 v2.0.1 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Rocky Linux 8 v3.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 8 v4.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.8 Session ManagementCIS HPE Aruba Networking CX Switch v1.0.1 Optional Security RecommendationsArubaOS

ACCESS CONTROL

1.1.18 Disable Mounting of cramfs Filesystems - install cramfs /bin/true'CIS Red Hat Enterprise Linux 5 L2 v2.2.1Unix

CONFIGURATION MANAGEMENT

1.4.2 Ensure permissions on bootloader config are configuredCIS CentOS Linux 8 Server L1 v2.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

1.122 AZLX-23-002260CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.156 AZLX-23-002430CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL

1.158 AZLX-23-002440CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL

1.188 AZLX-23-002605CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

SYSTEM AND COMMUNICATIONS PROTECTION

1.192 AZLX-23-005000CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

2.1.20 Ensure X window server services are not in useCIS SUSE Linux Enterprise 16 v1.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.2.4 Ensure telnet client is not installedCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.16 Ensure nfs-utils is not installed or the nfs-server service is disabledCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.2.16 Ensure nfs-utils is not installed or the nfs-server service is disabledCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.2.16 Ensure nfs-utils is not installed or the nfs-server service is disabledCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3 Disable PostgreSQL Command HistoryCIS PostgreSQL 14 OS v 1.3.0Unix

MEDIA PROTECTION

2.3.4 Ensure telnet client is not installedCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.4 Ensure telnet client is not installedCIS Fedora 19 Family Linux Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

3.1.4 Secure Permissions for All Diagnostic Logs (DIAGPATH)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

ACCESS CONTROL, MEDIA PROTECTION

3.1.4 Secure Permissions for All Diagnostic Logs (DIAGPATH)CIS IBM DB2 12.1 v1.0.0 Windows OS Level 1Windows

ACCESS CONTROL, MEDIA PROTECTION

3.1.5 Secure Permissions for Alternate Diagnostic Log Path (ALT_DIAGPATH)CIS IBM DB2 11 v1.2.0 Windows OS Level 1Windows

ACCESS CONTROL, MEDIA PROTECTION

3.3.1 Ensure TCP Wrappers is installedCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.3.1 Ensure TCP Wrappers is installedCIS Distribution Independent Linux Server L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

3.8 Ensure the Lock File Is Secured - 'LockFile directory'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

ACCESS CONTROL

3.8 Ensure the Lock File Is Secured - 'LockFile permissions'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

ACCESS CONTROL

4.1.6 Secure Permissions for the Tertiary Archive Log Location (FAILARCHPATH)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.3.10 Ensure nftables rules are permanentCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

4.3.10 Ensure nftables rules are permanentCIS Ubuntu Linux 20.04 LTS v3.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Ensure External File System Access is disabled - enable cisCIS Sybase 15.0 L1 DB v1.1.0SybaseDB
6.1.1 Ensure AIDE is installedCIS Red Hat Enterprise Linux 8 v4.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

6.1.1 Ensure AIDE is installedCIS Red Hat Enterprise Linux 9 v2.0.0 L1 ServerUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

6.3.1 Ensure AIDE is installedCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

7.13 Secure CONNECT AuthorityCIS IBM DB2 v10 v1.1.0 Database Level 1IBM_DB2DB
AZLX-23-002580 - Amazon Linux 2023 must prevent files with the setuid and setgid bit set from being executed on the /boot/efi directory.DISA Amazon Linux 2023 STIG v1r4Unix

CONFIGURATION MANAGEMENT

AZLX-23-002615 - Amazon Linux 2023 must remove all software components after updated versions have been installed.DISA Amazon Linux 2023 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

CIS_Microsoft_SQL_Server_2008_R2_v1.7.0_Level_1_OS.audit from CIS Microsoft SQL Server 2008 R2 DatabaseCIS SQL Server 2008 R2 DB OS L1 v1.7.0Windows
CIS_PostgreSQL_17_v1.1.0_L1_OS_Linux_Unix.audit from CIS PostgreSQL 17 v1.1.0CIS PostgreSQL 17 v1.1.0 L1 OS Linux UnixUnix
GEN000360 - Group Identifiers (GIDs) reserved for system accounts must not be assigned to non-system groups.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT