Item Search

NameAudit NamePluginCategory
CISC-RT-000237 - The Cisco switch must not be configured to use IPv6 Site Local Unicast addresses.DISA Cisco NX OS Switch RTR STIG v3r3Cisco

CONFIGURATION MANAGEMENT

CISC-RT-000391 - The Cisco perimeter switch must be configured to suppress Router Advertisements on all external IPv6-enabled interfaces.DISA Cisco NX OS Switch RTR STIG v3r3Cisco

CONFIGURATION MANAGEMENT

UBTU-18-010419 - The Ubuntu operating system SSH daemon must prevent remote hosts from connecting to the proxy display.DISA STIG Ubuntu 18.04 LTS v2r15Unix

CONFIGURATION MANAGEMENT

UBTU-20-010461 - The Ubuntu operating system must disable automatic mounting of Universal Serial Bus (USB) mass storage driver.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-22-213015 - Ubuntu 22.04 LTS must disable kernel core dumps so that it can fail to a secure state if system initialization fails, shutdown fails or aborts fail.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-232025 - Ubuntu 22.04 LTS must configure the "/var/log" directory to have mode "755" or less permissive.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-232040 - Ubuntu 22.04 LTS must have directories that contain system commands owned by "root".DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-232090 - Ubuntu 22.04 LTS must configure the files used by the system journal to be owned by "root".DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-251020 - Ubuntu 22.04 LTS must have an application firewall enabled.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

CONFIGURATION MANAGEMENT

UBTU-22-255065 - Ubuntu 22.04 LTS must use strong authenticators in establishing nonlocal maintenance and diagnostic sessions.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

MAINTENANCE

UBTU-22-271010 - Ubuntu 22.04 LTS must enable the graphical user logon banner to display the Standard Mandatory DOD Notice and Consent Banner before granting local access to the system via a graphical user logon.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

ACCESS CONTROL

UBTU-22-611070 - Ubuntu 22.04 LTS must encrypt all stored passwords with a FIPS 140-3-approved cryptographic hashing algorithm.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

IDENTIFICATION AND AUTHENTICATION

UBTU-22-652010 - Ubuntu 22.04 LTS must be configured to preserve log records from failure events.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-654050 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the gpasswd command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654100 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the su command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654165 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the creat, open, openat, open_by_handle_at, truncate, and ftruncate system calls.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654190 - Ubuntu 22.04 LTS must generate audit records for all events that affect the systemd journal files.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

CONFIGURATION MANAGEMENT

UBTU-22-654195 - Ubuntu 22.04 LTS must generate audit records for the /var/log/btmp file.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654215 - Ubuntu 22.04 LTS must generate audit records for the use and modification of the lastlog file.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654220 - Ubuntu 22.04 LTS must generate audit records when successful/unsuccessful attempts to modify the /etc/sudoers file occur.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

WN11-00-000005 - Domain-joined systems must use Windows 11 Enterprise Edition 64-bit version.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000060 - Non-system-created file shares on a system must limit access to groups that require it.DISA Microsoft Windows 11 STIG v2r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-00-000105 - Simple Network Management Protocol (SNMP) must not be installed on the system.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000115 - The Telnet Client must not be installed on the system.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000165 - The Server Message Block (SMB) v1 protocol must be disabled on the SMB server.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000175 - The Secondary Logon service must be disabled on Windows 11.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-AU-000035 - The system must be configured to audit Account Management - User Account Management failures.DISA Microsoft Windows 11 STIG v2r3Windows

SYSTEM AND INFORMATION INTEGRITY

WN11-AU-000060 - The system must be configured to audit Logon/Logoff - Group Membership successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000080 - The system must be configured to audit Logon/Logoff - Special Logon successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000090 - The system must be configured to audit Object Access - Removable Storage successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000115 - The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000120 - The system must be configured to audit System - IPsec Driver failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000155 - The system must be configured to audit System - System Integrity failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000575 - Windows 11 must be configured to audit MPSSVC Rule-Level Policy Change Successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-CC-000038 - WDigest Authentication must be disabled.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000039 - Run as different user must be removed from context menus.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000060 - Connections to non-domain networks when connected to a domain authenticated network must be blocked.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000065 - Wi-Fi Sense must be disabled.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000085 - Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000120 - The network selection user interface (UI) must not be displayed on the logon screen.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000252 - Windows 11 must be configured to disable Windows Game Recording and Broadcasting.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000300 - Basic authentication for RSS feeds over HTTP must not be used.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000325 - Automatically signing in the last interactive user after a system-initiated restart must be disabled.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-EP-000310 - Windows 11 Kernel (Direct Memory Access) DMA Protection must be enabled.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-SO-000020 - The built-in administrator account must be renamed.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-SO-000025 - The built-in guest account must be renamed.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-SO-000120 - The Windows SMB server must be configured to always perform SMB packet signing.DISA Microsoft Windows 11 STIG v2r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-SO-000230 - The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.DISA Microsoft Windows 11 STIG v2r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-SO-000275 - User Account Control must virtualize file and registry write failures to per-user locations.DISA Microsoft Windows 11 STIG v2r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN11-UR-000010 - The 'Access this computer from the network' user right must only be assigned to the Administrators and Remote Desktop Users groups.DISA Microsoft Windows 11 STIG v2r3Windows

ACCESS CONTROL