Item Search

NameAudit NamePluginCategory
1.32 EX19-ED-000122CIS Microsoft Exchange 2019 Edge Server STIG v1.0.0 CAT IIWindows

SYSTEM AND INFORMATION INTEGRITY

1.92 O19C-00-019800CIS Oracle Database 19c STIG v1.1.0 CAT II OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

1.371 OL08-00-040380CIS Oracle Linux 8 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

DG0128-ORACLE11 - DBMS default accounts should be assigned custom passwords - 'No default accounts are OPEN'DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB
DISA_MongoDB_Enterprise_Advanced_7.x_STIG_v1r1_Unix.audit from DISA MongoDB Enterprise Advanced 7.x STIG v1r1DISA MongoDB Enterprise Advanced 7.x STIG v1r1Unix
DISA_STIG_Apache_Server-2.4_Unix_v3r2_Middleware.audit from DISA Apache Server 2.4 UNIX Server v3r2 STIGDISA STIG Apache Server 2.4 Unix Server v3r2 MiddlewareUnix
DISA_STIG_Apache_Site-2.4_Unix_v2r6_Middleware.audit from DISA Apache Server 2.4 UNIX Site v2r6 STIGDISA STIG Apache Server 2.4 Unix Site v2r6 MiddlewareUnix
DISA_STIG_Apple_macOS_11_v1r5.audit from DISA Apple macOS 11 (Big Sur) v1r5 STIGDISA STIG Apple macOS 11 v1r5Unix
DISA_STIG_Apple_macOS_11_v1r8.audit from DISA Apple macOS 11 (Big Sur) v1r8 STIGDISA STIG Apple macOS 11 v1r8Unix
DISA_STIG_Apple_OS_X_10.14_v2r6.audit from DISA Apple OS X 10.14 (Mojave) v2r6 STIGDISA STIG Apple Mac OSX 10.14 v2r6Unix
DISA_STIG_Apple_OS_X_10.15_v1r10.audit from DISA Apple OS X 10.15 (Catalina) v1r10 STIGDISA STIG Apple Mac OSX 10.15 v1r10Unix
DISA_STIG_Cisco_IOS_XE_Switch_L2S_v3r2.audit from DISA Cisco IOS XE Switch L2S STIG v3r2DISA Cisco IOS XE Switch L2S STIG v3r2Cisco
DISA_STIG_IBM_AIX_7.x_v3r3.audit from DISA IBM AIX 7.x STIG v3r3DISA IBM AIX 7.x STIG v3r3Unix
DISA_STIG_IBM_WebSphere_Traditional_9_Windows_v2r1.audit from DISA IBM WebSphere Traditional V9.x v2r1 STIGDISA IBM WebSphere Traditional 9 Windows STIG v2r1Windows
DISA_STIG_JBoss_EAP_6.3_v2r6.audit from DISA JBoss Enterprise Application Platform 6.3 v2r6 STIGDISA JBoss Enterprise Application Platform 6.3 STIG v2r6Unix
DISA_STIG_McAfee_VirusScan_8.8_Local_Client_v6r1.audit from DISA McAfee VirusScan 8.8 Local Client v6r1 STIGDISA McAfee VirusScan 8.8 Local Client STIG v6r1Windows
DISA_STIG_Microsoft_Exchange_2013_Mailbox_Server_v2r3.audit from DISA Microsoft Exchange 2013 Mailbox Server v2r3 STIGDISA Microsoft Exchange 2013 Mailbox Server STIG v2r3Windows

SYSTEM AND INFORMATION INTEGRITY

DISA_STIG_Microsoft_Exchange_2016_Mailbox_Server_v2r6.audit from DISA Microsoft Exchange 2016 Mailbox Server v2r6 STIGDISA Microsoft Exchange 2016 Mailbox Server STIG v2r6Windows

SYSTEM AND INFORMATION INTEGRITY

DISA_STIG_Microsoft_Exchange_2019_Edge_Server_v2r2.audit from DISA Microsoft Exchange 2019 Edge Server STIG v2r2DISA Microsoft Exchange 2019 Edge Server STIG v2r2Windows
DISA_STIG_Microsoft_Exchange_2019_Mailbox_Server_v2r3.audit from DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3Windows
DISA_STIG_Microsoft_Skype_Business_2016_v2r1.audit from DISA Microsoft Skype for Business 2016 v2r1 STIGDISA STIG Microsoft Skype for Business 2016 v2r1Windows
DISA_STIG_MongoDB_Enterprise_Advanced_7.x_v1r2_Unix.audit from DISA MongoDB Enterprise Advanced 7.x STIG v1r2DISA MongoDB Enterprise Advanced 7.x STIG v1r2 UnixUnix
DISA_STIG_VMware_vSphere_6.7_EAM_Tomcat_v1r4.audit from DISA VMware vSphere 6.7 EAM Tomcat v1r4 STIGDISA STIG VMware vSphere 6.7 EAM Tomcat v1r4Unix
DISA_STIG_VMware_vSphere_6.7_Perfcharts_Tomcat_v1r3.audit from DISA VMware vSphere 6.7 Perfcharts Tomcat v1r3 STIGDISA STIG VMware vSphere 6.7 Perfcharts Tomcat v1r3Unix
DISA_STIG_VMware_vSphere_6.7_Photon_OS_v1r6.audit from DISA VMware vSphere 6.7 Photon OS v1r6 STIGDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix
DISA_STIG_VMware_vSphere_6.7_STS_Tomcat_v1r3.audit from DISA VMware vSphere 6.7 STS Tomcat v1r3 STIGDISA STIG VMware vSphere 6.7 STS Tomcat v1r3Unix
DISA_STIG_VMware_vSphere_6.7_UI_Tomcat_v1r3.audit from DISA VMware vSphere 6.7 UI Tomcat v1r3 STIGDISA STIG VMware vSphere 6.7 UI Tomcat v1r3Unix
DISA_STIG_VMware_vSphere_6.7_Virgo_Client_v1r2.audit from DISA VMware vSphere 6.7 Virgo-Client v1r2 STIGDISA STIG VMware vSphere 6.7 Virgo Client v1r2Unix
GEN002860 - Audit logs must be rotated daily.DISA AIX 5.3 STIG v1r2Unix

CONFIGURATION MANAGEMENT

GEN002860 - Audit logs must be rotated daily.DISA STIG AIX 6.1 v1r14Unix

CONFIGURATION MANAGEMENT

GEN002860 - Audit logs must be rotated daily.DISA STIG Solaris 10 X86 v2r4Unix

CONFIGURATION MANAGEMENT

O19C-00-019800 - Oracle Database must, for password-based authentication, verify that when users create or update passwords, the passwords are not found on the list of commonly used, expected, or compromised passwords in IA-5 (1) (a).DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O19C-00-019800 - Oracle Database must, for password-based authentication, verify that when users create or update passwords, the passwords are not found on the list of commonly used, expected, or compromised passwords in IA-5 (1) (a).DISA Oracle Database 19c STIG v1r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

OL07-00-021620 - The Oracle Linux operating system must use a file integrity tool that is configured to use FIPS 140-2 approved cryptographic hashes for validating file contents and directories.DISA Oracle Linux 7 STIG v3r5Unix

CONFIGURATION MANAGEMENT

OL07-00-030201 - The Oracle Linux operating system must be configured to off-load audit logs onto a different system or storage media from the system being audited.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

OL07-00-030210 - The Oracle Linux operating system must take appropriate action when the remote logging buffer is full.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

RHEL-08-010015 - RHEL 8 must have the crypto-policies package installed.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-010120 - RHEL 8 must employ FIPS 140-3-approved cryptographic hashing algorithms for all stored passwords.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010150 - RHEL 8 operating systems booted with a BIOS must require authentication upon booting into single-user and maintenance modes.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

ACCESS CONTROL

RHEL-08-010163 - The krb5-server package must not be installed on RHEL 8.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010270 - RHEL 8 cryptographic policy must not be overridden.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-010275 - RHEL 8 must implement DOD-approved encryption in the bind package.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-010296 - The RHEL 8 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

ACCESS CONTROL

RHEL-08-010359 - The RHEL 8 operating system must use a file integrity tool to verify correct operation of all security functions.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

RHEL-08-010371 - RHEL 8 must prevent the installation of software, patches, service packs, device drivers, or operating system components of local packages without verification they have been digitally signed using a certificate that is issued by a Certificate Authority (CA) that is recognized and approved by the organization.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

CONFIGURATION MANAGEMENT

RHEL-08-010373 - RHEL 8 must enable kernel parameters to enforce discretionary access control on symlinks.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

ACCESS CONTROL

RHEL-08-010376 - RHEL 8 must prevent kernel profiling by unprivileged users.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-010381 - RHEL 8 must require users to reauthenticate for privilege escalation.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

RHEL-08-010382 - RHEL 8 must restrict privilege elevation to authorized personnel.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

CONFIGURATION MANAGEMENT

RHEL-08-010400 - RHEL 8 must implement certificate status checking for multifactor authentication.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION