Item Search

NameAudit NamePluginCategory
1.14 WN19-00-000140CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

1.14 WN22-00-000140CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

ACCESS CONTROL

1.67 O19C-00-013900CIS Oracle Database 19c STIG v1.1.0 CAT II OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

1.115 AZLX-23-002225CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

1.116 AZLX-23-002230CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

1.117 AZLX-23-002235CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

1.152 WN19-DC-000060CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.152 WN22-DC-000060CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.213 WN22-SO-000060CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

SYSTEM AND COMMUNICATIONS PROTECTION

1.215 WN22-SO-000080CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

SYSTEM AND COMMUNICATIONS PROTECTION

1.215 WN22-SO-000080CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT IIWindows

SYSTEM AND COMMUNICATIONS PROTECTION

1.219 WN22-SO-000120CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIWindows

ACCESS CONTROL

1.228 ALMA-09-028620CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

CONFIGURATION MANAGEMENT

1.357 ALMA-09-046550CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

1.437 ALMA-09-056780CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY

2.1 Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'CIS SQL Server 2012 Database L1 DB v1.6.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.1 Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'CIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.1.3 Ensure NFS and RPC are not enabledCIS Google Container-Optimized OS v1.2.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

2.8 Ensure 'Scan for Startup Procs' Server Configuration Option is set to '0'CIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

CONFIGURATION MANAGEMENT

2.8 Ensure 'Scan for Startup Procs' Server Configuration Option is set to '0'CIS SQL Server 2012 Database L1 DB v1.6.0MS_SQLDB

CONFIGURATION MANAGEMENT

2.13 Ensure Socket Peer-Credential Authentication is Used AppropriatelyCIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L2 MySQL RDBMS on Linux MySQLDBMySQLDB

ACCESS CONTROL

2.13 Ensure Socket Peer-Credential Authentication is Used AppropriatelyCIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L2 MySQL RDBMS MySQLDBMySQLDB

CONFIGURATION MANAGEMENT

2.13 Ensure Socket Peer-Credential Authentication is Used AppropriatelyCIS Oracle MySQL Community Server 8.4 v1.1.0 L2 MySQL RDBMS MySQLDBMySQLDB

CONFIGURATION MANAGEMENT

3.1.20 Ensure 'log_connections' is enabledCIS PostgreSQL 13 v1.3.0 L1 Database PostgreSQLDBPostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.20 Ensure 'log_connections' is enabledCIS PostgreSQL 14 DB v 1.3.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.5 Ensure Access to Audit Records Is ControlledCIS Apple macOS 11.0 Big Sur v4.0.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.9 Make use of predefined rolesCIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDBPostgreSQLDB

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.2 Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'CIS SQL Server 2012 Database L1 DB v1.6.0MS_SQLDB

AUDIT AND ACCOUNTABILITY

6.9 Ensure the pgcrypto extension is installed and configured correctlyCIS PostgreSQL 10 DB v1.0.0PostgreSQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

6.9 Ensure the pgcrypto extension is installed and configured correctlyCIS PostgreSQL 9.6 DB v1.0.0PostgreSQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

6.11 Ensure the pgcrypto extension is installed and configured correctlyCIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDBPostgreSQLDB

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

8.1 Ensure PostgreSQL configuration files are outside the data clusterCIS PostgreSQL 10 DB v1.0.0PostgreSQLDB

CONFIGURATION MANAGEMENT

ALMA-09-028620 - AlmaLinux OS 9 must prevent the chrony daemon from acting as a server.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

CONFIGURATION MANAGEMENT

ALMA-09-046550 - AlmaLinux OS 9 must enable Linux audit logging for the USBGuard daemon.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

ALMA-09-054470 - AlmaLinux OS 9 audit system must take appropriate action when the audit files have reached maximum size.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

ALMA-09-056780 - AlmaLinux OS 9 audit system must protect logon UIDs from unauthorized change.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

AUDIT AND ACCOUNTABILITY

APPL-26-000031 - The macOS system must configure the audit log folder to not contain access control lists (ACLs).DISA Apple macOS 26 Tahoe STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

ESXI-67-000004 - Remote logging for ESXi hosts must be configured.DISA STIG VMware vSphere 6.7 ESXi v1r3VMware

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

MS.EXO.17.2v1 - Microsoft Purview Audit (Premium) logging SHALL be enabled.CISA SCuBA Microsoft 365 Exchange Online v1.5.0microsoft_azure

ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

O19C-00-013900 - Oracle Database must enforce the DOD standards for password complexity.DISA Oracle Database 19c STIG v1r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O19C-00-013900 - Oracle Database must enforce the DOD standards for password complexity.DISA Oracle Database 19c STIG v1r3 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O121-C2-014100 - The DBMS must support organizational requirements to enforce password complexity by the number of uppercase characters used.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O121-C2-014300 - The DBMS must support organizational requirements to enforce password complexity by the number of numeric characters used.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

O121-C2-014400 - The DBMS must support organizational requirements to enforce password complexity by the number of special characters used.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

IDENTIFICATION AND AUTHENTICATION

OL08-00-030110 - The OL 8 audit log directory must be group-owned by root to prevent unauthorized read access.DISA Oracle Linux 8 STIG v2r9Unix

AUDIT AND ACCOUNTABILITY

PGS9-00-003000 - PostgreSQL must maintain the confidentiality and integrity of information during reception.DISA STIG PostgreSQL 9.x on RHEL DB v2r5PostgreSQLDB

SYSTEM AND COMMUNICATIONS PROTECTION

RHEL-08-030100 - RHEL 8 audit log directory must be owned by root to prevent unauthorized read access.DISA Red Hat Enterprise Linux 8 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

UBTU-16-020100 - Audit log directories must have a mode of 0750 or less permissive to prevent unauthorized read access.DISA STIG Ubuntu 16.04 LTS v2r3Unix

AUDIT AND ACCOUNTABILITY

WN25-00-000440 - The Windows Server 2025 time service must synchronize with an appropriate DOD time source.DISA Microsoft Windows Server 2025 STIG v1r1Windows

AUDIT AND ACCOUNTABILITY

WN25-00-000440 - The Windows Server 2025 time service must synchronize with an appropriate DoW time source.DISA Microsoft Windows Server 2025 STIG v1r4Windows

AUDIT AND ACCOUNTABILITY