| 1.001 - Physical security of the Automated Information System (AIS) does not meet DISA requirements. | DISA Windows Vista STIG v6r41 | Windows | CONFIGURATION MANAGEMENT |
| 1.5.4 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.4 Ensure kernel.dmesg_restrict is configured | CIS SUSE Linux Enterprise 16 v1.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.4 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 9 v3.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.4 Ensure kernel.dmesg_restrict is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.4 Ensure kernel.dmesg_restrict is configured | CIS AlmaLinux OS 9 v3.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Ubuntu Linux 26.04 LTS v1.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Amazon Linux 2 v4.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Debian Linux 12 v2.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Debian Linux 12 v2.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Ubuntu Linux 26.04 LTS v1.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.43 SQLI-22-010400 | CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 CAT II MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
| 1.50 O19C-00-011800 | CIS Oracle Database 19c STIG v1.1.0 CAT I Unix | Unix | CONFIGURATION MANAGEMENT |
| 1.94 ALMA-09-013330 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.352 OL09-00-002530 | CIS Oracle Linux 9 STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 2.3.3.2 Ensure File Sharing Is Disabled | CIS Apple macOS 26 Tahoe v1.1.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.3.3.3 Ensure File Sharing Is Disabled | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.4.8 Ensure File Sharing Is Disabled | CIS Apple macOS 12.0 Monterey v4.0.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.1.11 Ensure use of privileged commands is collected | CIS Oracle Linux 6 Server L2 v2.0.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 4.1.11 Ensure use of privileged commands is collected | CIS Red Hat 6 Server L2 v3.0.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 4.1.11 Ensure use of privileged commands is collected | CIS CentOS 6 Workstation L2 v3.0.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.5 Ensure CIM access is limited | CIS VMware ESXi 6.5 v1.0.0 Level 1 | VMware | ACCESS CONTROL |
| 6.10 Restrict root Login to System Console - Check if 'CONSOLE' in /etc/default/login is set to /dev/console. | CIS Solaris 10 L1 v5.2 | Unix | ACCESS CONTROL |
| 18.3.7 Ensure 'WDigest Authentication' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 v3.2.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| DO3630-ORACLE11 - The Oracle Listener should be configured to require administration authentication - 'No listeners are running' | DISA STIG Oracle 11 Installation v9r1 Linux | Unix | IDENTIFICATION AND AUTHENTICATION |
| ESXI-06-000041 - The system must set a timeout to automatically disable idle sessions after a predetermined period. | DISA VMware vSphere ESXi 6.0 STIG v1r5 | VMware | ACCESS CONTROL |
| ESXI-06-100041 - The VMM must automatically terminate a user session after inactivity timeouts have expired or at shutdown by setting an idle timeout. | DISA VMware vSphere ESXi 6.0 STIG v1r5 | VMware | ACCESS CONTROL |
| ESXI-65-000041 - The ESXi host must set a timeout to automatically disable idle sessions after 10 minutes. | DISA STIG VMware vSphere ESXi 6.5 v2r4 | VMware | SYSTEM AND COMMUNICATIONS PROTECTION |
| ESXi: esxi-8.shell-interactive-timeout | VMware vSphere Security Configuration and Hardening Guide | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| O121-BP-022700 - The Oracle Listener must be configured to require administration authentication. | DISA Oracle Database 12c STIG v3r5 Unix | Unix | CONFIGURATION MANAGEMENT |
| PANW-IP-000053 - The Palo Alto Networks security platform must generate an alert to, at a minimum, the ISSO and ISSM when rootkits or other malicious software which allows unauthorized privileged or non-privileged access is detected. | DISA Palo Alto Networks IDPS STIG v3r2 | Palo_Alto | SYSTEM AND INFORMATION INTEGRITY |
| SLEM-05-612020 - SLEM 5 must implement certificate status checking for multifactor authentication. | DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| UBTU-22-654235 - Ubuntu 22.04 LTS must generate audit records for privileged activities, nonlocal maintenance, diagnostic sessions and other system-level access. | DISA Canonical Ubuntu 22.04 LTS STIG v2r9 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| WG210 W22 - Web content directories must not be anonymously shared. | DISA STIG Apache Site 2.2 Windows v1r13 | Windows | ACCESS CONTROL |
| WN10-00-000100 - Internet Information System (IIS) or its subcomponents must not be installed on a workstation. | DISA Microsoft Windows 10 STIG v3r6 | Windows | CONFIGURATION MANAGEMENT |
| WN11-00-000100 - Internet Information System (IIS) or its subcomponents must not be installed on a workstation. | DISA Microsoft Windows 11 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN12-00-000005 - Users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r7 | Windows | CONFIGURATION MANAGEMENT |
| WN16-MS-000050 - Caching of logon credentials must be limited. | DISA Microsoft Windows Server 2016 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| WN19-AU-000220 - Windows Server 2019 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2019 STIG v3r9 | Windows | AUDIT AND ACCOUNTABILITY |
| WN19-AU-000230 - Windows Server 2019 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2019 STIG v3r9 | Windows | AUDIT AND ACCOUNTABILITY |
| WN22-00-000010 - Windows Server 2022 users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-00-000010 - Windows Server 2022 users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | CONFIGURATION MANAGEMENT |
| WN22-AU-000220 - Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | AUDIT AND ACCOUNTABILITY |
| WN22-AU-000220 - Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | AUDIT AND ACCOUNTABILITY |
| WN22-AU-000230 - Windows Server 2022 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | AUDIT AND ACCOUNTABILITY |
| WN22-AU-000230 - Windows Server 2022 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000220 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000220 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events successes. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000230 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | AUDIT AND ACCOUNTABILITY |
| WN25-AU-000230 - Windows Server 2025 must be configured to audit Object Access - Other Object Access Events failures. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | AUDIT AND ACCOUNTABILITY |
