Item Search

NameAudit NamePluginCategory
1.1 WN19-00-000010CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IWindows

CONFIGURATION MANAGEMENT

1.5 WN19-00-000050CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.10 Use login triggers to validate users IP addresses - exec sp_displaylogin <Login_Name>CIS Sybase 15.0 L2 DB v1.1.0SybaseDB
1.10 Use login triggers to validate users IP addresses - exec sp_logintriggerCIS Sybase 15.0 L2 DB v1.1.0SybaseDB
1.50 ESXI-80-000223CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT II VMwareVMware

CONFIGURATION MANAGEMENT

1.111 WN19-CC-000180CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

CONFIGURATION MANAGEMENT

1.111 WN19-CC-000180CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

CONFIGURATION MANAGEMENT

1.112 WN19-CC-000190CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

CONFIGURATION MANAGEMENT

1.154 WN19-DC-000080CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IWindows

ACCESS CONTROL

1.181 WN19-DC-000360CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.186 WN19-DC-000400CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.211 WN19-SO-000040CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

CONFIGURATION MANAGEMENT

1.216 WN19-SO-000090CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.216 WN19-SO-000090CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

IDENTIFICATION AND AUTHENTICATION

1.254 WN19-UR-000010CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

1.259 WN19-UR-000060CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IWindows

ACCESS CONTROL

1.259 WN19-UR-000060CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IWindows

ACCESS CONTROL

1.260 WN19-UR-000070CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.260 WN19-UR-000070CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

1.264 WN19-UR-000110CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

1.265 WN19-UR-000120CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT IIWindows

ACCESS CONTROL

1.265 WN19-UR-000120CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIWindows

ACCESS CONTROL

2.2 Ensure that MongoDB does not bypass authentication via the localhost exceptionCIS MongoDB 3.6 L1 Unix Audit v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure 'OS_ROLES' Is Set to 'FALSE'CIS Oracle Server 18c DB Traditional Auditing v1.1.0OracleDB

ACCESS CONTROL

2.2.4 Ensure 'OS_ROLES' Is Set to 'FALSE'CIS Oracle Server 18c DB Unified Auditing v1.1.0OracleDB

ACCESS CONTROL

2.2.38 (L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.2.38 (L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

ACCESS CONTROL

2.2.41 (L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'CIS Windows Server 2012 DC L1 v3.0.0Windows

ACCESS CONTROL

2.2.41 (L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'CIS Windows Server 2012 MS L1 v3.0.0Windows

ACCESS CONTROL

2.2.41 (L1) Ensure 'Perform volume maintenance tasks' is set to 'Administrators'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.12 Ensure That the Log Metric Filter and Alerts Exist for SQL Instance Configuration ChangesCIS Google Cloud Platform Foundation v5.0.0 L2GCP

AUDIT AND ACCOUNTABILITY

3.1.13 Ensure the correct SQL statements generating errors are recordedCIS PostgreSQL 9.6 DB v1.0.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

3.1.14 Ensure the correct SQL statements generating errors are recordedCIS PostgreSQL 9.5 DB v1.1.0PostgreSQLDB

AUDIT AND ACCOUNTABILITY

4.1 Ensure All Default Passwords Are ChangedCIS Oracle Server 18c DB Unified Auditing v1.1.0OracleDB

IDENTIFICATION AND AUTHENTICATION

4.3 Ensure 'DBA_USERS.AUTHENTICATION_TYPE' Is Not Set to 'EXTERNAL' for Any UserCIS Oracle Server 12c DB Traditional Auditing v3.0.0OracleDB

IDENTIFICATION AND AUTHENTICATION

4.3 Ensure 'DBA_USERS.AUTHENTICATION_TYPE' Is Not Set to 'EXTERNAL' for Any UserCIS Oracle Server 18c DB Unified Auditing v1.1.0OracleDB

IDENTIFICATION AND AUTHENTICATION

4.3 Ensure 'DBA_USERS.AUTHENTICATION_TYPE' Is Not Set to 'EXTERNAL' for Any UserCIS Oracle Server 12c DB Unified Auditing v3.0.0OracleDB

IDENTIFICATION AND AUTHENTICATION

4.3 Ensure 'DBA_USERS.AUTHENTICATION_TYPE' Is Not Set to 'EXTERNAL' for Any UserCIS Oracle Server 18c DB Traditional Auditing v1.1.0OracleDB

IDENTIFICATION AND AUTHENTICATION

6.12 Set EEPROM Security Mode and Log Failed Access - SPARC only. Should *not* be 'security-mode=none'.CIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

CD12-00-001200 - PostgreSQL must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.DISA STIG Crunchy Data PostgreSQL DB v3r2PostgreSQLDB

ACCESS CONTROL

Ensure that the 'local-infile' database flag for a Cloud Databases Mysql instance is set to '0'Tenable Best Practices RackSpace v2.0.0Rackspace

SYSTEM AND COMMUNICATIONS PROTECTION

MD3X-00-000490 - MongoDB must check the validity of all data inputs except those specifically identified by the organization.DISA STIG MongoDB Enterprise Advanced 3.x v2r3 OSUnix

SYSTEM AND INFORMATION INTEGRITY

MD4X-00-004100 - MongoDB must check the validity of all data inputs except those specifically identified by the organization.DISA STIG MongoDB Enterprise Advanced 4.x v1r4 OSUnix

SYSTEM AND INFORMATION INTEGRITY

MD8X-00-005500 - MongoDB must check the validity of all data inputs except those specifically identified by the organization.DISA MongoDB Enterprise Advanced 8.x STIG v1r1 MongoDBMongoDB

SYSTEM AND INFORMATION INTEGRITY

O121-C2-008000 - The DBMS must include organization-defined additional, more detailed information in the audit records for audit events identified by type, location, or subject.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

AUDIT AND ACCOUNTABILITY

O121-N1-015602 - When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative logon method that does not expose the password.DISA Oracle Database 12c STIG v3r5 WindowsWindows

CONFIGURATION MANAGEMENT

O121-N1-015602 - When using command-line tools such as Oracle SQL*Plus, which can accept a plain-text password, users must use an alternative logon method that does not expose the password.DISA Oracle Database 12c STIG v3r5 UnixUnix

CONFIGURATION MANAGEMENT

PGS9-00-003600 - Execution of software modules (to include functions and trigger procedures) with elevated privileges must be restricted to necessary cases only.DISA STIG PostgreSQL 9.x on RHEL DB v2r5PostgreSQLDB

ACCESS CONTROL

SQL4-00-016820 - SQL Server must have the Master Data Services software component removed if it is unused.DISA STIG SQL Server 2014 Instance OS Audit v2r4Windows

CONFIGURATION MANAGEMENT

SQLI-22-016700 - SQL Server execute permissions to access the registry must be revoked unless specifically required and approved.DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDBMS_SQLDB

CONFIGURATION MANAGEMENT