Item Search

NameAudit NamePluginCategory
UBTU-20-010297 - The Ubuntu operating system must generate audit records when successful/unsuccessful attempts to use the kmod command.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

AUDIT AND ACCOUNTABILITY

UBTU-20-010418 - The Ubuntu operating system must configure the /var/log directory to be owned by root.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-20-010425 - The Ubuntu operating system must have directories that contain system commands group-owned by root.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

AUDIT AND ACCOUNTABILITY

UBTU-20-010432 - The Ubuntu operating system must be configured to preserve log records from failure events.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-20-010446 - The Ubuntu operating system must configure the uncomplicated firewall to rate-limit impacted network interfaces.DISA Canonical Ubuntu 20.04 LTS STIG v2r2Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-213025 - Ubuntu 22.04 LTS must implement nonexecutable data to protect its memory from unauthorized code execution.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-232027 - Ubuntu 22.04 LTS must generate system journal entries without revealing information that could be exploited by adversaries.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-232100 - Ubuntu 22.04 LTS must be configured so that the "journalctl" command is owned by "root".DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-232135 - Ubuntu 22.04 LTS must configure the "/var/log/syslog" file to be group-owned by "adm".DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-251025 - Ubuntu 22.04 LTS must configure the Uncomplicated Firewall (ufw) to rate-limit impacted network interfaces.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-291015 - Ubuntu 22.04 LTS must disable all wireless network adapters.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

UBTU-22-412035 - Ubuntu 22.04 LTS default filesystem permissions must be defined in such a way that all authenticated users can read and modify only their own files.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

CONFIGURATION MANAGEMENT

UBTU-22-611045 - Ubuntu 22.04 LTS must be configured so that when passwords are changed or new passwords are established, pwquality must be used.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

CONFIGURATION MANAGEMENT

UBTU-22-651025 - Ubuntu 22.04 LTS must be configured so that the script that runs each 30 days or less to check file integrity is the default.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

SYSTEM AND INFORMATION INTEGRITY

UBTU-22-653065 - Ubuntu 22.04 LTS must be configured so that audit configuration files are not write-accessible by unauthorized users.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654055 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use the kmod command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654060 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use modprobe command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654090 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the ssh-agent command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654105 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the sudo command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654120 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the unix_update command.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654170 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the delete_module system call.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654175 - Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the init_module and finit_module system calls.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654180 - Ubuntu 22.04 LTS must generate audit records for any use of the setxattr, fsetxattr, lsetxattr, removexattr, fremovexattr, and lremovexattr system calls.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

UBTU-22-654225 - Ubuntu 22.04 LTS must generate audit records when successful/unsuccessful attempts to modify the /etc/sudoers.d directory occur.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

AUDIT AND ACCOUNTABILITY

WN11-00-000075 - Only accounts responsible for the backup operations must be members of the Backup Operators group.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000110 - Simple TCP/IP Services must not be installed on the system.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000140 - Inbound exceptions to the firewall on Windows 11 domain workstations must only allow authorized remote management hosts.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000170 - The Server Message Block (SMB) v1 protocol must be disabled on the SMB client.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000190 - Orphaned security identifiers (SIDs) must be removed from user rights on Windows 11.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000210 - Bluetooth must be turned off unless approved by the organization.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-00-000395 - Windows 11 must not have portproxy enabled or in use.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-AU-000054 - The system must be configured to audit Logon/Logoff - Account Lockout failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000070 - The system must be configured to audit Logon/Logoff - Logon failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000075 - The system must be configured to audit Logon/Logoff - Logon successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000082 - Windows 11 must be configured to audit Object Access - File Share successes.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000084 - Windows 11 must be configured to audit Object Access - Other Object Access Events failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000505 - The Security event log size must be configured to 1024000 KB or greater.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000510 - The System event log size must be configured to 32768 KB or greater.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000515 - Windows 11 permissions for the Application event log must prevent access by non-privileged accounts.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-AU-000565 - Windows 11 must be configured to audit other Logon/Logoff Events Failures.DISA Microsoft Windows 11 STIG v2r3Windows

AUDIT AND ACCOUNTABILITY

WN11-CC-000007 - Windows 11 must cover or disable the built-in or attached camera when not in use.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000025 - The system must be configured to prevent IP source routing.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000063 - Windows 11 systems must use either Group Policy or an approved Mobile Device Management (MDM) product to enforce STIG compliance.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000068 - Windows 11 must be configured to enable Remote host allows delegation of non-exportable credentials.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000080 - Virtualization-based protection of code integrity must be enabled.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000090 - Group Policy objects must be reprocessed even if they have not changed.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000130 - Local users on domain-joined computers must not be enumerated.DISA Microsoft Windows 11 STIG v2r3Windows

CONFIGURATION MANAGEMENT

WN11-CC-000145 - Users must be prompted for a password on resume from sleep (on battery).DISA Microsoft Windows 11 STIG v2r3Windows

IDENTIFICATION AND AUTHENTICATION

WN11-CC-000150 - The user must be prompted for a password on resume from sleep (plugged in).DISA Microsoft Windows 11 STIG v2r3Windows

IDENTIFICATION AND AUTHENTICATION

WN16-CC-000555 - Windows Server 2016 must have PowerShell Transcription enabled.DISA Microsoft Windows Server 2016 STIG v2r10Windows

AUDIT AND ACCOUNTABILITY