Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure jffs2 kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.9 Ensure firewire-core kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.5.7 Ensure Automatic Error Reporting is configuredCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.4 Ensure dns server services are not in useCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.8 Ensure message access server services are not in useCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.13 Ensure rsync services are not in useCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.15 Ensure snmp services are not in useCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure xinetd services are not in useCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.3.11 (L2) Ensure 'Control use of the Serial API' is set to 'Enabled: Do not allow any site to request access to serial ports via the Serial API'CIS Google Chrome Group Policy v1.1.0 L2Windows

CONFIGURATION MANAGEMENT

2.3.21 (L2) Ensure 'Control use of the File System API for writing' is set to 'Enabled: Do not allow any site to request write access to files and directories via the File System API'CIS Google Chrome Group Policy v1.1.0 L2Windows

CONFIGURATION MANAGEMENT

2.45 (L1) Ensure 'Enables managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'CIS Google Chrome Group Policy v1.1.0 L1Windows

CONFIGURATION MANAGEMENT

2.91 (L1) Ensure 'Allow Translator API' Is DisabledCIS Google Chrome Group Policy v1.1.0 L1Windows

CONFIGURATION MANAGEMENT

3.2.3 Ensure dccp kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.6 Ensure tipc kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.19 Ensure net.ipv4.conf.all.route_localnet is configuredCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

5.1 Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

5.2 Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

5.5 Ensure 'Geolocation Service (lfsvc)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

5.9 Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

5.14 Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

5.17 Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

5.22 Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

5.29 Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

5.40 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.5.8 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.6.4.2 Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.6.19.2.1 Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.3 Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.5 Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.10 Ensure 'Turn off the 'Order Prints' picture task' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.10 Ensure 'Turn off the 'Publish to Web' task for files and folders' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.20.1.12 Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.9.20.1.13 Ensure 'Turn off Windows Error Reporting' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.18.3 Ensure 'Enable App Installer Hash Override' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.18.4 Ensure 'Enable App Installer Local Archive Malware Scan Override' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.18.6 Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.18.7 Ensure 'Enable Windows Package Manager command line interfaces' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.43.2 Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 NGWindows

CONFIGURATION MANAGEMENT

18.10.57.3.3.5 Ensure 'Do not allow LPT port redirection' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.57.3.3.7 Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.57.3.3.7 Ensure 'Do not allow WebAuthn redirection' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.59.2 Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

18.10.59.6 Ensure 'Allow search and Cortana to use location' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

19.6.6.1.1 Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

CONFIGURATION MANAGEMENT

19.6.6.1.1 Ensure 'Turn off Help Experience Improvement Program' is set to 'Enabled'CIS Microsoft Windows Server 2025 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT