Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabledCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.4 Ensure nosuid option set on /tmp partitionCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.8 Ensure nodev option set on /var/tmp partitionCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.18 Ensure nodev option set on removable media partitionsCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.4.2 Ensure bootloader password is setCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.5.2 Ensure XD/NX support is enabledCIS Red Hat 6 Workstation L1 v3.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.3 Ensure address space layout randomization (ASLR) is enabled - sysctlCIS Red Hat 6 Workstation L1 v3.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

1.6.1.6 Ensure no unconfined daemons existCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.6.1.8 Ensure the MCS Translation Service (mcstrans) is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure local login warning banner is configured properly - banner textCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure local login warning banner is configured properly - mrsvCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.3 Ensure remote login warning banner is configured properly - banner textCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.7.6 Ensure permissions on /etc/issue.net are configuredCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

1.8.2 Ensure GDM login banner is configured - banner message enabledCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.1.3 Ensure discard services are not enabled - discard-dgramCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.1.4 Ensure echo services are not enabled - echo-dgramCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.1.5 Ensure time services are not enabled - time-streamCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.2.1.2 Ensure chrony is configured - NTP serverCIS Red Hat 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.1.2 Ensure chrony is configured - OPTIONSCIS Red Hat 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.1.3 Ensure ntp is configured - OPTIONS or ExecStart -u ntp:ntpCIS Red Hat 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

2.2.9 Ensure HTTP server is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.2.14 Ensure NIS server is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.2.15 Ensure telnet-server is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3.1 Ensure NIS Client is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3.4 Ensure telnet client is not installedCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

3.2.2 Ensure packet redirect sending is disabled - 'net.ipv4.conf.all.send_redirects = 0 /etc/sysctl.conf /etc/sysctl.d/*'CIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

5.3.3 Ensure permissions on SSH public host key files are configuredCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

5.3.6 Ensure SSH LogLevel is appropriate - sshdCIS Red Hat 6 Workstation L1 v3.0.0Unix

AUDIT AND ACCOUNTABILITY

5.3.8 Ensure SSH MaxAuthTries is set to 4 or lessCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.3.17 Ensure SSH Idle Timeout Interval is configured - ClientAliveIntervalCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

5.3.18 Ensure SSH LoginGraceTime is set to one minute or lessCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

5.3.19 Ensure SSH warning banner is configuredCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

5.3.22 Ensure SSH MaxStartups is configured - sshd_configCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.4.1 Ensure password creation requirements are configured - password-auth lcreditCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.4.1 Ensure password creation requirements are configured - system-auth retry=3CIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.4.3 Ensure password reuse is limited - password-authCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.5.5 Ensure default user umask is configured - system wide defaultCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL, MEDIA PROTECTION

5.27 (L1) Ensure 'Server (LanmanServer)' is set to 'Disabled'CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1Windows

CONFIGURATION MANAGEMENT

6.2.1 Ensure accounts in /etc/passwd use shadowed passwordsCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwdCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadowCIS Red Hat 6 Workstation L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.18 Ensure no duplicate user names existCIS Red Hat 6 Workstation L1 v3.0.0Unix

ACCESS CONTROL

8.3.4 (L1) Ensure standard processes are used for VM deploymentCIS VMware ESXi 7.0 v1.5.0 L1VMware

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

CIS_Microsoft_Windows_Server_2022_Stand-alone_v2.0.0_L2_MS.audit from CIS Microsoft Windows Server 2022 Stand-alone 2.0.0CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows
CIS_Microsoft_Windows_Server_2022_Stand-alone_v2.0.0_NG_MS.audit from CIS Microsoft Windows Server 2022 Stand-alone 2.0.0CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 NG MSWindows
CIS_MS_Windows_Server_2008_v3.3.1_L2_DC.audit from CIS MS Windows Server 2008 non-R2 Benchmark v3.3.1CIS Microsoft Windows Server 2008 Domain Controller Level 2 v3.3.1Windows
CIS_MS_Windows_Server_2008_v3.3.1_L2_MS.audit from CIS MS Windows Server 2008 non-R2 Benchmark v3.3.1CIS Microsoft Windows Server 2008 Member Server Level 2 v3.3.1Windows
CIS_Oracle_Server_11g_R2_Windows_v2.2.0.audit from CIS Oracle Database Server 11g R2 benchmark v2.2.0CIS Oracle Server 11g R2 Windows v2.2.0Windows
CIS_Ubuntu_16.04_LTS_Server_v2.0.0_L2.audit from CIS Ubuntu 16.04 LTS Server Benchmark L2 v2.0.0CIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix