Item Search

NameAudit NamePluginCategory
5.2.1 Ensure Password Account Lockout Threshold Is ConfiguredCIS Apple macOS 14.0 Sonoma Cloud-tailored v1.1.0 L1Unix

ACCESS CONTROL

5.2.1 Ensure Password Account Lockout Threshold Is ConfiguredCIS Apple macOS 15.0 Sequoia Cloud-tailored v1.0.0 L1Unix

ACCESS CONTROL

5.2.1 Ensure Password Account Lockout Threshold Is ConfiguredCIS Apple macOS 13.0 Ventura Cloud-tailored v1.1.0 L1Unix

ACCESS CONTROL

5.3.3.1.1 Ensure password failed attempts lockout is configuredCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

ACCESS CONTROL

6.1.5 Ensure permissions on /etc/group- are configuredCIS Amazon Linux 2023 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.1 Ensure access to /etc/passwd is configuredCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.1 Ensure access to /etc/passwd is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.1 Ensure access to /etc/passwd is configuredCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.1 Ensure access to /etc/passwd is configuredCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.1 Ensure access to /etc/passwd is configuredCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.2 Ensure access to /etc/passwd- is configuredCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.2 Ensure access to /etc/passwd- is configuredCIS Oracle Linux 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.2 Ensure access to /etc/passwd- is configuredCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.3 Ensure access to /etc/group is configuredCIS AlmaLinux OS 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.3 Ensure access to /etc/group is configuredCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.3 Ensure access to /etc/group is configuredCIS AlmaLinux OS 8 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.4 Ensure access to /etc/group- is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.4 Ensure access to /etc/group- is configuredCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.4 Ensure access to /etc/group- is configuredCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure access to /etc/shells is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure access to /etc/shells is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure access to /etc/shells is configuredCIS AlmaLinux OS 10 v1.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure permissions on /etc/shells are configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

7.1.9 Ensure permissions on /etc/shells are configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

90.6 Ensure 'Change System Time' is set to 'Administrators, LOCAL SERVICE'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

CIS_MongoDB_5_v1.2.0_L1_Windows.audit from CIS MongoDB 5 v1.2.0CIS MongoDB 5 v1.2.0 L1 WindowsWindows
CIS_MongoDB_5_v1.2.0_L2_Windows.audit from CIS MongoDB 5 v1.2.0CIS MongoDB 5 v1.2.0 L2 WindowsWindows
F5BI-AP-300069 - The F5 BIG-IP appliance providing content filtering must generate a log record when unauthorized network services are detected.DISA F5 BIG-IP TMOS ALG STIG v1r3F5

SYSTEM AND INFORMATION INTEGRITY

GEN000000-LNX00320 - The system must not have special privilege accounts, such as shutdown and halt - /etc/passwd halt'DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

GEN000000-LNX00320 - The system must not have special privilege accounts, such as shutdown and halt - /etc/passwd reboot'DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

GEN000000-LNX00320 - The system must not have special privilege accounts, such as shutdown and halt - /etc/shadow reboot'DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION

GEN000000-LNX00380 - An X server must have none of the following options enabled: -ac, -core (except for debugging purposes), or -nolock - '-core'DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN000000-LNX00380 - An X server must have none of the following options enabled: -ac, -core (except for debugging purposes), or -nolock - '-nolock'DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN000000-LNX00640 - The /etc/securetty file must be owned by root.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN000000-LNX001433 - The /etc/gshadow file must have mode 0400.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN000120 - System security patches and updates must be installed and up-to-date.DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

GEN000140-2 - A file integrity baseline including cryptographic hashes must be created - 'cryptographic hash is used 'DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN000140-3 - A file integrity baseline including cryptographic hashes must be maintained - 'database has been configured'DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN000241 - The system clock must be synchronized continuously.DISA STIG for Oracle Linux 5 v2r1Unix

CONFIGURATION MANAGEMENT

GEN000242 - The system must use at least two time sources for clock synchronization - '/etc/ntp.conf'DISA STIG for Oracle Linux 5 v2r1Unix

AUDIT AND ACCOUNTABILITY

GEN000250 - The time synchronization configuration file (such as /etc/ntp.conf) must be owned by root.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN000252 - The time synchronization configuration file (such as /etc/ntp.conf) must have mode 0640 or less permissive.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN000290 - The system must not have unnecessary accounts.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN000440 - Successful and unsuccessful logins and logouts must be logged - '/var/log/btmp'DISA STIG for Oracle Linux 5 v2r1Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

GEN000450 - The system must limit users to 10 simultaneous system logins, or a site-defined number, in accordance with operational requirements.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL

GEN000585 - The system must enforce compliance of the entire password during authentication - '/etc/shadow'DISA STIG for Oracle Linux 5 v2r1Unix

IDENTIFICATION AND AUTHENTICATION

GEN000920 - The root accounts home directory (other than /) must have mode 0700 or less permissive - other than / must have mode 0700.DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

GEN001060 - The system must log successful and unsuccessful access to the root account - '-Fmsgtype=USER_END must not exist'DISA STIG for Oracle Linux 5 v2r1Unix

AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT

GEN001140 - System files and directories must not have uneven access permissions - '/usr/sbin/*'DISA STIG for Oracle Linux 5 v2r1Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

ZEBR-14-006000 - Zebra Android 14 must be configured to enforce a minimum password length of six characters.AirWatch - DISA Zebra Android 14 COPE STIG v1r2MDM

IDENTIFICATION AND AUTHENTICATION