Item Search

NameAudit NamePluginCategory
5.5.1.9 Ensure inactive password lock is 0 days - individuals, groups, roles, and devices if the password expires.CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

CIS_Apple_macOS_14_Sonoma_STIG_v1.0.0_CAT_II.audit from CIS Apple macOS 14 Sonoma STIG v1.0.0CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT IIUnix
CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_II.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT IIUnix
CIS_Microsoft_IIS_10.0_Site_STIG_v1.0.0_CAT_II.audit from CIS Microsoft IIS 10.0 Site STIG v1.0.0CIS Microsoft IIS 10.0 Site STIG v1.0.0 CAT IIWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT IIWindows
CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT IIWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_I.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IWindows
CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT IIIWindows
CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT IIIWindows
CIS_Ubuntu_Linux_22.04_LTS_STIG_v1.0.0_CAT_III.audit from CIS Ubuntu Linux 22.04 LTS STIG v1.0.0CIS Ubuntu Linux 22.04 LTS STIG v1.0.0 CAT IIIUnix
CIS_Ubuntu_Linux_24.04_LTS_STIG_v1.0.0_CAT_I.audit from CIS Ubuntu Linux 24.04 LTS STIG v1.0.0CIS Ubuntu Linux 24.04 LTS STIG v1.0.0 CAT IUnix
CIS_VMware_vSphere_8.0_ESXi_STIG_v1.0.0_CAT_III_Unix.audit from CIS VMware vSphere 8.0 ESXi STIG v1.0.0CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT III UnixUnix
GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - AlphanumericMobileIron - DISA Google Android 16 COBO STIG v1r3MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - CharactersAirWatch - DISA Google Android 16 COPE STIG v1r1MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - NumbersAirWatch - DISA Google Android 16 COPE STIG v1r1MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - NumbersAirWatch - DISA Google Android 16 COBO STIG v1r3MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-17-005100 - Google Android 17 must be configured to not allow passwords that include more than four repeating or sequential characters - CharactersAirWatch - DISA Google Android 17 COPE STIG v1r1MDM

IDENTIFICATION AND AUTHENTICATION

SLES-15-010060 - The SUSE operating system file /etc/gdm/banner must contain the Standard Mandatory DoD Notice and Consent banner text.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL

SLES-15-010120 - The SUSE operating system must initiate a session lock after a 15-minute period of inactivity for the graphical user interface (GUI).DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL

SLES-15-010130 - The SUSE operating system must initiate a session lock after a 10-minute period of inactivity.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL

SLES-15-010340 - The SUSE operating system must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-010350 - The SUSE operating system must prevent unauthorized users from accessing system error messages.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-010354 - The SUSE operating system library directories must be owned by root.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-010359 - The SUSE operating system must have system commands owned by root.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-010480 - The SUSE operating system must disable the USB mass storage kernel module.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-020101 - The SUSE operating system must restrict privilege elevation to authorized personnel.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-020290 - The SUSE operating system must prevent the use of dictionary words for passwords.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-030015 - The SUSE operating system must audit any script or executable called by cron as root or by any privileged user.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030600 - The SUSE operating system must protect audit rules from unauthorized modification.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030600 - The SUSE operating system must protect audit rules from unauthorized modification.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

AUDIT AND ACCOUNTABILITY

SLES-15-030740 - The SUSE operating system must generate audit records for all uses of the unlink, unlinkat, rename, renameat, and rmdir system calls.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

AUDIT AND ACCOUNTABILITY

SLES-15-040020 - There must be no .shosts files on the SUSE operating system.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040030 - There must be no shosts.equiv files on the SUSE operating system.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040050 - The SUSE operating system file integrity tool must be configured to verify extended attributes.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040070 - All SUSE operating system local interactive users must have a home directory assigned in the /etc/passwd file.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040090 - All SUSE operating system local interactive user home directories must have mode 0750 or less permissive.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040120 - All SUSE operating system local interactive user initialization files executable search paths must contain only paths that resolve to the users home directory.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040130 - All SUSE operating system local initialization files must not execute world-writable programs.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040160 - SUSE operating system file systems that are being imported via Network File System (NFS) must be mounted to prevent files with the setuid and setgid bit set from being executed.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040220 - The SUSE operating system must be configured to not overwrite Pluggable Authentication Modules (PAM) configuration on package changes.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040300 - The SUSE operating system must not forward Internet Protocol version 4 (IPv4) source-routed packets.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040321 - The SUSE operating system must not forward Internet Protocol version 6 (IPv6) source-routed packets by default.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040330 - The SUSE operating system must prevent Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages from being accepted.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040340 - The SUSE operating system must not allow interfaces to accept Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirect messages by default.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040350 - The SUSE operating system must not allow interfaces to accept Internet Protocol version 6 (IPv6) Internet Control Message Protocol (ICMP) redirect messages by default.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040370 - The SUSE operating system must not send Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) redirects.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

CONFIGURATION MANAGEMENT

SLES-15-040380 - The SUSE operating system must not be performing Internet Protocol version 4 (IPv4) packet forwarding unless the system is a router.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040400 - All SUSE operating system files and directories must have a valid owner.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

SYSTEM AND INFORMATION INTEGRITY

SLES-15-040430 - The SUSE operating system must not allow unattended or automatic logon via the graphical user interface (GUI).DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT

SLES-15-040440 - The SUSE operating system must not allow unattended or automatic logon via SSH.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

CONFIGURATION MANAGEMENT