| 1.158 WN11-CC-000260 | CIS Microsoft Windows 11 STIG v1.2.0 CAT II | Windows | CONFIGURATION MANAGEMENT |
| 3.5 Disable boot services if possible - Ensure file /etc/rc3.d/S16boot.server does not exist (Solaris 9) | CIS Solaris 9 v1.3 | Unix | CONFIGURATION MANAGEMENT |
| 5.4.1 Ensure password creation requirements are configured - dcredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - dcredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - lcredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - lcredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - lcredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - minlen | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - password-auth try_first_pass | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - system-auth retry=3 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - system-auth retry=3 | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - system-auth try_first_pass | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - ucredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - ucredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.4.1 Ensure password creation requirements are configured - ucredit | CIS Red Hat Enterprise Linux 7 STIG v2.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 8.3.1 (L1) Ensure unnecessary or superfluous functions inside VMs are disabled | CIS VMware ESXi 7.0 v1.5.0 L1 | VMware | CONFIGURATION MANAGEMENT |
| 9.3 Verify System Account Default Passwords - locked | CIS Solaris 11.2 L1 v1.1.0 | Unix | ACCESS CONTROL |
| 9.4 Verify System Account Default Passwords | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | ACCESS CONTROL |
| 11 - Managing SSHv2 - MAC Algorithms | NetApp Security Hardening Guide for ONTAP 9 v1.7.0 | Netapp_API | |
| 73.4 Ensure 'Allow search highlights' is set to '0' | CIS Microsoft Intune for Windows 11 v5.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| DTO-Outlook999 - The version of Outlook running on the system must be a supported version. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| DTOO211 - ActiveX Installs must be configured for proper restriction. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO216 - Publishing calendars to Office Online must be prevented. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO217 - Publishing to a Web Distributed and Authoring (DAV) server must be prevented. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO218 - Level of calendar details that a user can publish must be restricted. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO219 - Access restriction settings for published calendars must be configured. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO233 - Outlook Object Model scripts must be disallowed to run for public folders. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO239 - Outlook Security Mode must be configured to use Group Policy settings. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO246 - Scripts in One-Off Outlook forms must be disallowed. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO250 - Object Model Prompt behavior for programmatic address books must be configured. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO256 - Trusted add-ins behavior for email must be configured. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO257 - S/Mime interoperability with external clients for message handling must be configured. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| DTOO260 - Message formats must be set to use SMime. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| DTOO264 - Send all signed messages as clear signed messages must be configured. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO270 - External content and pictures in HTML email must be displayed. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO284 - Automatic download of Internet Calendar appointment attachments must be disallowed. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| DTOO314 - The default message format must be set to use Plain Text. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO315 - Outlook must be configured not to prompt users to choose security settings if default settings fail. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| DTOO320 - Check e-mail addresses against addresses of certificates being used must be disallowed. | DISA STIG Microsoft Outlook 2016 v2r4 | Windows | CONFIGURATION MANAGEMENT |
| SP13-00-000035 - SharePoint must identify data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | CONFIGURATION MANAGEMENT |
| SP13-00-000060 - SharePoint must reject or delay, as defined by the organization, network traffic generated above configurable traffic volume thresholds - maxBandwidth | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | CONFIGURATION MANAGEMENT |
| SP13-00-000065 - SharePoint must prevent the execution of prohibited mobile code. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| SP13-00-000075 - SharePoint must use replay-resistant authentication mechanisms for network access to privileged accounts. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| SP13-00-000085 - SharePoint must implement required cryptographic protections using cryptographic modules complying with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | IDENTIFICATION AND AUTHENTICATION |
| SP13-00-000105 - SharePoint must validate the integrity of security attributes exchanged between systems. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| SP13-00-000120 - SharePoint must maintain the confidentiality of information during aggregation, packaging, and transformation in preparation for transmission. When transmitting data, applications need to leverage transmission protection mechanisms such as TLS, SSL VPNs, or IPSec. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| SP13-00-000190 - When configuring SharePoint Central Administration, the port number selected must comply with DoD Ports and Protocol Management (PPSM) program requirements. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | CONFIGURATION MANAGEMENT |
| SP13-00-000195 - SharePoint-specific malware (i.e. anti-virus) protection software must be integrated and configured - 'Attempt to Clean Infected Documents is enabled' | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| SP13-00-000210 - The SharePoint farm service account (database access account) must be configured with the minimum privileges for the local server. | DISA Microsoft SharePoint 2013 STIG v2r4 | Windows | CONFIGURATION MANAGEMENT |
| WN12-GE-000007 - Permissions for program file directories must conform to minimum requirements | DISA Windows Server 2012 and 2012 R2 MS STIG v3r7 | Windows | ACCESS CONTROL |
