Item Search

NameAudit NamePluginCategory
1.3.24 - /etc/inetd.conf - 'telnet has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.33 - /etc/inetd.conf - 'talk has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.39 - /etc/inetd.conf - 'echo-tcp has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.44 - /etc/inetd.conf - 'sprayd has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.45 - /etc/inetd.conf - 'klogin has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.48 - /etc/inetd.conf - 'tftp has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

1.3.49 - /etc/inetd.conf - 'imap has been disabled'CIS AIX 5.3/6.1 L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

2.2 Only enable telnetd if absolutely necessaryCIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

2.4 Only enable rlogin/rsh/rcp if absolutely necessary - Uncomment service shell in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.4 Only enable rlogin/rsh/rcp if absolutely necessary (shell)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

2.5 Only enable TFTP if absolutely necessaryCIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

2.6 Only enable printer service if absolutely necessary - Uncomment service printer in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.07 otrace - 'Disable'CIS v1.1.0 Oracle 11g OS L1Unix

CONFIGURATION MANAGEMENT

2.8 Only enable CDE-related daemons if absolutely necessary - Uncomment service 100083 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.10 OEM objects - 'Remove if OEM not used'CIS v1.1.0 Oracle 11g OS Windows Level 2Windows

CONFIGURATION MANAGEMENT

2.11 Only enable Kerberos-related daemons if absolutely necessary - Uncomment service 100134 in /etc/inet/inetd.conf (Solaris 8 or later)CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.1 Disable login prompts on serial ports (ttyd0)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.3.3 Disable DAS discoverability - 'discover = disable'CIS IBM DB2 OS L2 v1.2.0Unix

CONFIGURATION MANAGEMENT

3.7 Only enable other RPC-based services if absolutely necessary (rpc_lockd_enable)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.7 Only enable Windows-compatibility servers if absolutely necessary - Ensure file /etc/rc3.d/S90samba does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.8 Only enable the NFS server if absolutely necessary (mountd_enable)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.8 Only enable the NFS server if absolutely necessary (nfs_server_enable)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.12 Only enable NIS if absolutely necessary (nis_ypxfrd_enable)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.13 Only enable NIS client daemons if absolutely necessary (nis_client_enable)CIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.14 Only enable the printer daemons if absolutely necessaryCIS FreeBSD v1.0.5Unix

CONFIGURATION MANAGEMENT

3.15 Only enable the printer daemons if absolutely necessary - Ensure file /etc/rc2.d/S80lp does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.18 Only enable Web server if absolutely necessary - Ensure file /etc/rc3.d/S50apache does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

4.31 init.ora - 'sec_return_server_release_banner = FALSE'CIS v1.1.0 Oracle 11g OS Windows Level 2Windows

CONFIGURATION MANAGEMENT

4.43 listener.ora - 'extproc_dlls = ONLY'CIS v1.1.0 Oracle 11g OS L1Unix

CONFIGURATION MANAGEMENT

5.1.1 Ensure NIS is not installedCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.1.1 Ensure NIS is not installedCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.1.3 Ensure rsh client is not installed - rsh-clientCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.1.3 Ensure rsh client is not installed - rsh-redone-clientCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.1.3 Ensure rsh client is not installed - rsh-reload-clientCIS Debian Linux 7 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

5.1.5 Ensure talk client is not installedCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

5.8 (L2) Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

CONFIGURATION MANAGEMENT

5.15 (L2) Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

CONFIGURATION MANAGEMENT

5.19 (L2) Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

CONFIGURATION MANAGEMENT

6.3 Ensure that server-side scripting is disabled if not neededCIS MongoDB 6 v1.2.0 L2 MongoDBUnix

CONFIGURATION MANAGEMENT

6.6 Ensure LDAP is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

6.17 Ensure Biosdevname is not enabledCIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

18.9.59.3.3.4 (L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

CONFIGURATION MANAGEMENT

Enables or disables Windows Game Recording and BroadcastingMSCT Windows 11 v23H2 v1.0.0Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

Enables or disables Windows Game Recording and BroadcastingMSCT Windows 11 v1.0.0Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

Enables or disables Windows Game Recording and BroadcastingMSCT Windows 11 v22H2 v1.0.0Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

Enables or disables Windows Game Recording and BroadcastingMSCT Windows 10 v21H1 v1.0.0Windows

ACCESS CONTROL, CONFIGURATION MANAGEMENT

Ensure NIS Client is not installed - dpkgTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure rsh client is not installed - dpkgTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure talk client is not installed - dpkgTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT

Ensure the MCS Translation Service (mcstrans) is not installed - dpkgTenable Cisco Firepower Management Center OS Best Practices AuditUnix

CONFIGURATION MANAGEMENT