Item Search

NameAudit NamePluginCategory
1.3 Disable MySQL Command History - .mysql_historyCIS MySQL 5.6 Community Linux OS L2 v2.0.0Unix

MEDIA PROTECTION

1.3 Disable MySQL Command History - .mysql_historyCIS MySQL 5.6 Enterprise Linux OS L2 v2.0.0Unix

MEDIA PROTECTION

1.3 Disable MySQL Command History - ~/.mysql_historyCIS MySQL 5.6 Enterprise Linux OS L2 v2.0.0Unix

MEDIA PROTECTION

1.3 Disable MySQL Command History - ~/.mysql_historyCIS MySQL 5.6 Community Linux OS L2 v2.0.0Unix

MEDIA PROTECTION

1.3.1 Ensure 'Minimum Password Complexity' is enabledCIS Palo Alto Firewall 10 v1.3.0 L1Palo_Alto

IDENTIFICATION AND AUTHENTICATION

1.3.1 Ensure 'Minimum Password Complexity' is enabledCIS Palo Alto Firewall 9 v1.1.0 L1Palo_Alto

IDENTIFICATION AND AUTHENTICATION

1.117 AZLX-23-002235CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY

3.1.5 Secure permissions for default database file pathCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
3.1.5 Secure permissions for default database file path (Scored)CIS IBM DB2 v10 v1.1.0 Linux OS Level 2Unix
3.1.6 Secure permissions for default database file pathCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS WindowsWindows

AUDIT AND ACCOUNTABILITY

3.1.6 Secure permissions for default database file pathCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS WindowsWindows

AUDIT AND ACCOUNTABILITY

3.1.6 Secure permissions for default database file pathCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

3.1.6 Secure permissions for default database file pathCIS IBM DB2 9 Benchmark v3.0.1 Level 2 OS LinuxUnix

AUDIT AND ACCOUNTABILITY

3.3.1 Secure Db2 Runtime LibraryCIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

ACCESS CONTROL, MEDIA PROTECTION

3.3.1 Secure Db2 Runtime LibraryCIS IBM DB2 11 v1.2.0 Linux OS Level 1Unix

ACCESS CONTROL, MEDIA PROTECTION

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS AlmaLinux OS 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS AlmaLinux OS 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.7 Ensure reverse path filtering is enabledCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

3.3.7 Ensure reverse path filtering is enabledCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION

3.4.1.2 Ensure a single firewall configuration utility is in useCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

3.4.1.2 Ensure a single firewall configuration utility is in useCIS Red Hat Enterprise Linux 7 v4.0.0 L1 WorkstationUnix

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

4.5.2.2 Ensure root user umask is configuredCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.2.7 Ensure sudo authentication timeout is configuredCIS Amazon Linux 2 STIG v2.0.1 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.3.2.2.4 Ensure password complexity is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION

5.4.2.6 Ensure root user umask is configuredCIS Red Hat Enterprise Linux 8 v4.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

8.1.4 Configure the Service Name for TLS (SSL_SVCENAME)CIS IBM DB2 12.1 v1.0.0 Linux OS Level 1Unix

PLANNING, SYSTEM AND SERVICES ACQUISITION

8.1.4 Configure the Service Name for TLS (SSL_SVCENAME)CIS IBM DB2 11 v1.2.0 Linux OS Level 1Unix

PLANNING, SYSTEM AND SERVICES ACQUISITION

18.9.100.1 (L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

AUDIT AND ACCOUNTABILITY

18.10.87.1 (L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 DCWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 MSWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2Windows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BL NGWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NGWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BLWindows

AUDIT AND ACCOUNTABILITY

18.10.88.1 Ensure 'Turn on PowerShell Script Block Logging' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

AUDIT AND ACCOUNTABILITY

AZLX-23-001240 - Amazon Linux 2023 must not permit direct logons to the root account using remote access via SSH.DISA Amazon Linux 2023 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

AZLX-23-002375 - Amazon Linux 2023 must enforce a minimum 15-character password length.DISA Amazon Linux 2023 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

CIS_NGINX_v3.0.0_L1_Loadbalancer.audit from CIS NGINX 3.0.0CIS NGINX v3.0.0 L1 LoadbalancerUnix
CIS_NGINX_v3.0.0_L2_Proxy.audit from CIS NGINX 3.0.0CIS NGINX v3.0.0 L2 ProxyUnix
CIS_NGINX_v3.0.0_L2_Webserver.audit from CIS NGINX 3.0.0CIS NGINX v3.0.0 L2 WebserverUnix
DTAVSEL-004 - The McAfee VirusScan Enterprise for Linux 1.9.x/2.0.x On-Access scanner must be configured to decompress archives when scanning.McAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

SYSTEM AND INFORMATION INTEGRITY

FFOX-00-000005 - Firefox must be configured to not automatically update installed add-ons and plugins.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

FFOX-00-000008 - Firefox must be configured to not use a password store with or without a master password.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

FFOX-00-000034 - Firefox accounts must be disabled.DISA Mozilla Firefox STIG v6r8 LinuxUnix

CONFIGURATION MANAGEMENT

FFOX-00-000036 - Firefox feedback reporting must be disabled.DISA Mozilla Firefox STIG v6r8 LinuxUnix

CONFIGURATION MANAGEMENT

RHEL-09-212045 - RHEL 9 must clear memory when it is freed to prevent use-after-free attacks.DISA Red Hat Enterprise Linux 9 STIG v2r9Unix

SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY