Item Search

NameAudit NamePluginCategory
1.3 Ensure Password Complexity is set to 3CIS Check Point Firewall L1 v1.1.0CheckPoint

IDENTIFICATION AND AUTHENTICATION

1.3.1 Ensure 'Minimum Password Complexity' is enabledCIS Palo Alto Firewall 11 v1.2.0 L1Palo_Alto

IDENTIFICATION AND AUTHENTICATION

1.4.5 Ensure version 7.2 or newer booted with a BIOS have a unique name for the grub superusers accountCIS Amazon Linux 2 STIG v2.0.1 STIGUnix

ACCESS CONTROL

1.112 AZLX-23-002210CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

2.1.9 Ensure network file system services are not in useCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS Oracle Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS Rocky Linux 8 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS Rocky Linux 8 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.9 Ensure network file system services are not in useCIS AlmaLinux OS 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.10 Ensure network file system services are not in useCIS Oracle Linux 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.10 Ensure network file system services are not in useCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.9 Ensure network file system services are not in useCIS Oracle Linux 7 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.9 Ensure network file system services are not in useCIS Amazon Linux 2 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.9 Ensure network file system services are not in useCIS Oracle Linux 7 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.2 Secure the Database Container DirectoryCIS IBM DB2 12.1 v1.0.0 Database Level 1IBM_DB2DB

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.5.1.8 Ensure password expiration is 60 Day maximum for existing passwordsCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.11 Ensure Logging Is Enabled for SudoCIS Apple macOS 26 Tahoe v1.1.0 L1Unix

ACCESS CONTROL

5.11 Ensure Logging Is Enabled for SudoCIS Apple macOS 15.0 Sequoia v2.1.0 L1Unix

ACCESS CONTROL

ALMA-09-003320 - The AlmaLinux 9 SSH server must be configured to use only DOD-approved encryption ciphers employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH server connections.DISA Cloud Linux AlmaLinux OS 9 STIG v1r7Unix

ACCESS CONTROL

AZLX-23-001310 - Amazon Linux 2023, for PKI-based authentication, must validate certificates by constructing a certification path (which includes status information) to an accepted trust anchor.DISA Amazon Linux 2023 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

AZLX-23-002265 - Amazon Linux 2023 audit logs must be group-owned by root or by a restricted logging group to prevent unauthorized read access.DISA Amazon Linux 2023 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

AZLX-23-002380 - Amazon Linux 2023 must enforce password complexity by requiring that at least one special character be used.DISA Amazon Linux 2023 STIG v1r4Unix

IDENTIFICATION AND AUTHENTICATION

CIS_Kubernetes_v2.0.1_L1_Master_Node.audit from CIS Kubernetes 2.0.1CIS Kubernetes v2.0.1 L1 Master NodeUnix
CIS_Kubernetes_v2.0.1_L2_Master_Node.audit from CIS Kubernetes 2.0.1CIS Kubernetes v2.0.1 L2 Master NodeUnix
CIS_Mozilla_Firefox_102_ESR_v1.0.0_Linux_Level1.audit for CIS Mozilla Firefox 102 ESR v1.0.0CIS Mozilla Firefox 102 ESR Linux L1 v1.0.0Unix
CIS_MySQL_5.7_Community_Benchmark_v2.0.0_Level_1_OS_Linux.audit from CIS Oracle MySQL 5.7 Community Edition BenchmarkCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix
CIS_MySQL_5.7_Enterprise_Benchmark_v2.0.0_Level_2_OS_Linux.audit from CIS Oracle MySQL 5.7 Enterprise Edition BenchmarkCIS MySQL 5.7 Enterprise Linux OS L2 v2.0.0Unix
CIS_NGINX_v3.0.0_L1_Webserver.audit from CIS NGINX 3.0.0CIS NGINX v3.0.0 L1 WebserverUnix
CIS_Oracle_Database_23ai_v1.1.0_L1_RDBMS_On_Linux_Host_OS_Unix.audit from CIS Oracle Database 23ai Benchmark v1.1.0CIS Oracle Database 23ai v1.1.0 L1 RDBMS On Linux Host OS UnixUnix
DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - groupMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix

ACCESS CONTROL

DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - groupMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

ACCESS CONTROL

DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - userMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Local Client v1r6Unix

ACCESS CONTROL

DTAVSEL-202 - The nails user and nailsgroup group must be restricted to the least privilege access required for the intended role - userMcAfee Virus Scan Enterprise for Linux 1.9x/2.0x Managed Client v1r5Unix

ACCESS CONTROL

FFOX-00-000007 - Firefox must be configured to disable form fill assistance.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

FFOX-00-000008 - Firefox must be configured to not use a password store with or without a master password.DISA Mozilla Firefox STIG v6r8 LinuxUnix

CONFIGURATION MANAGEMENT

FFOX-00-000008 - Firefox must be configured to not use a password store with or without a master password.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

FFOX-00-000015 - Firefox development tools must be disabled.DISA STIG Mozilla Firefox MacOS v6r8Unix

SYSTEM AND INFORMATION INTEGRITY

FFOX-00-000034 - Firefox accounts must be disabled.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

FFOX-00-000036 - Firefox feedback reporting must be disabled.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

FFOX-00-000039 - Firefox Studies must be disabled.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

MOTO-09-010800 - Motorola Android Pie devices must have the latest available Motorola Android Pie operating system installed.MobileIron - DISA Motorola Android Pie.x COPE v1r2MDM

CONFIGURATION MANAGEMENT

MOTO-09-010800 - Motorola Android Pie devices must have the latest available Motorola Android Pie operating system installed.MobileIron - DISA Motorola Android Pie.x COBO v1r2MDM

CONFIGURATION MANAGEMENT

MOTO-09-010800 - Motorola Android Pie devices must have the latest available Motorola Android Pie operating system installed.AirWatch - DISA Motorola Android Pie.x COPE v1r2MDM

CONFIGURATION MANAGEMENT