Item Search

NameAudit NamePluginCategory
1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 11 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 11 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS SUSE Linux Enterprise 15 v2.0.1 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Red Hat Enterprise Linux 10 v1.0.1 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Rocky Linux 8 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Oracle Linux 7 v4.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure hfsplus kernel module is not availableCIS Rocky Linux 10 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure hfsplus kernel module is not availableCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure hfsplus kernel module is not availableCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabledCIS Debian Linux 10 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - lsmodCIS Amazon Linux v2.1.0 L1Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled (lsmod)CIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of hfsplus filesystems is disabledCIS Amazon Linux 2023 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.1.3 Ensure iCloud Drive Document and Desktop Sync Is DisabledCIS Apple macOS 26 Tahoe v1.1.0 L2Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.13 Audit Siri SettingsCIS Apple macOS 10.14 v2.0.0 L1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.22 Disable Mounting of hfsplus FilesystemsCIS Debian Linux 7 L2 v1.0.0Unix

CONFIGURATION MANAGEMENT

7.12 Siri on macOSCIS Apple macOS 10.12 L1 v1.2.0Unix

CONFIGURATION MANAGEMENT

7.12 Siri on macOSCIS Apple macOS 10.13 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

ESXI-06-000015 - The SSH daemon must not allow authentication using an empty password.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

IDENTIFICATION AND AUTHENTICATION

ESXI-06-000027 - The SSH daemon must set a timeout interval on idle sessions.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

ACCESS CONTROL

ESXI-06-000028 - The SSH daemon must limit connections to a single session.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

ACCESS CONTROL

ESXI-06-000044 - The system must enable kernel core dumps.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

SYSTEM AND COMMUNICATIONS PROTECTION

ESXI-06-000056 - The system must configure the firewall to restrict access to services running on the host.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

CONFIGURATION MANAGEMENT

ESXI-06-100047 - The VMM must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs and guest VMs by verifying Image Profile and VIP Acceptance Levels.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

CONFIGURATION MANAGEMENT

ESXI-06-200047 - The VMM must implement cryptographic mechanisms to prevent unauthorized modification of all information at rest on all VMM components by verifying Image Profile and VIP Acceptance Levels.DISA VMware vSphere ESXi 6.0 STIG v1r5 UnixUnix

CONFIGURATION MANAGEMENT

GOOG-15-002800 - Google Android 15 must be configured to enable audit logging.AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

AUDIT AND ACCOUNTABILITY

GOOG-15-006100 - Google Android 15 must be configured to not allow passwords that include more than four repeating or sequential characters - AlphanumericMobileIron - DISA Google Android 15 COPE STIG v1r5MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-15-006100 - Google Android 15 must be configured to not allow passwords that include more than four repeating or sequential characters - NumbersAirWatch - DISA Google Android 15 COPE STIG v1r5MDM

IDENTIFICATION AND AUTHENTICATION

GOOG-15-006600 - Google Android 15 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-008600 - Google Android 15 must be configured to not allow backup of [all applications, configuration data] to remote systems.AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-15-008600 - Google Android 15 must be configured to not allow backup of [all applications, configuration data] to remote systems.MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-15-008900 - Google Android 15 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-15-008900 - Google Android 15 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes].MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-15-010100 - The Google Android 15 work profile must be configured to prevent users from adding personal email accounts to the work email app.MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-010300 - Google Android 15 must be provisioned as a fully managed device and configured to create a work profile.MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-010500 - The Google Android 15 work profile must be configured to disable the autofill services.MobileIron - DISA Google Android 15 COBO STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-012200 - Google Android 15 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)] - for example, USB].MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

ACCESS CONTROL

GOOG-15-012400 - Google Android 15 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub.MobileIron - DISA Google Android 15 COBO STIG v1r5MDM

SYSTEM AND COMMUNICATIONS PROTECTION

GOOG-15-013000 - Google Android 15 must disable the user's ability to wipe the device.MobileIron - DISA Google Android 15 COBO STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-013300 - Google Android 15 must disable screen capture.AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-013600 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.MobileIron - DISA Google Android 15 COBO STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-013600 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.AirWatch - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT

GOOG-15-013600 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.MobileIron - DISA Google Android 15 COPE STIG v1r5MDM

CONFIGURATION MANAGEMENT