Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure ext2fs kernel module is not availableCIS FreeBSD 14 v1.0.1 L1Unix

CONFIGURATION MANAGEMENT

1.3.4.1 Ensure Secure by Default is selected during the installationCIS IBM AIX 7 v1.2.0 L1Unix

CONFIGURATION MANAGEMENT

1.5.1 Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'CIS Microsoft Defender Antivirus v1.0.0 L1 ServerWindows

CONFIGURATION MANAGEMENT

2.2.1.12 Ensure 'Allow sending diagnostic and usage data to Apple' is set to 'Disabled'AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L1MDM

CONFIGURATION MANAGEMENT

2.2.1.12 Ensure 'Allow sending diagnostic and usage data to Apple' is set to 'Disabled'MobileIron - CIS Apple iPadOS 17 v1.1.0 End User Owned L1MDM

CONFIGURATION MANAGEMENT

2.2.1.12 Ensure 'Allow sending diagnostic and usage data to Apple' is set to 'Disabled'AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1MDM

CONFIGURATION MANAGEMENT

2.2.7 Ensure snmp services are not in useCIS FreeBSD 14 v1.0.1 L1Unix

CONFIGURATION MANAGEMENT

2.5 Ensure the Autoindex Module Is DisabledCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

CONFIGURATION MANAGEMENT

2.6 Ensure the Proxy Modules Are Disabled if not in useCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

CONFIGURATION MANAGEMENT

4.1.2 Review Emergency ResetAirWatch - CIS Apple iPadOS 17 Institutionally Owned L2MDM

CONFIGURATION MANAGEMENT

4.1.2 Review Emergency ResetMobileIron - CIS Apple iPadOS 17 Institutionally Owned L2MDM

CONFIGURATION MANAGEMENT

4.1.4 Ensure 'App Privacy Report' is enabledMobileIron - CIS Apple iPadOS 17 Institutionally Owned L2MDM

CONFIGURATION MANAGEMENT

4.2.6 Ensure legacy remote daemon support is not availableCIS IBM AIX 7 v1.2.0 L1Unix

CONFIGURATION MANAGEMENT

4.2.8 Ensure sshd DisableForwarding is enabledCIS FreeBSD 14 v1.0.1 L1Unix

CONFIGURATION MANAGEMENT

4.3.1.4 Ensure qdaemon service is not in useCIS IBM AIX 7 v1.2.0 L1Unix

CONFIGURATION MANAGEMENT

5.1 Ensure 'Bluetooth Audio Gateway Service (BTAGService)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

5.1 Ensure 'Print Spooler (Spooler)' is set to 'Disabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

5.9 Ensure Old HTTP Protocol Versions Are DisallowedCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

5.11 Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

5.16 Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

5.17 Ensure 'Print Spooler (Spooler)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

5.18 Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

5.20 Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

5.21 Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

5.24 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

5.33 Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

5.39 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

6.6 Ensure routing tables for VPC peering are "least access"CIS Amazon Web Services Foundations v7.0.0 L2amazon_aws

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

8.1.4 Configure the Service Name for TLS (SSL_SVCENAME)CIS IBM DB2 12.1 v1.0.0 Windows OS Level 1Windows

PLANNING, SYSTEM AND SERVICES ACQUISITION

18.6.4.2 Ensure 'Turn off default IPv6 DNS Servers' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.9.20.1.5 Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.9.20.1.8 Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.20.1.8 Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.20.1.9 Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.20.1.9 Ensure 'Turn off Search Companion content file updates' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.9.20.1.9 Ensure 'Turn off the 'Order Prints' picture task' is set to 'Enabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.9.20.1.12 Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.9.49.5.1 Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.51.1 Ensure 'Turn off the advertising ID' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.9.51.1 Ensure 'Turn off the advertising ID' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.13.2 Ensure 'Turn off cloud optimized content' is set to 'Enabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.13.2 Ensure 'Turn off cloud optimized content' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.18.1 Ensure 'Enable App Installer' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.18.3 Ensure 'Enable App Installer Hash Override' is set to 'Disabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L1 MSWindows

CONFIGURATION MANAGEMENT

18.10.57.2.2 Ensure 'Disable Cloud Clipboard integration for server-to-client data transfer' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.57.3.2.1 Ensure 'Restrict Remote Desktop Services users to a single Remote Desktop Services session' is set to 'Enabled'CIS Microsoft Windows Server 2022 Stand-alone v2.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.57.3.3.5 Ensure 'Do not allow LPT port redirection' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.90.2.2 Ensure 'Allow remote server management through WinRM' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT