Item Search

NameAudit NamePluginCategory
1.6.1 Ensure system wide crypto policy is not set to legacyCIS Red Hat Enterprise Linux 10 v1.0.1 L1 ServerUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.6.1 Ensure system wide crypto policy is not set to legacyCIS Red Hat Enterprise Linux 10 v1.0.1 L1 WorkstationUnix

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

1.7.6 Do not admit root containersCIS Kubernetes 1.13 Benchmark v1.4.1 L2Unix

CONFIGURATION MANAGEMENT

2.1.8 Ensure network file system services are not in useCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.10 Ensure network file system services are not in useCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.12 Ensure rpcbind services are not in useCIS Ubuntu Linux 22.04 LTS v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.12 Ensure rpcbind services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.12 Ensure rpcbind services are not in useCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.15 Ensure rpcbind services are not in useCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.15 Ensure rpcbind services are not in useCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.1 Ensure detailed logging is enabledCIS NGINX v3.0.0 L1 WebserverUnix

AUDIT AND ACCOUNTABILITY

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS Rocky Linux 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Debian Linux 12 v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Rocky Linux 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Oracle Linux 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

5.5.1.2 Ensure minimum days between password changes is configured - login.defsCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

5.5.1.2 Ensure minimum days between password changes is configured - password shadowCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIGUnix

IDENTIFICATION AND AUTHENTICATION

6.1.2 Configuring syslog - remote logging - *.info;auth.none in /etc/syslog.confCIS IBM AIX 7.1 L2 v2.1.0Unix

AUDIT AND ACCOUNTABILITY

6.4 Ensure Log Storage and Rotation Is Configured Correctly - '/etc/logrotate.conf rotate > 13'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002165 - Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /var/log/lastlog.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

AZLX-23-002250 - Amazon Linux 2023 must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA Amazon Linux 2023 STIG v1r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

AZLX-23-002465 - Amazon Linux 2023 must automatically lock an account until the locked account is released by an administrator when three unsuccessful logon attempts in 15 minutes occur.DISA Amazon Linux 2023 STIG v1r4Unix

ACCESS CONTROL

CIS_MariaDB_10.6_Benchmark_v1.1.0_L1_Database.audit from CIS MariaDB 10.6 BenchmarkCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB
CIS_MariaDB_10.6_Benchmark_v1.1.0_L2_Database.audit from CIS MariaDB 10.6 BenchmarkCIS MariaDB 10.6 Database L2 v1.1.0MySQLDB
CIS_MariaDB_10.11_v1.0.0_L2_MariaDB_RDBMS_Unix.audit from CIS MariaDB 10.11 v1.0.0CIS MariaDB 10.11 v1.0.0 L2 MariaDB RDBMS UnixUnix
CIS_MongoDB_7_v2.0.0_L1_Unix.audit from CIS MongoDB 7 v2.0.0CIS MongoDB 7 v2.0.0 L1 UnixUnix
CIS_MongoDB_7_v2.0.0_L2_Windows.audit from CIS MongoDB 7 v2.0.0CIS MongoDB 7 v2.0.0 L2 WindowsWindows
CIS_MySQL_5.6_Community_Benchmark_v2.0.0_OS_UNIX_L1.audit from CIS Oracle MySQL 5.6 Community Edition BenchmarkCIS MySQL 5.6 Community Linux OS L1 v2.0.0Unix
CIS_MySQL_5.6_Community_Benchmark_v2.0.0_OS_UNIX_L2.audit from CIS Oracle MySQL 5.6 Community Edition BenchmarkCIS MySQL 5.6 Community Linux OS L2 v2.0.0Unix
CIS_MySQL_5.6_Enterprise_Benchmark_v2.0.0_OS_UNIX_L1.audit from CIS Oracle MySQL 5.6 Enterprise Edition BenchmarkCIS MySQL 5.6 Enterprise Linux OS L1 v2.0.0Unix
CIS_Oracle_MySQL_Community_Server_8.0_v1.2.0_L1_MySQL_RDBMS_on_Linux_Unix.audit from CIS Oracle MySQL Community Server 8.0 v1.2.0CIS Oracle MySQL Community Server 8.0 v1.2.0 L1 MySQL RDBMS on Linux UnixUnix
CIS_Oracle_MySQL_Community_Server_8.4_v1.1.0_L2_MySQL_RDBMS_on_Linux_MySQLDB.audit from CIS Oracle MySQL Community Server 8.4 v1.1.0CIS Oracle MySQL Community Server 8.4 v1.1.0 L2 MySQL RDBMS on Linux MySQLDBMySQLDB
CIS_Oracle_MySQL_Community_Server_9.7_v1.0.0_L1_MySQL_RDBMS_on_Linux_MySQLDB.audit from CIS Oracle MySQL Community Server 9.7 v1.0.0CIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB
CIS_Oracle_MySQL_Community_Server_9.7_v1.0.0_L1_MySQL_RDBMS_on_Linux_Unix.audit from CIS Oracle MySQL Community Server 9.7 v1.0.0CIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS on Linux UnixUnix
CIS_Oracle_MySQL_Community_Server_9.7_v1.0.0_L2_MySQL_RDBMS_on_Linux_Unix.audit from CIS Oracle MySQL Community Server 9.7 v1.0.0CIS Oracle MySQL Community Server 9.7 v1.0.0 L2 MySQL RDBMS on Linux UnixUnix
CIS_Oracle_MySQL_Enterprise_Edition_8.0_v1.5.0_L1_MySQL_RDBMS_on_Linux_Unix.audit from CIS Oracle MySQL Enterprise Edition 8.0 v1.5.0CIS Oracle MySQL Enterprise Edition 8.0 v1.5.0 L1 MySQL RDBMS on Linux UnixUnix
CIS_Oracle_MySQL_Enterprise_Edition_8.4_v1.1.0_L1_MySQL_RDBMS_on_Linux_MySQLDB.audit from CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L1 MySQL RDBMS on Linux MySQLDBMySQLDB
CIS_Oracle_MySQL_Enterprise_Edition_8.4_v1.1.0_L2_MySQL_RDBMS_on_Linux_MySQLDB.audit from CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L2 MySQL RDBMS on Linux MySQLDBMySQLDB
CIS_PostgreSQL_17_v1.1.0_L1_Database_PostgreSQLDB.audit from CIS PostgreSQL 17 v1.1.0CIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDBPostgreSQLDB
CIS_PostgreSQL_18_v1.0.0_L1_Database_Unix.audit from CIS PostgreSQL 18 v1.0.0CIS PostgreSQL 18 v1.0.0 L1 Database UnixUnix
FFOX-00-000027 - Firefox deprecated ciphers must be disabled.DISA Mozilla Firefox STIG v6r8 WindowsWindows

CONFIGURATION MANAGEMENT

OL6-00-000285 - The Oracle Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool - mcafeetp processDISA STIG Oracle Linux 6 v2r7Unix

SYSTEM AND INFORMATION INTEGRITY

RHEL-07-020019 - The Red Hat Enterprise Linux operating system must implement the Endpoint Security for Linux Threat Prevention tool.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY