Item Search

NameAudit NamePluginCategory
5.21 (L2) Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2Windows

CONFIGURATION MANAGEMENT

5.21 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'CIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0Windows

CONFIGURATION MANAGEMENT

5.21 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled'CIS Windows 7 Workstation Level 2 v3.2.0Windows

CONFIGURATION MANAGEMENT

7.2 Set Password Expiration Parameters on Active Accounts - Check MAXWEEKS is set to 13CIS Solaris 10 L1 v5.2Unix

IDENTIFICATION AND AUTHENTICATION

18.9.31.2 (L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.10.29.2 (L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Windows Server 2012 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.29.3 (L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Microsoft Windows Server 2016 v4.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.10.29.3 Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L1 DCWindows

SYSTEM AND INFORMATION INTEGRITY

AIOS-15-007500 - Apple iOS/iPadOS 15 must be configured to not display notifications when the device is locked.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

ACCESS CONTROL

AIOS-15-007600 - Apple iOS/iPadOS 15 must not display notifications (calendar information) when the device is locked.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

ACCESS CONTROL

AIOS-15-009200 - Apple iOS/iPadOS 15 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-15-009700 - Apple iOS/iPadOS 15 must not allow non-DoD applications to access DoD data.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-15-010200 - Apple iOS/iPadOS 15 must be configured to disable ad hoc wireless client-to-client connection capability.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

SYSTEM AND COMMUNICATIONS PROTECTION

AIOS-15-010600 - Apple iOS/iPadOS 15 must implement the management setting: not allow automatic completion of Safari browser passcodes.AirWatch - DISA Apple iOS/iPadOS 15 STIG v1r4MDM

CONFIGURATION MANAGEMENT

DG0074-ORACLE11 - Unapproved inactive or expired database accounts should not be found on the database.DISA STIG Oracle 11 Instance v9r1 DatabaseOracleDB
PHTN-30-000079 - The Photon operating system must configure sshd to disable environment processing.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000081 - The Photon operating system must configure sshd to perform strict mode checking of home directory configuration files.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000085 - The Photon operating system must configure sshd to display the last login immediately after authentication.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000086 - The Photon operating system must configure sshd to ignore user-specific trusted hosts lists.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000093 - The Photon operating system must be configured so that all system startup scripts are protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000094 - The Photon operating system must be configured so that all files have a valid owner and group owner.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000096 - The Photon operating system must be configured so that all cron jobs are protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000097 - The Photon operating system must be configured so that all cron paths are protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000101 - The Photon operating system must prevent IPv4 Internet Control Message Protocol (ICMP) secure redirect messages from being accepted.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000112 - The Photon operating system must protect sshd configuration from unauthorized access.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000114 - The Photon operating system must set the 'umask' parameter correctly.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000240 - The Photon operating system must implement NIST FIPS-validated cryptography for the following: to provision digital signatures, generate cryptographic hashes, and protect unclassified information requiring confidentiality and cryptographic protection in accordance with applicable federal laws, Executive Orders, directives, policies, regulations, and standards.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

SYSTEM AND COMMUNICATIONS PROTECTION

PHTN-30-000245 - The Photon operating system must disable systemd fallback Domain Name System (DNS).DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

RHEL-07-010491 - Red Hat Enterprise Linux operating systems version 7.2 or newer using Unified Extensible Firmware Interface (UEFI) must require authentication upon booting into single-user and maintenance modes.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

ACCESS CONTROL

User Authentication Security - Configure login security options to hinder password guessing attacks - backoff-factorJuniper Hardening JunOS 12 Devices ChecklistJuniper

ACCESS CONTROL

VMCH-70-000004 - Virtual disk shrinking must be disabled on the virtual machine (VM).DISA STIG VMware vSphere 7.0 Virtual Machine v1r4VMware

CONFIGURATION MANAGEMENT

VMCH-70-000016 - Unauthorized removal, connection, and modification of devices must be prevented on the virtual machine (VM).DISA STIG VMware vSphere 7.0 Virtual Machine v1r4VMware

CONFIGURATION MANAGEMENT

VMCH-70-000020 - System administrators must use templates to deploy virtual machines (VMs) whenever possible.DISA STIG VMware vSphere 7.0 Virtual Machine v1r4VMware

CONFIGURATION MANAGEMENT

VMCH-70-000027 - Log retention must be configured properly on the virtual machine (VM).DISA STIG VMware vSphere 7.0 Virtual Machine v1r4VMware

CONFIGURATION MANAGEMENT

WBLC-02-000074 - Oracle WebLogic must produce audit records containing sufficient information to establish what type of JVM-related events and severity levels occurred.Oracle WebLogic Server 12c Linux v2r2 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

ZEBR-11-000200 - Zebra Android 11 must be configured to not allow passwords that include more than four repeating or sequential characters - NumbersAirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-000200 - Zebra Android 11 must be configured to not allow passwords that include more than four repeating or sequential characters - TypeMobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-000400 - Zebra Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

ACCESS CONTROL

ZEBR-11-000500 - Zebra Android 11 must be configured to not allow more than 10 consecutive failed authentication attempts.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

ACCESS CONTROL

ZEBR-11-001600 - Zebra Android 11 must be configured to not display the following (work profile) notifications when the device is locked:MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-002300 - Zebra Android 11 must be configured to disable trust agents - NA for specific biometric authentication factors included in the products Common Criteria evaluation.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-002800 - Zebra Android 11 must be configured to disable developer modes.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-003400 - Zebra Android 11 must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

ACCESS CONTROL

ZEBR-11-005200 - Zebra Android 11 must allow only the Administrator (EMM) to perform the following management function: Enable/disable location services.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-008700 - Zebra Android 11 users must complete required training.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-008800 - Zebra Android 11 must be configured to enforce that Wi-Fi Sharing is disabled.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-009000 - Zebra Android 11 must have the DoD root and intermediate PKI certificates installed.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-009800 - Zebra Android 11 work profile must be configured to disable automatic completion of work space internet browser text input.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-010000 - Zebra Android 11 Work Profile must be configured to disable the autofill services.MobileIron - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT

ZEBR-11-010800 - Zebra Android 11 devices must have the latest available Zebra Android 11 operating system installed.AirWatch - DISA Zebra Android 11 COBO STIG v1r4MDM

CONFIGURATION MANAGEMENT