Item Search

NameAudit NamePluginCategory
1.1.1.7 Ensure unused filesystems kernel modules are not availableCIS Amazon Linux 2 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Rocky Linux 8 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.11 Ensure unused filesystems kernel modules are not availableCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1 Run BIND as a non-root User - process -u namedCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

ACCESS CONTROL

2.1 Run BIND as a non-root User - UIDCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

ACCESS CONTROL

2.1 Secure DB2 Runtime LibraryCIS IBM DB2 v10 v1.1.0 Windows OS Level 1Windows
2.1.11 Ensure rpcbind services are not in useCIS Red Hat Enterprise Linux 8 STIG v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.4.5 Disable Remote LoginCIS Apple OSX 10.9 L1 v1.3.0Unix

ACCESS CONTROL

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.12 Ensure net.ipv4.conf.all.rp_filter is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.13 Ensure net.ipv4.conf.default.rp_filter is configuredCIS Ubuntu Linux 24.04 LTS v2.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

5.3.1.2 Ensure latest version of authselect is installedCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.1.2 Ensure latest version of authselect is installedCIS AlmaLinux OS 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.1.2 Ensure latest version of authselect is installedCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3.1.4 Ensure strong password hashing algorithm is configuredCIS Linux Mint 22 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4 Ensure Default HTML Content Is RemovedCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

5.4 Ensure Default HTML Content Is Removed - 'other handler does not exist'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

CONFIGURATION MANAGEMENT

5.4 Ensure Default HTML Content Is Removed - 'Server Status handler does not exist'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

CONFIGURATION MANAGEMENT

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Rocky Linux 8 v3.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Oracle Linux 8 v4.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Debian Linux 12 v2.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Debian Linux 13 v1.1.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Rocky Linux 8 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Debian Linux 11 v2.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Debian Linux 12 v2.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Oracle Linux 10 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS AlmaLinux OS 8 v4.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS Oracle Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS Rocky Linux 9 v3.0.0 L1 WorkstationUnix

ACCESS CONTROL, MEDIA PROTECTION

5.4.2.6 Ensure root user umask is configuredCIS AlmaLinux OS 9 v3.0.0 L1 ServerUnix

ACCESS CONTROL, MEDIA PROTECTION

6.4 Ensure Log Storage and Rotation Is Configured CorrectlyCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

AUDIT AND ACCOUNTABILITY

6.4 Ensure Log Storage and Rotation Is Configured Correctly - '/etc/logrotate.conf rotate > 13'CIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

6.4 Ensure Log Storage and Rotation Is Configured Correctly - '/etc/logrotate.conf rotate log files = weekly'CIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

AUDIT AND ACCOUNTABILITY

7.3 Ensure strong authentication is utilized for all accountsCIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS MySQLDBMySQLDB

IDENTIFICATION AND AUTHENTICATION

8.3.1 Disable unnecessary or superfluous functions inside VMsCIS VMware ESXi 5.5 v1.2.0 Level 1VMware
8.3.1 Disable unnecessary or superfluous functions inside VMsCIS VMware ESXi 5.1 v1.0.1 Level 1VMware
AZLX-23-000225 - Amazon Linux 2023 must implement address space layout randomization (ASLR) to protect its memory from unauthorized code execution.DISA Amazon Linux 2023 STIG v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

AZLX-23-002155 - Amazon Linux 2023 must audit all uses of the chcon command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

CIS_Ubuntu_16.04_LTS_Server_v2.0.0_L2.audit from CIS Ubuntu 16.04 LTS Server Benchmark L2 v2.0.0CIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix
OL07-00-030201 - The Oracle Linux operating system must be configured to off-load audit logs onto a different system or storage media from the system being audited.DISA Oracle Linux 7 STIG v3r5Unix

AUDIT AND ACCOUNTABILITY

RHEL-07-021620 - The Red Hat Enterprise Linux operating system must use a file integrity tool that is configured to use FIPS 140-2 approved cryptographic hashes for validating file contents and directories.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

CONFIGURATION MANAGEMENT