Item Search

NameAudit NamePluginCategory
1.1 Place Databases on Non-System PartitionsCIS MySQL 5.6 Community Linux OS L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1 Place Databases on Non-System PartitionsCIS MySQL 5.7 Enterprise Linux OS L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1 Place Databases on Non-System PartitionsCIS MySQL 5.7 Community Windows OS L1 v2.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.1 Place Databases on Non-System PartitionsCIS MySQL 5.7 Community Linux OS L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1 Place Databases on Non-System PartitionsCIS MySQL 5.7 Enterprise Windows OS L1 v2.0.0Windows

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.1.9 Ensure unused filesystems kernel modules are not availableCIS SUSE Linux Enterprise 15 v2.0.1 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.10 Ensure unused filesystems kernel modules are not availableCIS SUSE Linux Enterprise 16 v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.10 Ensure unused filesystems kernel modules are not availableCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.2 Ensure two emergency access accounts have been definedCIS Microsoft 365 Foundations v7.0.0 L1 E5microsoft_azure

ACCESS CONTROL

1.4.2 Ensure bootloader password is set - 'passwd_pbkdf2'CIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.4.2 Ensure bootloader password is set - 'passwd_pbkdf2'CIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.4.5 Disable Remote LoginCIS Apple macOS 10.13 L1 v1.1.0Unix

ACCESS CONTROL

2.4.5 Ensure Remote Login Is DisabledCIS Apple macOS 10.14 v2.0.0 L1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

5.2.6 Minimize the admission of root containersCIS Kubernetes v1.20 Benchmark v1.0.1 L2 MasterUnix

ACCESS CONTROL

5.3.1.2 Ensure latest version of authselect is installedCIS Red Hat Enterprise Linux 9 v3.0.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS SUSE Linux Enterprise 16 v1.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Rocky Linux 9 v3.0.0 L1 ServerUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1.4 Ensure strong password hashing algorithm is configuredCIS Rocky Linux 9 v3.0.0 L1 WorkstationUnix

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

5.6 Ensure the "root" Account Is DisabledCIS Apple macOS 15.0 Sequoia v2.1.0 L1Unix

ACCESS CONTROL

8.7 Secure the permissions of the IBMLDAPSecurity.ini fileCIS IBM DB2 9 Benchmark v3.0.1 Level 1 OS LinuxUnix
AZLX-23-002175 - Amazon Linux 2023 must audit all uses of the init command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002180 - Amazon Linux 2023 must audit all uses of the reboot command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002185 - Amazon Linux 2023 must audit all uses of the shutdown command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY

AZLX-23-002210 - Amazon Linux 2023 must audit all successful/unsuccessful uses of the chage command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

AZLX-23-002245 - Amazon Linux 2023 must audit all uses of the sudo command.DISA Amazon Linux 2023 STIG v1r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

CIS Internet Explorer 10 Benchmark Version 1.1.0CIS IE 10 v1.1.0Windows
CIS_AlmaLinux_OS_8_v4.0.0_L1_Workstation.audit from CIS AlmaLinux OS 8 v4.0.0CIS AlmaLinux OS 8 v4.0.0 L1 WorkstationUnix
CIS_AlmaLinux_OS_8_v4.0.0_L2_Workstation.audit from CIS AlmaLinux OS 8 v4.0.0CIS AlmaLinux OS 8 v4.0.0 L2 WorkstationUnix
CIS_AlmaLinux_OS_9_v3.0.0_L1_Workstation.audit from CIS AlmaLinux OS 9 v3.0.0CIS AlmaLinux OS 9 v3.0.0 L1 WorkstationUnix
CIS_AlmaLinux_OS_9_v3.0.0_L2_Server.audit from CIS AlmaLinux OS 9 v3.0.0CIS AlmaLinux OS 9 v3.0.0 L2 ServerUnix
CIS_AlmaLinux_OS_10_v1.0.0_L2_Workstation.audit from CIS AlmaLinux OS 10 v1.0.0CIS AlmaLinux OS 10 v1.0.0 L2 WorkstationUnix
CIS_Apache_Tomcat_10_L1_v1.1.0_Middleware.audit from CIS Apache Tomcat 10 BenchmarkCIS Apache Tomcat 10 L1 v1.1.0 MiddlewareUnix
CIS_Kubernetes_v1.24_v1.0.0_Level_2_Worker.audit from CIS Kubernetes v1.24 Benchmark v1.0.0CIS Kubernetes v1.24 Benchmark v1.0.0 L2 WorkerUnix

CONFIGURATION MANAGEMENT

CIS_Microsoft_Defender_Antivirus_v1.0.0_L1_Server.audit from CIS Microsoft Defender Antivirus 1.0.0CIS Microsoft Defender Antivirus v1.0.0 L1 ServerWindows
CIS_MongoDB_3.6_Benchmark_Level_1_DB_v1.1.0.audit from CIS MongoDB 3.6 BenchmarkCIS MongoDB 3.6 Database Audit L1 v1.1.0MongoDB
CIS_MongoDB_3.6_Benchmark_Level_2_DB_v1.1.0.audit from CIS MongoDB 3.6 BenchmarkCIS MongoDB 3.6 Database Audit L2 v1.1.0MongoDB
CIS_PostgreSQL_11_v1.0.0_L1_OS_Linux.audit from CIS Benchmark for PostgreSQL 11CIS PostgreSQL 11 OS v1.0.0Unix
CIS_v1.1.0_Oracle_11g_OS_Windows_Level_2.audit from CIS v1.1.0 Oracle 11gCIS v1.1.0 Oracle 11g OS Windows Level 2Windows
CIS_VMware_ESXi_8.0_v1.4.0_L1_Unix.audit from CIS VMware ESXi 8.0 v1.4.0CIS VMware ESXi 8.0 v1.4.0 L1 UnixUnix
FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above.DISA Mozilla Firefox STIG v6r8 LinuxUnix

ACCESS CONTROL

FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above.DISA Mozilla Firefox STIG v6r8 WindowsWindows

ACCESS CONTROL

FFOX-00-000021 - Firefox autoplay must be disabled.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

FFOX-00-000037 - Firefox encrypted media extensions must be disabled.DISA STIG Mozilla Firefox MacOS v6r8Unix

CONFIGURATION MANAGEMENT

OL08-00-040284 - OL 8 must disable the use of user namespaces.DISA Oracle Linux 8 STIG v2r9Unix

CONFIGURATION MANAGEMENT

RHEL-07-030211 - The Red Hat Enterprise Linux operating system must label all off-loaded audit logs before sending them to the central log server.DISA Red Hat Enterprise Linux 7 STIG v3r15Unix

AUDIT AND ACCOUNTABILITY

SLEM-05-631025 - SLEM 5 must be configured to not overwrite Pluggable Authentication Modules (PAM) configuration on package changes.DISA SUSE Linux Enterprise Micro SLEM 5 STIG v1r4Unix

CONFIGURATION MANAGEMENT

SLES-12-030510 - The SUSE operating system must implement certificate status checking for multifactor authentication.DISA SLES 12 STIG v3r5Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010470 - The SUSE operating system must implement certificate status checking for multifactor authentication.DISA SUSE Linux Enterprise Server 15 STIG v2r8Unix

IDENTIFICATION AND AUTHENTICATION

SLES-15-010470 - The SUSE operating system must implement certificate status checking for multifactor authentication.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

IDENTIFICATION AND AUTHENTICATION

TCAT-AS-001592 - Changes to $CATALINA_HOME/lib/ folder must be logged.DISA STIG Apache Tomcat Application Server 9 v3r4 MiddlewareUnix

AUDIT AND ACCOUNTABILITY