| 1.3.5 Ensure AIDE is configured to use FIPS 140-2 | CIS Amazon Linux 2 STIG v2.0.1 STIG | Unix | CONFIGURATION MANAGEMENT |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 10 v1.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Rocky Linux 8 v3.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS AlmaLinux OS 10 v1.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Red Hat Enterprise Linux 10 v1.0.1 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 10 v1.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 8 v4.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Oracle Linux 8 v4.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Rocky Linux 10 v1.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS AlmaLinux OS 8 v4.0.0 L1 Server | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Red Hat Enterprise Linux 8 v4.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS Rocky Linux 10 v1.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5.5 Ensure kernel.dmesg_restrict is configured | CIS AlmaLinux OS 8 v4.0.0 L1 Workstation | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.6.2 Ensure system wide crypto policy disables sha1 hash and signature support | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.6.2 Ensure system wide crypto policy disables sha1 hash and signature support | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.7 Audit docker daemon | CIS Docker 1.12.0 v1.0.0 L1 Linux | Unix | AUDIT AND ACCOUNTABILITY |
| 1.7 Audit docker daemon | CIS Docker 1.11.0 v1.0.0 L1 Linux | Unix | AUDIT AND ACCOUNTABILITY |
| 1.8 Audit docker daemon | CIS Docker 1.6 v1.0.0 L1 Linux | Unix | AUDIT AND ACCOUNTABILITY |
| 1.11 AZLX-23-000215 | CIS Amazon Linux 2023 STIG v1.0.0 CAT II | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.28 AZLX-23-001045 | CIS Amazon Linux 2023 STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 1.80 AZLX-23-002045 | CIS Amazon Linux 2023 STIG v1.0.0 CAT II | Unix | AUDIT AND ACCOUNTABILITY |
| 1.83 AZLX-23-002060 | CIS Amazon Linux 2023 STIG v1.0.0 CAT II | Unix | AUDIT AND ACCOUNTABILITY |
| 2 - Specify file handler in jetty-logging.properties files - org.eclipse.jetty.util.log.class=org.eclipse.jetty.util.log.StrErrLog | TNS Best Practice Jetty 9 Linux | Unix | AUDIT AND ACCOUNTABILITY |
| 2.1.11 Ensure IMAP and POP3 server are not installed - dovecot-pop3d | CIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.2.10 Ensure IMAP and POP3 server are not installed | CIS Ubuntu Linux 18.04 LTS v2.2.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 2.11.8.7.2.9 Ensure 'Trust access to Visual Basic Project' is set to 'Disabled' | CIS Microsoft Office Enterprise v1.2.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 5.7 Ensure there are between 2 and 3 Subscription Owners | CIS Microsoft Azure Foundations v6.0.0 L1 | microsoft_azure | ACCESS CONTROL |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS AlmaLinux OS 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS Oracle Linux 9 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS Red Hat Enterprise Linux 9 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS Rocky Linux 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS Red Hat Enterprise Linux 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS AlmaLinux OS 9 v3.0.0 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.2.1.4 Ensure auditd service is enabled and active | CIS Oracle Linux 9 v3.0.0 L2 Workstation | Unix | AUDIT AND ACCOUNTABILITY |
| 9.1 Ensure the TimeOut Is Set to 10 or Less | CIS Apache HTTP Server 2.4 v2.3.0 L1 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| ALMA-09-028840 - AlmaLinux OS 9 must not have the quagga package installed. | DISA Cloud Linux AlmaLinux OS 9 STIG v1r7 | Unix | CONFIGURATION MANAGEMENT |
| AZLX-23-002045 - Amazon Linux 2023 must take action when allocated audit record storage volume reaches 95 percent of the audit record storage capacity. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-002060 - Amazon Linux 2023 must be configured to off-load audit records onto a different system from the system being audited via syslog. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-002080 - Amazon Linux 2023 must be configured to off-load audit records onto a different system from the system being audited via syslog. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| AZLX-23-002385 - Amazon Linux 2023 must enforce password complexity rules for the root account. | DISA Amazon Linux 2023 STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| AZLX-23-002390 - Amazon Linux 2023 must prevent the use of dictionary words for passwords. | DISA Amazon Linux 2023 STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| AZLX-23-002565 - Amazon Linux 2023 must synchronize internal information system clocks to the authoritative time source at least every 24 hours. | DISA Amazon Linux 2023 STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000145 - The operating system must produce audit records containing sufficient information to establish the identity of any user/subject associated with the event - CHKCONFIG | DISA STIG Oracle Linux 6 v2r7 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000145 - The operating system must produce audit records containing sufficient information to establish the identity of any user/subject associated with the event - PROCESS_CHECK | DISA STIG Oracle Linux 6 v2r7 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000148 - The operating system must employ automated mechanisms to facilitate the monitoring and control of remote access methods - CHKCONFIG | DISA STIG Oracle Linux 6 v2r7 | Unix | ACCESS CONTROL |
| OL6-00-000148 - The operating system must employ automated mechanisms to facilitate the monitoring and control of remote access methods - PROCESS_CHECK | DISA STIG Oracle Linux 6 v2r7 | Unix | ACCESS CONTROL |
| OL6-00-000154 - The operating system must produce audit records containing sufficient information to establish what type of events occurred - CHKCONFIG | DISA STIG Oracle Linux 6 v2r7 | Unix | AUDIT AND ACCOUNTABILITY |
| OL6-00-000154 - The operating system must produce audit records containing sufficient information to establish what type of events occurred - PROCESS_CHECK | DISA STIG Oracle Linux 6 v2r7 | Unix | AUDIT AND ACCOUNTABILITY |
| Select the channel for Microsoft Defender monthly engine updates | MSCT Windows Server 2025 MS v1.0.0 | Windows | |
| Select the channel for Microsoft Defender monthly platform updates | MSCT Windows Server 2025 DC v1.0.0 | Windows | |
