| 1.7.1 Ensure 'Enable file hash computation feature' is set to 'Enabled' | CIS Microsoft Defender Antivirus v1.0.0 L1 Workstation | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 1.95 WN10-AU-000580 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | AUDIT AND ACCOUNTABILITY |
| 1.96 WN10-AU-000575 | CIS Microsoft Windows 10 STIG v1.0.0 CAT II | Windows | AUDIT AND ACCOUNTABILITY |
| 1.106 (L2) Ensure 'Enable Translate' is set to 'Disabled' | CIS Microsoft Intune for Edge v1.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 1.118 Ensure 'Enable Translate' is set to 'Disabled' | CIS Microsoft Edge v5.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 2.3.39.1 (L1) Ensure 'Send Office Feedback' is set to 'Disabled' | CIS Microsoft Intune for Office v1.1.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 18.5.8 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled' | CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL | Windows | CONFIGURATION MANAGEMENT |
| 18.5.8 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled' | CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BL | Windows | CONFIGURATION MANAGEMENT |
| 18.5.8.1 (L1) Ensure 'Enable insecure guest logons' is set to 'Disabled' | CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MS | Windows | CONFIGURATION MANAGEMENT |
| 18.6.8.1 (L1) Ensure 'Enable insecure guest logons' is set to 'Disabled' | CIS Microsoft Windows Server 2016 v4.0.0 L1 MS | Windows | CONFIGURATION MANAGEMENT |
| 18.6.8.1 Ensure 'Audit insecure guest logon' is set to 'Enabled' | CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 BL | Windows | AUDIT AND ACCOUNTABILITY |
| 18.6.19.2.1 Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)') | CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 18.6.19.2.1 Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)') | CIS Microsoft Windows 11 Enterprise v5.1.0 L2 | Windows | CONFIGURATION MANAGEMENT |
| 18.6.19.2.1 Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)') | CIS Microsoft Windows 10 Enterprise v5.0.0 L2 NG | Windows | CONFIGURATION MANAGEMENT |
| 18.9.11.1.7 (BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False' | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | ACCESS CONTROL, CONTINGENCY PLANNING |
| 18.9.11.3.7 (BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False' | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | ACCESS CONTROL, CONTINGENCY PLANNING |
| 18.10.43.7.1 (L1) Ensure 'Enable file hash computation feature' is set to 'Enabled' | CIS Microsoft Windows Server 2016 v4.0.0 L1 DC | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 46.1 Ensure 'Enable insecure guest logons' is set to 'Disabled' | CIS Microsoft Intune for Windows 10 v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| DISA_STIG_MariaDB_Enterprise_10.x_v2r5_Unix.audit from DISA MariaDB Enterprise 10.x STIG v2r5 | DISA MariaDB Enterprise 10.x STIG v2r5 Unix | Unix | |
| Join Microsoft MAPS | MSCT Windows Server v1909 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server v2004 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2019 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 1809 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 1909 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 v21H1 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 1903 DC v1.19.9 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2016 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2025 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 v20H2 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 1903 MS v1.19.9 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server v2004 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2016 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT MSCT Windows Server 2022 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2022 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server v20H2 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 11 v24H2 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 v2004 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server v1909 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 v22H2 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 11 v22H2 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 1903 v1.19.9 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 10 v21H2 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2019 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server 2025 MS v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS | MSCT Windows Server v20H2 DC v1.0.0 | Windows | ACCESS CONTROL |
| Join Microsoft MAPS - SpynetReporting | MSCT Windows 10 1803 v1.0.0 | Windows | ACCESS CONTROL |
| WN12-AD-000004-DC - The Active Directory Domain Controllers Organizational Unit (OU) object must have the proper access control permissions. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r7 | Windows | ACCESS CONTROL |
| WN12-UR-000021-MS - The Deny log on through Remote Desktop Services user right on member servers must be configured to prevent access from highly privileged domain accounts and all local accounts on domain systems, and from unauthenticated access on all systems. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r7 | Windows | ACCESS CONTROL |
| WNDF-AV-000010 - Microsoft Defender AV must join Microsoft MAPS. | DISA Microsoft Defender Antivirus STIG v2r9 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
