Item Search

NameAudit NamePluginCategory
1.1.1.2 Ensure freevxfs kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure jffs2 kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Oracle Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Red Hat Enterprise Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure squashfs kernel module is not availableCIS Rocky Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.2.1.5 Ensure weak dependencies are configuredCIS Red Hat Enterprise Linux 9 v3.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

1.2.1.5 Ensure weak dependencies are configuredCIS Rocky Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

1.2.1.5 Ensure weak dependencies are configuredCIS Rocky Linux 9 v3.0.0 L2 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.3 Ensure cockpit web services are not in useCIS Oracle Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.4 Ensure dns server services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.5 Ensure dnsmasq services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.8 Ensure message access server services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.1.13 Ensure rsync services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.1.20 Ensure a graphical user interface is not in useCIS Rocky Linux 9 v3.0.0 L2 ServerUnix

CONFIGURATION MANAGEMENT

2.1.22 Ensure mail transfer agents are configured for local-only modeCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

2.2.5 Ensure ldap client is not installedCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

2.2.5 Ensure ldap client is not installedCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.1.3 Ensure bluetooth services are not in useCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2 Host must deactivate the ESXi shellCIS VMware ESXi 8.0 v1.4.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

3.2.3 Ensure dccp kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.3 Ensure dccp kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.2.5 Ensure sctp kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

3.2.5 Ensure sctp kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.2.6 Ensure tipc kernel module is not availableCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

3.3.1.19 Ensure net.ipv4.conf.all.route_localnet is configuredCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

4.10.19.1 Ensure 'Continue experiences on this device' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

4.10.30.2 Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

4.11.10.3 Ensure 'Enable App Installer ms-appinstaller protocol' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

4.11.49.1 Ensure 'Enable MPR notifications for the system' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

5.1.9 Ensure sshd DisableForwarding is enabledCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 ServerUnix

CONFIGURATION MANAGEMENT

5.1.9 Ensure sshd DisableForwarding is enabledCIS Ubuntu Linux 26.04 LTS v1.0.0 L1 WorkstationUnix

CONFIGURATION MANAGEMENT

5.5 Host should deactivate virtual hardware management network interfacesCIS VMware ESXi 9.0 v1.0.0 L2 VMwareVMware

CONFIGURATION MANAGEMENT

6.1 Ensure that MongoDB uses a non-default portCIS MongoDB 7 v2.0.0 L1 UnixUnix

CONFIGURATION MANAGEMENT

7.9 Virtual machines must prevent unauthorized connection of devicesCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.10 Virtual machines must remove unnecessary audio devicesCIS VMware ESXi 8.0 v1.4.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.10 Virtual machines must remove unnecessary audio devicesCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.11 Virtual machines must remove unnecessary AHCI devicesCIS VMware ESXi 8.0 v1.4.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.11 Virtual machines must remove unnecessary AHCI devicesCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.16 Virtual machines must remove unnecessary floppy devicesCIS VMware ESXi 8.0 v1.4.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

7.23 Virtual machines must restrict sharing of memory pages with other VMsCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

8.5 VMware Tools must limit the automatic addition of featuresCIS VMware ESXi 9.0 v1.0.0 L1 VMwareVMware

CONFIGURATION MANAGEMENT

18.9.19.2 Ensure 'Continue experiences on this device' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

18.9.37.1 Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

45.7 Ensure 'Min Smb2 Dialect' is set to '3.1.1'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.20 Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.22 Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.28 Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.38 Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT

82.39 Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v5.0.0 L1Windows

CONFIGURATION MANAGEMENT