Item Search

NameAudit NamePluginCategory
1.1.11 Add nodev Option to Removable Media PartitionsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.1.12 Add noexec Option to Removable Media PartitionsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.1.13 Add nosuid Option to Removable Media PartitionsCIS Red Hat Enterprise Linux 5 L1 v2.2.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

1.6.2 Ensure local login warning banner is configured properlyCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 WorkstationUnix

ACCESS CONTROL

1.6.2 Ensure local login warning banner is configured properlyCIS Debian Linux 11 v2.0.0 L1 ServerUnix

ACCESS CONTROL

1.6.2 Ensure local login warning banner is configured properlyCIS Red Hat Enterprise Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL

1.6.3 Ensure remote login warning banner is configured properlyCIS Amazon Linux 2 v3.0.0 L1Unix

ACCESS CONTROL

1.6.3 Ensure remote login warning banner is configured properlyCIS CentOS Linux 7 v4.0.0 L1 ServerUnix

ACCESS CONTROL

1.7.1.2 Ensure local login warning banner is configured properlyCIS Debian 9 Server L1 v1.0.1Unix

CONFIGURATION MANAGEMENT

1.7.1.3 Ensure remote login warning banner is configured properly - banner checkCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.7.2 Ensure /etc/issue is configuredCIS SUSE Linux Enterprise 15 v2.0.1 L1 ServerUnix

ACCESS CONTROL

1.7.2 Ensure /etc/issue is configuredCIS SUSE Linux Enterprise 15 v2.0.1 L1 WorkstationUnix

ACCESS CONTROL

1.7.2 Ensure local login warning banner is configured properlyCIS Oracle Linux 9 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL

1.7.2 Ensure local login warning banner is configured properlyCIS Oracle Linux 8 Workstation L1 v3.0.0Unix

ACCESS CONTROL

1.7.2 Ensure local login warning banner is configured properlyCIS Red Hat EL8 Server L1 v3.0.0Unix

ACCESS CONTROL

1.7.2 Ensure local login warning banner is configured properlyCIS Rocky Linux 8 Workstation L1 v2.0.0Unix

ACCESS CONTROL

1.7.3 Ensure remote login warning banner is configured properlyCIS Rocky Linux 9 v2.0.0 L1 WorkstationUnix

ACCESS CONTROL

1.7.3 Ensure remote login warning banner is configured properlyCIS Oracle Linux 9 v2.0.0 L1 ServerUnix

ACCESS CONTROL

2.1.1.1 Ensure chrony is configuredCIS Bottlerocket L1Unix

AUDIT AND ACCOUNTABILITY

5.5.1.1 Ensure password expiration is 365 days or less - usersCIS CentOS 6 Server L1 v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

9.24 Find Un-owned Files and DirectoriesCIS Solaris 10 L1 v5.2Unix

ACCESS CONTROL

18.9.24.1 (BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'CIS Microsoft Windows 10 Stand-alone v4.0.0 BLWindows

CONFIGURATION MANAGEMENT

18.9.24.1 (BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'CIS Microsoft Windows 10 Stand-alone v4.0.0 L1 BLWindows

CONFIGURATION MANAGEMENT

18.9.24.1 (BL) Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'CIS Microsoft Windows 10 Stand-alone v4.0.0 L1 BL NGWindows

CONFIGURATION MANAGEMENT

18.9.31.1 Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'CIS Microsoft Windows Server 2022 STIG v2.0.0 L2 Domain ControllerWindows

CONFIGURATION MANAGEMENT

18.9.31.1 Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'CIS Microsoft Windows Server 2022 STIG v2.0.0 L2 Member ServerWindows

CONFIGURATION MANAGEMENT

18.9.31.1 Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'CIS Microsoft Windows Server 2019 STIG v3.0.0 L2 DCWindows

CONFIGURATION MANAGEMENT

ALMA-09-004090 - AlmaLinux OS 9 must implement DOD-approved TLS encryption in the OpenSSL package.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

ACCESS CONTROL

ALMA-09-031920 - AlmaLinux OS 9 must require users to provide authentication for privilege escalation.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

ACCESS CONTROL

ALMA-09-037200 - AlmaLinux OS 9 PAM must be configured to use a sufficient number of password hashing rounds.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

IDENTIFICATION AND AUTHENTICATION

ALMA-09-047980 - AlmaLinux OS 9 must enable auditing of processes that start prior to the audit daemon.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

ALMA-09-054360 - AlmaLinux OS 9 audit system must make full use of the audit storage space.DISA CloudLinux AlmaLinux OS 9 STIG v1r2Unix

AUDIT AND ACCOUNTABILITY

APPL-14-001140 The macOS system must configure audit_control to not contain access control lists.DISA Apple macOS 14 (Sonoma) STIG v2r3Unix

AUDIT AND ACCOUNTABILITY

APPL-15-000030 - The macOS system must configure audit log files to not contain access control lists (ACLs).DISA Apple macOS 15 (Sequoia) STIG v1r3Unix

AUDIT AND ACCOUNTABILITY

O19C-00-009500 - System privileges granted using the WITH ADMIN OPTION must not be granted to unauthorized user accounts.DISA Oracle Database 19c STIG v1r1 DatabaseOracleDB

CONFIGURATION MANAGEMENT

O19C-00-009700 - Oracle roles granted using the WITH ADMIN OPTION must not be granted to unauthorized accounts.DISA Oracle Database 19c STIG v1r1 DatabaseOracleDB

CONFIGURATION MANAGEMENT

O112-C2-018600 - The DBMS must automatically terminate emergency accounts after an organization-defined time period for each type of account.DISA STIG Oracle 11.2g v2r5 DatabaseOracleDB

CONFIGURATION MANAGEMENT

OL07-00-030870 - The Oracle Linux operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA Oracle Linux 7 STIG v3r2Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

RHEL-09-212055 - RHEL 9 must enable auditing of processes that start prior to the audit daemon.DISA Red Hat Enterprise Linux 9 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030060 - The SUSE operating system must generate audit records for all uses of the ssh-keysign command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030090 - The SUSE operating system must generate audit records for all uses of the newgrp command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030100 - The SUSE operating system must generate audit records for a uses of the chsh command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030120 - The SUSE operating system must generate audit records for all uses of the chage command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030550 - The SUSE operating system must generate audit records for all uses of the su command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SLES-15-030560 - The SUSE operating system must generate audit records for all uses of the sudo command.DISA SUSE Linux Enterprise Server 15 STIG v2r4Unix

AUDIT AND ACCOUNTABILITY, MAINTENANCE

SQL6-D0-006700 - SQL Server software installation account must be restricted to authorized users.DISA STIG SQL Server 2016 Instance OS Audit v3r4Windows

CONFIGURATION MANAGEMENT

UBTU-22-654135 - Ubuntu 22.04 LTS must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/gshadow.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

UBTU-22-654145 - Ubuntu 22.04 LTS must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA Canonical Ubuntu 22.04 LTS STIG v2r4Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

UBTU-24-200320 - Ubuntu 24.04 LTS must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.DISA Canonical Ubuntu 24.04 LTS STIG v1r1Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

vCenter : use-supported-systemVMWare vSphere 5.X Hardening GuideVMware