Item Search

NameAudit NamePluginCategory
1.1.1 (L1) Ensure Administrative accounts are cloud-onlyCIS Microsoft 365 Foundations v4.0.0 L1 E5microsoft_azure

ACCESS CONTROL

1.1.1 (L1) Ensure Administrative accounts are cloud-onlyCIS Microsoft 365 Foundations v4.0.0 L1 E3microsoft_azure

ACCESS CONTROL

1.1.3 (L1) Ensure that between two and four global admins are designatedCIS Microsoft 365 Foundations v4.0.0 L1 E5microsoft_azure

ACCESS CONTROL

1.1.3 (L1) Ensure that between two and four global admins are designatedCIS Microsoft 365 Foundations v4.0.0 L1 E3microsoft_azure

ACCESS CONTROL

1.1.4 (L1) Ensure administrative accounts use licenses with a reduced application footprintCIS Microsoft 365 Foundations v4.0.0 L1 E3microsoft_azure

ACCESS CONTROL

1.1.4 (L1) Ensure administrative accounts use licenses with a reduced application footprintCIS Microsoft 365 Foundations v4.0.0 L1 E5microsoft_azure

ACCESS CONTROL

1.15 Ensure IAM policies that allow full "*:*" administrative privileges are not attachedCIS Amazon Web Services Foundations v5.0.0 L1amazon_aws

ACCESS CONTROL

2.2.7 (L1) Ensure 'Back up files and directories' is set to 'Administrators'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.10 (L1) Ensure 'Create a pagefile' is set to 'Administrators'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.21 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.25 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.2.25 (L1) Ensure 'Increase scheduling priority' is set to 'Administrators' - Window Manager\Window Manager Group'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

2.2.25 Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only) - Administrators (DC only)CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.2.26 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.26 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

ACCESS CONTROL

2.2.26 Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only) - No OneCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MSWindows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'Administrators' (DC only)CIS Windows Server 2012 DC L1 v3.0.0Windows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

ACCESS CONTROL

2.2.27 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.2.27 Ensure 'Force shutdown from a remote system' is set to 'Administrators' - AdministratorsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MSWindows

ACCESS CONTROL

2.2.27 Ensure 'Force shutdown from a remote system' is set to 'Administrators' - AdministratorsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.2.28 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.28 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

ACCESS CONTROL

2.2.28 (L1) Ensure 'Enable computer and user accounts to be trusted for delegation' is set to 'No One' (MS only)CIS Windows Server 2012 MS L1 v3.0.0Windows

ACCESS CONTROL

2.2.28 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.28 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Windows Server 2012 MS L1 v3.0.0Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Windows Server 2012 DC L1 v3.0.0Windows

ACCESS CONTROL

2.2.29 (L1) Ensure 'Force shutdown from a remote system' is set to 'Administrators'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

ACCESS CONTROL

2.21 (L1) Ensure 'Allow reporting of domain reliability related data' Is DisabledCIS Google Chrome L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

4.4 Ensure only authorized users and groups belong to the esxAdminsGroup groupCIS VMware ESXi 6.5 v1.0.0 Level 1VMware

ACCESS CONTROL

5.1 Ensure Only Administrative Users Have Full Database AccessCIS MariaDB 10.6 on Linux L1 v1.1.0Unix

ACCESS CONTROL

5.1 Ensure Only Administrative Users Have Full Database AccessCIS Oracle MySQL Community Server 8.4 v1.0.0 L1 DatabaseMySQLDB

ACCESS CONTROL

5.1 Ensure Only Administrative Users Have Full Database AccessCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL

5.1 Ensure Only Administrative Users Have Full Database AccessCIS MySQL 5.6 Community Database L1 v2.0.0MySQLDB

ACCESS CONTROL

5.1 Ensure Only Administrative Users Have Full Database AccessCIS MySQL 8.0 Community Database L1 v1.1.0MySQLDB

ACCESS CONTROL

5.1.4 Ensure an Inventory of Administrator accounts is established and maintainedCIS IBM AIX 7 v1.0.0 L1Unix

ACCESS CONTROL

5.10 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 11.0 Big Sur v4.0.0 L1Unix

CONFIGURATION MANAGEMENT

5.10 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 12.0 Monterey Cloud-tailored v1.1.0 L1Unix

CONFIGURATION MANAGEMENT

5.10 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 15.0 Sequoia Cloud-tailored v1.0.0 L1Unix

CONFIGURATION MANAGEMENT

5.10 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 10.15 Catalina v3.0.0 L1Unix

CONFIGURATION MANAGEMENT

6.4.1 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 13.0 Ventura v3.0.0 L1Unix

CONFIGURATION MANAGEMENT

6.4.1 Ensure Secure Keyboard Entry Terminal.app Is EnabledCIS Apple macOS 14.0 Sonoma v2.0.0 L1Unix

CONFIGURATION MANAGEMENT

6.26 Ensure fewer than 5 users have global administrator assignmentCIS Microsoft Azure Foundations v4.0.0 L1microsoft_azure

ACCESS CONTROL