Detections
Analytics

Item Search

NameAudit NamePluginCategory
1.3 Ensure 'Make pattern visible' is set to Disabled (if using a pattern as device lock mechanism)AirWatch - CIS Google Android v1.2.0 L1MDM
2.2.5 Ensure 'Allow log on locally' is set to 'Administrators, Users'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.5 Ensure 'Allow log on locally' is set to 'Administrators, Users'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.6 Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.16 Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.16 Ensure 'Deny access to this computer from the network' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.2.17 Ensure 'Deny log on as a batch job' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
2.2.18 Ensure 'Deny log on as a service' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.18 Ensure 'Deny log on as a service' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.2.18 Ensure 'Deny log on as a service' to include 'Guests'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.20 Ensure 'Deny log on through Remote Desktop Services' to include 'Guests, Local account'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.2.23 Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.2.27 Ensure 'Lock pages in memory' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.31 Ensure 'Modify an object label' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.2.31 Ensure 'Modify an object label' is set to 'No One'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.2.36 Ensure 'Replace a process level token' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.1.4 Ensure 'Accounts: Limit local account use of blank passwords to console logon only' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.3.1.6 Configure 'Accounts: Rename guest account'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
2.3.7.7 Ensure 'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is set to '4 or fewer logon(s)'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BL + NGWindows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
2.3.7.8 Ensure 'Interactive logon: Prompt user to change password before expiration' is set to 'between 5 and 14 days'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.3.9.4 Ensure 'Microsoft network server: Disconnect clients when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.3.10.2 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
2.3.10.3 Ensure 'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
2.3.11.6 Ensure 'Network security: Force logoff when logon hours expire' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
2.11 Ensure that authorization for Docker client commands is enabledCIS Docker v1.2.0 L2 Docker LinuxUnix
17.2.1 Ensure 'Audit Application Group Management' is set to 'Success and Failure'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
17.2.2 Ensure 'Audit Security Group Management' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
17.2.2 Ensure 'Audit Security Group Management' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
17.2.2 Ensure 'Audit Security Group Management' is set to include 'Success'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.4.1 Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.4.1 Ensure 'MSS: (AutoAdminLogon) Enable Automatic Logon (not recommended)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.8.4.2 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.10.1.1 Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.9.10.1.1 Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.15.1 Ensure 'Do not display the password reveal button' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.9.15.2 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.9.44.1 Ensure 'Block all consumer Microsoft account user authentication' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows