Item Search

NameAudit NamePluginCategory
1.1.3 Ensure nodev option set on /tmp partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.4 Ensure nosuid option set on /tmp partitionCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.4 Ensure nosuid option set on /tmp partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.7 Ensure nodev option set on /var/tmp partitionCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.7 Ensure nodev option set on /var/tmp partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.8 Ensure nosuid option set on /var/tmp partitionCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.8 Ensure nosuid option set on /var/tmp partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.13 Ensure nodev option set on /home partitionCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.13 Ensure nodev option set on /home partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.15 Ensure nosuid option set on /run/shm partitionCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.15 Ensure nosuid option set on /run/shm partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.16 Ensure noexec option set on /run/shm partitionCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.17 Ensure nodev option set on removable media partitionsCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.1.17 Ensure nodev option set on removable media partitionsCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

1.1.18 Ensure nosuid option set on removable media partitionsCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

1.6 Only allow trusted users to control Docker daemonCIS Docker 1.11.0 v1.0.0 L1 LinuxUnix

ACCESS CONTROL

1.7.2 - Miscellaneous Enhancements - at access - 'at.allow includes root'CIS AIX 5.3/6.1 L2 v1.1.0Unix

ACCESS CONTROL

1.7.8 - Miscellaneous Enhancements - disable core dumps - 'core = 0'CIS AIX 5.3/6.1 L2 v1.1.0Unix

ACCESS CONTROL

2.3.4.2 Ensure 'Devices: Prevent users from installing printer drivers' is set to 'Enabled'CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.3.10.4 Ensure 'Network access: Let Everyone permissions apply to anonymous users' is set to 'Disabled' - DisabledCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.3.10.9 Ensure 'Network access: Restrict anonymous access to Named Pipes and Shares' is set to 'Enabled' - EnabledCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

2.5.2 - NFS - no suid on NFS client mounts - 'All NFS client mounts have nosuid option'CIS AIX 5.3/6.1 L1 v1.1.0Unix

ACCESS CONTROL

2.12.13 - Miscellaneous Config - authorized users in at.allow - 'at.allow contains %USERNAME%'CIS AIX 5.3/6.1 L1 v1.1.0Unix

ACCESS CONTROL

2.12.13 - Miscellaneous Config - authorized users in at.allow - 'at.allow contains adm'CIS AIX 5.3/6.1 L1 v1.1.0Unix

ACCESS CONTROL

2.12.13 - Miscellaneous Config - authorized users in at.allow - 'at.allow contains sys'CIS AIX 5.3/6.1 L1 v1.1.0Unix

ACCESS CONTROL

2.12.14 - Miscellaneous Config - authorized users in cron.allow - 'cron.allow contains adm'CIS AIX 5.3/6.1 L1 v1.1.0Unix

ACCESS CONTROL

4.1 Restrict Core Dumps - 'fs.suid.dumpable = 0'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

4.1 Restrict Core Dumps - 'hard core 0'CIS Ubuntu 12.04 LTS Benchmark L1 v1.1.0Unix

ACCESS CONTROL

18.1.2.2 Ensure 'Allow users to enable online speech recognition services' is set to 'Disabled'CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

ACCESS CONTROL

Allow user control over installsMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Allow user control over installsMSCT Windows 10 v21H1 v1.0.0Windows

ACCESS CONTROL

Configure Windows Defender SmartScreen - EnableSmartScreenMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Configure Windows Defender SmartScreen - ShellSmartScreenLevelMSCT Windows 10 1809 v1.0.0Windows

ACCESS CONTROL

Disallow WinRM from storing RunAs credentialsMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Enable local admin password managementMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Ensure nodev option set on /dev/shm partitionTenable Cisco Firepower Management Center OS Best Practices AuditUnix

ACCESS CONTROL

Ensure nosuid option set on /dev/shm partitionTenable Cisco Firepower Management Center OS Best Practices AuditUnix

ACCESS CONTROL

Ensure nosuid option set on /tmp partitionTenable Cisco Firepower Management Center OS Best Practices AuditUnix

ACCESS CONTROL

Ensure nosuid option set on /var/tmp partitionTenable Cisco Firepower Management Center OS Best Practices AuditUnix

ACCESS CONTROL

Enumerate administrator accounts on elevationMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Enumerate local users on domain-joined computersMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Join Microsoft MAPSMSCT Windows 10 1809 v1.0.0Windows

ACCESS CONTROL

Join Microsoft MAPSMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Network access: Do not allow anonymous enumeration of SAM accountsMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Network access: Restrict anonymous access to Named Pipes and SharesMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Turn off toast notifications on the lock screenMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockInvocationLoggingMSCT Windows 10 1803 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockInvocationLoggingMSCT Windows 10 v21H2 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockInvocationLoggingMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL

Turn on PowerShell Script Block Logging - EnableScriptBlockLoggingMSCT Windows 10 v22H2 v1.0.0Windows

ACCESS CONTROL