Item Search

NameAudit NamePluginCategory
2.2.2 (L1) Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
2.2.2 Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BL + NGWindows
2.2.2 Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BLWindows
2.2.2 Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
3.3 Restrict Query OriginsCIS BIND DNS v3.0.1 Authoritative Name ServerUnix
7.1 Do Not Define a Static Source PortCIS BIND DNS v3.0.1 Authoritative Name ServerUnix
18.3.5 Ensure 'NetBT NodeType configuration' is set to 'Enabled: P-node (recommended)'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1Windows
18.4.2 Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.4.2 Ensure 'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.4.4 Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.4.4 Ensure 'MSS: (DisableSavePassword) Prevent the dial-up password from being saved' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1Windows
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + NGWindows
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + NGWindows
18.4.6 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.4.6 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
18.4.7 Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + NGWindows
18.4.7 Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L1 + NGWindows
18.4.7 Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + NGWindows
18.4.8 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BL + NGWindows
18.4.8 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
18.4.11 Ensure 'MSS: (TcpMaxDataRetransmissions IPv6) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'CIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.4.12 Ensure 'MSS: (TcpMaxDataRetransmissions) How many times unacknowledged data is retransmitted' is set to 'Enabled: 3'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
18.5.4.1 (L1) Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')CIS Microsoft Windows 10 Enterprise (Release 1803) v1.5.0 Level 1Windows
18.5.4.1 Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BL + NGWindows
18.5.4.1 Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.5.4.1 Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows
18.5.4.1 Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.5.4.1 Set 'NetBIOS node type' to 'P-node' (Ensure NetBT Parameter 'NodeType' is set to '0x2 (2)')CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BLWindows
18.5.4.2 (L1) Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1803) v1.5.0 Level 1Windows
18.5.4.2 Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + NGWindows
18.5.4.2 Ensure 'Turn off multicast name resolution' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1 + BLWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - AllowLLTDIOOnPublicNetCIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BL + NGWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - AllowLLTDIOOnPublicNetCIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - AllowLLTDIOOnPublicNetCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - EnableLLTDIOCIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - EnableLLTDIOCIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - ProhibitLLTDIOOnPrivateNetCIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - ProhibitLLTDIOOnPrivateNetCIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - AllowRspndrOnDomainCIS Microsoft Windows 10 Enterprise (Release 1909) v1.8.1 L2 + BL + NGWindows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - AllowRspndrOnPublicNetCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NGWindows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - EnableRspndrCIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - ProhibitRspndrOnPrivateNetCIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L2 + BLWindows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - ProhibitRspndrOnPrivateNetCIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
18.5.19.2.1 Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)')CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L2 + BLWindows
18.8.34.6.1 Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NGWindows
18.8.34.6.2 Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + NGWindows
18.8.34.6.2 Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.1 L1Windows
18.8.34.6.2 Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise (Release 1903) v1.7.1 L1 + BLWindows