Item Search

NameAudit NamePluginCategory
1.1.13 Ensure separate partition exists for /homeCIS SUSE Linux Enterprise Server 11 L2 v2.1.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.21 Ensure sticky bit is set on all world-writable directoriesCIS Debian 9 Server L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.1.21 Ensure sticky bit is set on all world-writable directoriesCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.5.1 Ensure core dumps are restricted - limits.conf limits.dCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.5.1 Ensure core dumps are restricted - sysctlCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

1.5.1 Ensure core dumps are restricted - sysctlCIS Debian 9 Server L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 32-bitCIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 32-bitCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 32-bitCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 64-bitCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 64-bitCIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 64-bitCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - 64-bitCIS Ubuntu Linux 16.04 LTS Workstation L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (32-bit)CIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (32-bit)CIS Ubuntu Linux 16.04 LTS Workstation L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (32-bit)CIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (32-bit)CIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (64-bit)CIS Ubuntu Linux 16.04 LTS Server L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl (64-bit)CIS Ubuntu Linux 16.04 LTS Workstation L2 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl delete x64CIS Debian Family Workstation L2 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - auditctl delete x64CIS Debian Family Server L2 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - deleteCIS Debian Family Workstation L2 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - deleteCIS Debian Family Server L2 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure file deletion events by users are collected - delete x64CIS Debian Family Server L2 v1.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - auditctl mountCIS Debian 9 Server L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - auditctl mount x64CIS Debian 9 Workstation L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - auditctl mount x64CIS Debian 9 Server L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - mountsCIS Debian 9 Workstation L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - mountsCIS Debian 9 Server L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - mounts x64CIS Debian 9 Workstation L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.1.13 Ensure successful file system mounts are collected - mounts x64CIS Debian 9 Server L2 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.2.3 Ensure permissions on all logfiles are configuredCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.4.1 Prefer using secrets as files over secrets as environment variablesCIS Google Kubernetes Engine (GKE) v1.6.1 L2GCP

SYSTEM AND COMMUNICATIONS PROTECTION

4.10 Ensure secrets are not stored in DockerfilesCIS Docker v1.7.0 L1 Docker - LinuxUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.1.6 Ensure that Service Account Tokens are only mounted where necessary - podsCIS Kubernetes v1.20 Benchmark v1.0.1 L1 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.1.6 Ensure that Service Account Tokens are only mounted where necessary - podsCIS Kubernetes v1.24 Benchmark v1.0.0 L1 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.1.6 Ensure that Service Account Tokens are only mounted where necessary - serviceaccountsCIS Kubernetes v1.20 Benchmark v1.0.1 L1 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.1.6 Ensure that Service Account Tokens are only mounted where necessary - serviceaccountsCIS Kubernetes v1.23 Benchmark v1.0.1 L1 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1 Prefer using secrets as files over secrets as environment variablesCIS Kubernetes v1.20 Benchmark v1.0.1 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.1 Prefer using secrets as files over secrets as environment variablesCIS Kubernetes v1.23 Benchmark v1.0.1 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2 Consider external secret storageCIS Kubernetes v1.24 Benchmark v1.0.0 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2 Consider external secret storageCIS Kubernetes v1.20 Benchmark v1.0.1 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.2 Consider external secret storageCIS Kubernetes v1.23 Benchmark v1.0.1 L2 MasterUnix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.4 Ensure default user umask is 027 or more restrictive - /etc/bash.bashrcCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.4 Ensure default user umask is 027 or more restrictive - /etc/profileCIS Debian 9 Server L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.4 Ensure default user umask is 027 or more restrictive - /etc/profileCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.4.4 Ensure default user umask is 027 or more restrictive - /etc/profile.d/*.shCIS Debian 9 Workstation L1 v1.0.1Unix

SYSTEM AND COMMUNICATIONS PROTECTION

5.20 Ensure mount propagation mode is not set to sharedCIS Docker v1.7.0 L1 Docker - LinuxUnix

SYSTEM AND COMMUNICATIONS PROTECTION

7.10 Repairing permissions is no longer neededCIS Apple macOS 10.12 L1 v1.2.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

7.10 Repairing permissions is no longer neededCIS Apple macOS 10.13 L1 v1.1.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION