Item Search

NameAudit NamePluginCategory
1.1.22 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate - certificateCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.1.22 Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate - keyCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 17 L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 15 L1 v4.1.1Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.2 Set 'transport input ssh' for 'line vty' connectionsCIS Cisco IOS 16 L1 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

1.2.6 Ensure that the --kubelet-certificate-authority argument is set as appropriateCIS Kubernetes Benchmark v1.6.1 L1 MasterUnix

IDENTIFICATION AND AUTHENTICATION

1.2.35 Ensure that the API Server only makes use of Strong Cryptographic CiphersCIS Kubernetes Benchmark v1.6.1 L1 MasterUnix

IDENTIFICATION AND AUTHENTICATION

1.5.9 Set 'priv' for each 'snmp-server group' using SNMPv3CIS Cisco IOS 16 L2 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.9 Set 'priv' for each 'snmp-server group' using SNMPv3CIS Cisco IOS 17 L2 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.10 Require 'aes 128' as minimum for 'snmp-server user' when using SNMPv3CIS Cisco IOS 16 L2 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

1.5.10 Require 'aes 128' as minimum for 'snmp-server user' when using SNMPv3CIS Cisco IOS 17 L2 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 18c Linux v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 18c Windows v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.1.1 Ensure 'SECURE_CONTROL_' Is Set In 'listener.ora'CIS Oracle Server 12c Linux v3.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.1 Set the 'hostname'CIS Cisco IOS 17 L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.1 Set the 'hostname'CIS Cisco IOS 16 L1 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.2 Set the 'ip domain-name'CIS Cisco IOS 16 L1 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.2 Set the 'ip domain-name'CIS Cisco IOS 17 L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.3 Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'CIS Cisco IOS 17 L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.3 Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'CIS Cisco IOS 16 L1 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.4 Set 'seconds' for 'ip ssh timeout'CIS Cisco IOS 16 L1 v1.1.2Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.1.1.4 Set 'seconds' for 'ip ssh timeout'CIS Cisco IOS 17 L1 v1.0.0Cisco

IDENTIFICATION AND AUTHENTICATION

2.1.14 Ensure that the Kubelet only makes use of Strong Cryptographic CiphersCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

IDENTIFICATION AND AUTHENTICATION

2.2.2 Ensure rsh client is not installedCIS Debian Family Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.2 Ensure rsh client is not installedCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.2 Ensure rsh client is not installedCIS Debian Family Workstation L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.2 Ensure rsh client is not installedCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Ubuntu Linux 16.04 LTS Server L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Debian Family Workstation L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Ubuntu Linux 16.04 LTS Workstation L1 v2.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.2.4 Ensure telnet client is not installedCIS Debian Family Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.2 Ensure rsh client is not installedCIS Debian 10 Workstation L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.2 Ensure rsh client is not installedCIS Debian 10 Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.4 Ensure telnet client is not installedCIS Debian 10 Workstation L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.4 Ensure telnet client is not installedCIS Debian 10 Server L1 v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3.4 Ensure telnet client is not installedCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

4.2 Ensure valid public keys are installedCIS PostgreSQL 9.5 OS v1.1.0Unix

IDENTIFICATION AND AUTHENTICATION

4.2.13 Ensure that the Kubelet only makes use of Strong Cryptographic CiphersCIS Kubernetes Benchmark v1.6.1 L1 WorkerUnix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 10 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 13 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 9.6 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

5.1 Ensure login via 'local' UNIX Domain Socket is configured correctlyCIS PostgreSQL 12 OS v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

18.9.15.2 (L1) Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.0 L1 BitlockerWindows

IDENTIFICATION AND AUTHENTICATION

18.9.16.1 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0Windows

IDENTIFICATION AND AUTHENTICATION

18.9.16.1 Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0Windows

IDENTIFICATION AND AUTHENTICATION

18.9.59.3.9.3 (L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'CIS Microsoft Windows 8.1 v2.4.0 L1 BitlockerWindows

IDENTIFICATION AND AUTHENTICATION

18.9.59.3.9.3 (L1) Ensure 'Require use of specific security layer for remote (RDP) connections' is set to 'Enabled: SSL'CIS Microsoft Windows 8.1 v2.4.0 L1Windows

IDENTIFICATION AND AUTHENTICATION

18.9.59.3.9.4 (L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.0 L1 BitlockerWindows

IDENTIFICATION AND AUTHENTICATION

18.9.59.3.9.4 (L1) Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.0 L1Windows

IDENTIFICATION AND AUTHENTICATION

18.9.65.3.9.2 Ensure 'Require secure RPC communication' is set to 'Enabled'CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0Windows

IDENTIFICATION AND AUTHENTICATION