Detections
Analytics

CSCv7|13.7

Title

Manage USB Devices

Description

If USB storage devices are required, enterprise software should be used that can configure systems to allow the use of specific devices. An inventory of such devices should be maintained.

Reference Item Details

Category: Data Protection

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS AlmaLinux OS 8 Server L1 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS AlmaLinux OS 8 Workstation L2 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat Enterprise Linux 9 v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 8 Workstation L2 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 9 v2.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 8 Server L1 v2.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS AlmaLinux OS 9 v2.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Amazon Linux 2 v3.0.0 L1
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat EL8 Workstation L2 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 8 Workstation L2 v2.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 8 Server L1 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Debian Linux 11 v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Ubuntu Linux 22.04 LTS v2.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS AlmaLinux OS 9 v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 9 v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat Enterprise Linux 9 v2.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 9 v2.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Rocky Linux 9 v2.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS CentOS Linux 7 v4.0.0 L1 Server
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Oracle Linux 7 v4.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat EL8 Server L1 v3.0.0
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Red Hat Enterprise Linux 7 v4.0.0 L2 Workstation
1.1.1.8 Ensure usb-storage kernel module is not availableUnixCIS Debian Linux 11 v2.0.0 L2 Workstation
1.1.1.9 Ensure usb-storage kernel module is not availableUnixCIS Debian Linux 12 v1.1.0 L1 Server
1.1.1.9 Ensure usb-storage kernel module is not availableUnixCIS Debian Linux 12 v1.1.0 L2 Workstation
1.1.1.9 Ensure usb-storage kernel module is not availableUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L1 Server
1.1.1.9 Ensure usb-storage kernel module is not availableUnixCIS Ubuntu Linux 24.04 LTS v1.0.0 L2 Workstation
1.1.9 Ensure usb-storage is disabledUnixCIS Amazon Linux 2023 Server L1 v1.0.0
1.1.10 Disable USB StorageUnixCIS Debian 10 Workstation L2 v2.0.0
1.1.10 Disable USB StorageUnixCIS CentOS Linux 8 Workstation L2 v2.0.0
1.1.10 Disable USB StorageUnixCIS Fedora 28 Family Linux Workstation L2 v2.0.0
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 20.04 LTS Server L1 v2.0.1
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 20.04 LTS Workstation L2 v2.0.1
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L1 Server
1.1.10 Disable USB StorageUnixCIS Ubuntu Linux 18.04 LTS v2.2.0 L2 Workstation
1.1.10 Disable USB StorageUnixCIS Fedora 28 Family Linux Server L1 v2.0.0
1.1.10 Disable USB StorageUnixCIS Debian 10 Server L1 v2.0.0
1.1.10 Disable USB StorageUnixCIS CentOS Linux 8 Server L1 v2.0.0
1.1.20 Disable AutomountingUnixCIS Amazon Linux 2 STIG v1.0.0 L1
18.8.7.1.1 (BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.7.1.1 (BL) Ensure 'Prevent installation of devices that match any of these device IDs' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.7.1.2 (BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.7.1.2 (BL) Ensure 'Prevent installation of devices that match any of these device IDs: Prevent installation of devices that match any of these device IDs' is set to 'PCI\CC_0C0A'WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.7.1.3 (BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
18.8.7.1.3 (BL) Ensure 'Prevent installation of devices that match any of these device IDs: Also apply to matching devices that are already installed.' is set to 'True' (checked)WindowsCIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker
18.8.7.1.4 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes' is set to 'Enabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker