Item Search

NameAudit NamePluginCategory
1.1.2.17 Set 'Audit Policy: Account Management: Security Group Management' to 'Success and Failure'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.2.26 Set 'Audit Policy: Account Management: Application Group Management' to 'No Auditing'CIS Windows 8 L1 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

1.1.3 Ensure that the --insecure-allow-any-token argument is not setCIS Kubernetes 1.11 Benchmark v1.3.0 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.1.4 Ensure that the --insecure-allow-any-token argument is not setCIS Kubernetes 1.7.0 Benchmark v1.1.0 L1Unix

IDENTIFICATION AND AUTHENTICATION

1.1.27 Ensure that the admission control plugin ServiceAccount is setCIS Kubernetes 1.11 Benchmark v1.3.0 L1Unix

ACCESS CONTROL

1.1.27 Ensure that the admission control policy is set to ServiceAccountCIS Kubernetes 1.8 Benchmark v1.2.0 L1Unix

ACCESS CONTROL

1.2.4.3.2 Configure 'Do not display the password reveal button'CIS Windows 8 L1 v1.0.0Windows

CONFIGURATION MANAGEMENT

2.1 Ensure that authentication is enabled for MongoDB databasesCIS MongoDB 3.2 L1 Windows Audit v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.1 Ensure that authentication is enabled for MongoDB databasesCIS MongoDB 3.4 L1 Unix Audit v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.1 Ensure that authentication is enabled for MongoDB databasesCIS MongoDB 3.2 L1 Unix Audit v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.1 Ensure that authentication is enabled for MongoDB databasesCIS MongoDB 3.4 L1 Windows Audit v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.2 Give the BIND User Account an Invalid ShellCIS BIND DNS v3.0.1 Authoritative Name ServerUnix

ACCESS CONTROL

2.3 Ensure authentication is enabled in the sharded clusterCIS MongoDB 3.4 L1 Unix Audit v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.3 Lock the BIND User AccountCIS BIND DNS v3.0.1 Caching Only Name ServerUnix

ACCESS CONTROL

2.4 Ensure an industry standard authentication mechanism is used - authenticationMechanismsCIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix

CONFIGURATION MANAGEMENT

2.4 Ensure an industry standard authentication mechanism is used - authenticationMechanismsCIS MongoDB 3.2 L2 Windows Audit v1.0.0Windows

CONFIGURATION MANAGEMENT

2.4 Ensure an industry standard authentication mechanism is used - authorizationCIS MongoDB 3.2 L2 Windows Audit v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.4 Ensure an industry standard authentication mechanism is used - clusterAuthModeCIS MongoDB 3.2 L2 Unix Audit v1.0.0Unix

IDENTIFICATION AND AUTHENTICATION

2.4 Ensure an industry standard authentication mechanism is used - modeCIS MongoDB 3.4 L2 Windows Audit v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

2.4.1 Ensure 'Allow simple value' is set to 'Disabled'AirWatch - CIS Apple iOS 10 v2.0.0 End User Owned L1MDM

CONFIGURATION MANAGEMENT

2.7 Ensure a separate organizational unit (OU) in Active Directory exists for SharePoint 2016 objects.CIS Microsoft SharePoint 2016 OS v1.1.0Windows
3.4.1 Ensure 'Allow simple value' is set to 'Disabled'AirWatch - CIS Apple iOS 10 v2.0.0 Institution Owned L1MDM

CONFIGURATION MANAGEMENT

4.1 Ensure SharePoint displays an approved system use notification message or banner before granting access to the system.CIS Microsoft SharePoint 2019 OS v1.0.0Windows

ACCESS CONTROL

4.4 Ensure Anonymous authentication is deniedCIS Microsoft SharePoint 2019 OS v1.0.0Windows

ACCESS CONTROL

5.2.3 Ensure SSH LogLevel is set to INFOCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

AUDIT AND ACCOUNTABILITY

5.2.5 Ensure SSH MaxAuthTries is set to 4 or lessCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

5.2.5 Ensure SSH MaxAuthTries is set to 4 or lessCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

ACCESS CONTROL

5.2.9 Ensure SSH PermitEmptyPasswords is disabledCIS Amazon Linux v2.1.0 L1Unix

IDENTIFICATION AND AUTHENTICATION

5.2.9 Ensure SSH PermitEmptyPasswords is disabledCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.2.9 Ensure SSH PermitEmptyPasswords is disabledCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

5.4.2 Ensure system accounts are non-loginCIS Amazon Linux v2.1.0 L1Unix

ACCESS CONTROL

5.4.2 Ensure system accounts are non-loginCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

6.2.15 Ensure all groups in /etc/passwd exist in /etc/groupCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

ACCESS CONTROL

6.2.16 Ensure no duplicate UIDs existCIS Ubuntu Linux 14.04 LTS Server L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.16 Ensure no duplicate UIDs existCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

6.2.19 Ensure no duplicate group names existCIS Ubuntu Linux 14.04 LTS Workstation L1 v2.1.0Unix

IDENTIFICATION AND AUTHENTICATION

17.2.2 Ensure 'Audit Security Group Management' is set to include 'Success'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows 10 1909 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows 10 v20H2 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server 1903 DC v1.19.9Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server v1909 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server 2012 R2 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server 2016 MS v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server 2019 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows Server v20H2 DC v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Audit Security Group ManagementMSCT Windows 10 v2004 v1.0.0Windows

AUDIT AND ACCOUNTABILITY

Domain member: Disable machine account password changesMSCT Windows 10 1803 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Domain member: Disable machine account password changesMSCT Windows Server 2019 MS v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Domain member: Disable machine account password changesMSCT Windows 10 1809 v1.0.0Windows

IDENTIFICATION AND AUTHENTICATION

Domain member: Disable machine account password changesMSCT Windows 10 1903 v1.19.9Windows

IDENTIFICATION AND AUTHENTICATION