| 1.1.1 Enable 'aaa new-model' | CIS Cisco IOS 15 L1 v4.0.1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION |
| 1.1.1 Enable 'aaa new-model' | CIS Cisco IOS 16 L1 v1.1.0 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, IDENTIFICATION AND AUTHENTICATION |
| 1.12 Ensure credentials unused for 90 days or greater are disabled | CIS Amazon Web Services Foundations L1 1.3.0 | amazon_aws | ACCESS CONTROL |
| 2.3.11.3 Ensure 'Network Security: Allow PKU2U authentication requests to this computer to use online identities' is set to 'Disabled' | CIS Microsoft Windows Server 2016 DC L1 v1.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 3.153 - PKU2U authentication using online identities must be prevented. | DISA Windows 7 STIG v1r32 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 3.153 - PKU2U authentication using online identities will be prevented. | DISA Windows Server 2008 R2 DC STIG v1r34 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 3.153 - PKU2U authentication using online identities will be prevented. | DISA Windows Server 2008 R2 MS STIG v1r33 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS Red Hat 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.3 Ensure no legacy '+' entries exist in /etc/passwd - + entries exist in /etc/passwd | CIS Oracle Linux 6 Server L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadow | CIS Oracle Linux 6 Workstation L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadow | CIS Oracle Linux 6 Server L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.4 Ensure no legacy '+' entries exist in /etc/shadow - + entries exist in /etc/shadow | CIS Red Hat 6 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.5 Ensure no legacy '+' entries exist in /etc/group - + entries exist in /etc/group | CIS Oracle Linux 6 Workstation L1 v2.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 18.2.1 (L1) Ensure LAPS AdmPwd GPO Extension / CSE is installed | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.2.3 (L1) Ensure 'Enable Local Admin Password Management' is set to 'Enabled' | CIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.8.28.3 Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled' | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | ACCESS CONTROL |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Microsoft Windows Server 2016 DC L1 v1.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 18.9.6.1 Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled' | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN08-CC-000050 - Connected users on domain-joined computers must not be enumerated. | DISA Windows 8/8.1 STIG v1r23 | Windows | ACCESS CONTROL |
| WN08-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows 8/8.1 STIG v1r23 | Windows | ACCESS CONTROL |
| WN08-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled. | DISA Windows 8/8.1 STIG v1r23 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN08-SO-000063 - PKU2U authentication using online identities must be prevented. | DISA Windows 8/8.1 STIG v1r23 | Windows | IDENTIFICATION AND AUTHENTICATION |
| WN10-CC-000130 - Local users on domain-joined computers must not be enumerated. | DISA Windows 10 STIG v2r1 | Windows | CONFIGURATION MANAGEMENT |
| WN10-CC-000130 - Local users on domain-joined computers must not be enumerated. | DISA Windows 10 STIG v2r2 | Windows | CONFIGURATION MANAGEMENT |
| WN10-CC-000130 - Local users on domain-joined computers must not be enumerated. | DISA Windows 10 STIG v2r3 | Windows | CONFIGURATION MANAGEMENT |
| WN10-CC-000170 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled. | DISA Windows 10 STIG v2r1 | Windows | CONFIGURATION MANAGEMENT |
| WN10-CC-000170 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled. | DISA Windows 10 STIG v2r3 | Windows | CONFIGURATION MANAGEMENT |
| WN10-CC-000170 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled. | DISA Windows 10 STIG v2r2 | Windows | CONFIGURATION MANAGEMENT |
| WN10-SO-000185 - PKU2U authentication using online identities must be prevented. | DISA Windows 10 STIG v2r1 | Windows | CONFIGURATION MANAGEMENT |
| WN10-SO-000185 - PKU2U authentication using online identities must be prevented. | DISA Windows 10 STIG v2r3 | Windows | CONFIGURATION MANAGEMENT |
| WN10-SO-000185 - PKU2U authentication using online identities must be prevented. | DISA Windows 10 STIG v2r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r1 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000051 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 MS STIG v3r1 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 DC STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 DC STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 MS STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 DC STIG v3r1 | Windows | CONFIGURATION MANAGEMENT |
| WN12-CC-000141 - The setting to allow Microsoft accounts to be optional for modern style apps must be enabled (Windows 2012 R2). | DISA Windows Server 2012 and 2012 R2 MS STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-SO-000063 - PKU2U authentication using online identities must be prevented. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN12-SO-000063 - PKU2U authentication using online identities must be prevented. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
| WN12-SO-000063 - PKU2U authentication using online identities must be prevented. | DISA Windows Server 2012 and 2012 R2 DC STIG v3r1 | Windows | CONFIGURATION MANAGEMENT |
| WN12-SO-000063 - PKU2U authentication using online identities must be prevented. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r3 | Windows | CONFIGURATION MANAGEMENT |
| WN16-MS-000030 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2016 STIG v2r2 | Windows | ACCESS CONTROL |
| WN16-MS-000030 - Local users on domain-joined computers must not be enumerated. | DISA Windows Server 2016 STIG v2r3 | Windows | ACCESS CONTROL |
| WN19-MS-000030 - Windows Server 2019 local users on domain-joined member servers must not be enumerated. | DISA Windows Server 2019 STIG v2r3 | Windows | ACCESS CONTROL |
| WN19-SO-000280 - Windows Server 2019 must prevent PKU2U authentication using online identities. | DISA Windows Server 2019 STIG v2r3 | Windows | IDENTIFICATION AND AUTHENTICATION |
