| *.rules /etc/selinux | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| *.rules /usr/share/selinux | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| /etc/issue.net | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| /etc/selinux/config | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| /etc/shadow | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| /etc/sysconfig/network | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| 1.1.1.7 Ensure udf kernel module is not available | CIS Amazon Linux 2 v3.0.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 1.1.2.3.1 Ensure separate partition exists for /home | CIS Amazon Linux 2 v3.0.0 L2 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.1.2.6.1 Ensure separate partition exists for /var/log | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 2.3.7.7 Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0 | Windows | ACCESS CONTROL |
| 2.3.7.8 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS | Windows | ACCESS CONTROL |
| 2.3.7.8 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG | Windows | ACCESS CONTROL |
| 2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Windows 11 Enterprise v3.0.0 L1 | Windows | ACCESS CONTROL |
| 2.3.7.9 Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller | Windows | ACCESS CONTROL |
| 2.3.7.10 Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or 'Force Logoff' (STIG DC & MS only) | CIS Microsoft Windows Server 2022 STIG v1.0.0 STIG MS | Windows | ACCESS CONTROL |
| 4.2.8 Ensure sshd DisableForwarding is enabled | CIS Amazon Linux 2 v3.0.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 5.2.1.1 Ensure audit is installed | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.1.4 Ensure auditd service is enabled | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.2.1 Ensure audit log storage size is configured | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.2.2 Ensure audit logs are not automatically deleted | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.2.3 Ensure system is disabled when audit logs are full | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3.1 Ensure changes to system administration scope (sudoers) is collected | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3.9 Ensure discretionary access control permission modification events are collected | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.3.13 Ensure file deletion events by users are collected | CIS Amazon Linux 2 v3.0.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 5.2.4.1 Ensure the audit log directory is 0750 or more restrictive | CIS Amazon Linux 2 v3.0.0 L2 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.2.4.8 Ensure audit tools are 755 or more restrictive | CIS Amazon Linux 2 v3.0.0 L2 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 45.12 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' or higher | CIS Microsoft Intune for Windows 10 v3.0.1 L1 | Windows | ACCESS CONTROL |
| adjtimex x64 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| Amazon Linux 2 is installed | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b32 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b32 fsetxattr | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b32 setxattr | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b32 unlink | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b64 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b64 fchmodat | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl b64 fchown | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl delete_module b64 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| auditctl utmp | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b32 fsetxattr | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b32 sethostname | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b64 chmod | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b64 EPERM | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b64 fchmod | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| b64 fsetxattr | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| create_module b64 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| delete_module b64 | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| OS 64bit check | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| password-auth authfail root_unlock_time | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
| symlinks | CIS Amazon Linux 2 v3.0.0 L2 | Unix | |
