Item Search

NameAudit NamePluginCategory
1.1.5 Ensure noexec option set on /tmp partitionCIS Debian 9 Server L1 v1.0.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.1.5 Ensure noexec option set on /tmp partitionCIS Debian 9 Workstation L1 v1.0.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.1.17 Ensure noexec option set on /dev/shm partitionCIS Debian 9 Workstation L1 v1.0.1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

1.1.22 Disable AutomountingCIS Debian 9 Server L1 v1.0.1Unix

SYSTEM AND INFORMATION INTEGRITY

1.1.22 Disable AutomountingCIS Debian 9 Workstation L2 v1.0.1Unix

SYSTEM AND INFORMATION INTEGRITY

1.1.22 Disable AutomountingCIS CentOS 6 Workstation L2 v3.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.1.23 Disable USB Storage - lsmodCIS Distribution Independent Linux Server L1 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.1.23 Disable USB Storage - modprobeCIS Distribution Independent Linux Workstation L2 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

2.1 Alter the Advertised server.info StringCIS Apache Tomcat 10 L2 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

2.1 Alter the Advertised server.info StringCIS Apache Tomcat 10 L2 v1.1.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

2.1.14 Ensure comprehensive attachment filtering is appliedCIS Microsoft 365 Foundations E3 L2 v3.1.0microsoft_azure

SYSTEM AND INFORMATION INTEGRITY

2.3 Alter the Advertised server.built DateCIS Apache Tomcat 10 L2 v1.1.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

2.3.3 Ensure Gatekeeper Is EnabledCIS Apple macOS 14.0 Sonoma Cloud-tailored v1.0.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.4 Disable X-Powered-By HTTP Header and Rename the Server Value for all ConnectorsCIS Apache Tomcat 10 L2 v1.1.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

2.4.4 Ensure Gatekeeper Is EnabledCIS Apple macOS 12.0 Monterey Cloud-tailored v1.0.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.5 Disable client facing Stack TracesCIS Apache Tomcat 10 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

2.5.7 Ensure Gatekeeper Is EnabledCIS Apple macOS 10.15 Catalina v3.0.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.5.7 Ensure Gatekeeper Is EnabledCIS Apple macOS 12.0 Monterey v3.1.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.6.5 Ensure Gatekeeper Is EnabledCIS Apple macOS 14.0 Sonoma v1.1.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.7 Ensure Sever Header is Modified To Prevent Information DisclosureCIS Apache Tomcat 10 L2 v1.1.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

5.5 Ensure alerts are enabled for malicious files detected by WildFireCIS Palo Alto Firewall 11 v1.1.0 L1Palo_Alto

SYSTEM AND INFORMATION INTEGRITY

5.10 Ensure XProtect Is Running and UpdatedCIS Apple macOS 14.0 Sonoma v1.1.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

5.11 Ensure XProtect Is Running and UpdatedCIS Apple macOS 12.0 Monterey Cloud-tailored v1.0.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

5.11 Ensure XProtect Is Running and UpdatedCIS Apple macOS 11.0 Big Sur v4.0.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

18.4.9 (L1) Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.8.2 (L1) Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.8.3 (L1) Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2019 v3.0.1 L1 DCWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2019 v3.0.1 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v3.0.0 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2016 v3.0.0 L1 DCWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2016 v3.0.0 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 (L1) Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2022 v3.0.0 L1 Domain ControllerWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.1 Ensure 'Scan packed executables' is set to 'Enabled'CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v3.0.0 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NGWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v3.0.0 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v3.0.0 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BLWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL + NGWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BLWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows Server 2019 v3.0.1 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.42.13.2 Ensure 'Scan removable drives' is set to 'Enabled'CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MSWindows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

18.10.43.13.1 (L1) Ensure 'Scan removable drives' is set to 'Enabled'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

21.3 (L1) Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'CIS Microsoft Intune for Windows 10 v3.0.1 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

21.3 (L1) Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'CIS Microsoft Intune for Windows 11 v3.0.1 L1Windows

MEDIA PROTECTION, SYSTEM AND INFORMATION INTEGRITY

Catalina - Enforce Gatekeeper 30 Day Automatic RearmNIST macOS Catalina v1.5.0 - 800-171Unix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY

Monterey - Enforce Gatekeeper 30 Day Automatic RearmNIST macOS Monterey v1.0.0 - 800-53r5 ModerateUnix

CONFIGURATION MANAGEMENT, SYSTEM AND INFORMATION INTEGRITY