| 2.3.11.4 Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types' | CIS Microsoft Windows Server 2016 MS L1 v1.2.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.3.11.4 Ensure 'Network security: Configure encryption types allowed for Kerberos' is set to 'AES128_HMAC_SHA1, AES256_HMAC_SHA1, Future encryption types' | CIS Microsoft Windows Server 2016 DC L1 v1.2.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.330 - The system must be configured so that the SSH daemon does not allow authentication using RSA rhosts authentication. | Tenable Fedora Linux Best Practices v2.0.0 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Red Hat EL7 Server L1 v3.0.1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Oracle Linux 7 Workstation L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Red Hat EL7 Server L1 v3.0.1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 7 Workstation L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.3 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Amazon Linux 2 v1.0.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS CentOS 6 Server L1 v2.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Oracle Linux 6 Workstation L1 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Red Hat 6 Workstation L1 v2.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Amazon Linux v2.1.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS CentOS 6 Server L1 v2.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 6 Workstation L1 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 6 Server L1 v1.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Red Hat 6 Server L1 v2.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Amazon Linux 2 v1.0.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Red Hat 6 Workstation L1 v2.1.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.3.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Amazon Linux v2.1.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.4.4 Ensure password hashing algorithm is SHA-512 - password-auth | CIS Oracle Linux 8 Server L1 v1.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.4.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 8 Workstation L1 v1.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.4.4 Ensure password hashing algorithm is SHA-512 - system-auth | CIS Oracle Linux 8 Server L1 v1.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled: XTS-AES 256-bit' - EncryptionMethodWithXtsFdv | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.0 BL | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled: XTS-AES 256-bit' - EncryptionMethodWithXtsOs | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.0 BL | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength (Windows 10 [Version 1511] and later)' is set to 'Enabled: XTS-AES 256-bit' - EncryptionMethodWithXtsRdv | CIS Microsoft Windows 10 Enterprise (Release 1809) v1.6.0 BL | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2) | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength (Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2) | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength' is set to 'Enabled: AES 256-bit' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.4 Ensure 'Choose drive encryption method and cipher strength' is set to 'Enabled: AES 256-bit' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - All Profiles | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-53r5 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-53r4 High | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-53r4 Low | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-171 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-53r4 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - 800-53r5 Low | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Big Sur - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Big Sur v1.4.0 - CNSSI 1253 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Catalina - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Catalina v1.5.0 - 800-53r5 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Catalina - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Catalina v1.5.0 - 800-53r4 Low | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Catalina - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Catalina v1.5.0 - 800-53r4 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Catalina - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Catalina v1.5.0 - CNSSI 1253 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Choose drive encryption method and cipher strength | MSCT Windows 10 v1511 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - 800-53r4 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - 800-53r4 Low | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - 800-53r5 Moderate | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - CNSSI 1253 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - 800-53r5 High | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Monterey - Configure the System to Implement Approved Cryptography to Protect Information | NIST macOS Monterey v1.0.0 - All Profiles | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
