Item Search

NameAudit NamePluginCategory
17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Windows Server 2012 DC L1 v3.0.0Windows

AUDIT AND ACCOUNTABILITY

17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Windows Server 2012 MS L1 v3.0.0Windows

AUDIT AND ACCOUNTABILITY

17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

AUDIT AND ACCOUNTABILITY

17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

AUDIT AND ACCOUNTABILITY

17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1Windows

AUDIT AND ACCOUNTABILITY

17.3.1 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1Windows

AUDIT AND ACCOUNTABILITY

17.3.2 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

AUDIT AND ACCOUNTABILITY

17.3.2 (L1) Ensure 'Audit Process Creation' is set to include 'Success'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

AUDIT AND ACCOUNTABILITY

18.6.11.4 Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L1Windows

ACCESS CONTROL

18.6.11.4 Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L1Windows

ACCESS CONTROL

18.6.11.4 Ensure 'Require domain users to elevate when setting a network's location' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

ACCESS CONTROL

18.9.18.1 Ensure 'Turn off desktop gadgets' is set to 'Enabled'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

CONFIGURATION MANAGEMENT

18.9.18.2 Ensure 'Turn Off user-installed desktop gadgets' is set to 'Enabled'CIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0Windows

CONFIGURATION MANAGEMENT

18.9.103.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 2 v3.3.1Windows

CONFIGURATION MANAGEMENT

18.9.103.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2008 Domain Controller Level 2 v3.3.1Windows

CONFIGURATION MANAGEMENT

18.10.9.3.3 (L1) Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1Windows

MEDIA PROTECTION

18.10.10.1.3 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2 BLWindows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.10.1.3 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BLWindows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.10.1.3 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.10.1.3 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.10.1.3 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

SYSTEM AND COMMUNICATIONS PROTECTION

18.10.10.1.8 Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'CIS Microsoft Windows 10 Stand-alone v5.0.0 L2 BL NGWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.1.11 Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.1.11 Ensure 'Configure use of passwords for fixed data drives' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BLWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.3.3 Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

MEDIA PROTECTION

18.10.10.3.3 Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Stand-alone v5.0.0 L1 BLWindows

MEDIA PROTECTION

18.10.10.3.11 Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.3.11 Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BLWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.3.11 Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L1 BL NGWindows

IDENTIFICATION AND AUTHENTICATION

18.10.10.3.11 Ensure 'Configure use of passwords for removable data drives' is set to 'Disabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BLWindows

IDENTIFICATION AND AUTHENTICATION

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows 11 Stand-alone v5.0.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise v5.0.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2 BLWindows

CONFIGURATION MANAGEMENT

18.10.36.1 Ensure 'Turn off location' is set to 'Enabled'CIS Microsoft Windows 11 Enterprise v5.1.0 L2Windows

CONFIGURATION MANAGEMENT

18.10.90.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Windows Server 2012 R2 DC L2 v3.0.0Windows

CONFIGURATION MANAGEMENT

18.10.90.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Windows Server 2012 R2 MS L2 v3.0.0Windows

CONFIGURATION MANAGEMENT

18.10.90.1 (L2) Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2016 v4.0.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2019 v5.0.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2022 v5.1.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2025 v2.1.0 L2 DCWindows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2019 Stand-alone v4.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

18.10.91.1 Ensure 'Allow Remote Shell Access' is set to 'Disabled'CIS Microsoft Windows Server 2019 v5.0.0 L2 MSWindows

CONFIGURATION MANAGEMENT

DISA_STIG_Apple_OS_X_10.15_v1r10.audit from DISA Apple OS X 10.15 (Catalina) v1r10 STIGDISA STIG Apple Mac OSX 10.15 v1r10Unix
DISA_STIG_IBM_AIX_7.x_v3r3.audit from DISA IBM AIX 7.x STIG v3r3DISA IBM AIX 7.x STIG v3r3Unix
DISA_STIG_MongoDB_Enterprise_Advanced_8.x_v1r1_Unix.audit from DISA MongoDB Enterprise Advanced 8.x STIG v1r1DISA MongoDB Enterprise Advanced 8.x STIG v1r1 UnixUnix
DISA_STIG_Red_Hat_Enterprise_Linux_8_v2r8.audit from DISA Red Hat Enterprise Linux 8 STIG v2r8DISA Red Hat Enterprise Linux 8 STIG v2r8Unix
DISA_STIG_Red_Hat_Enterprise_Linux_9_v2r9.audit from DISA Red Hat Enterprise Linux 9 STIG v2r9DISA Red Hat Enterprise Linux 9 STIG v2r9Unix
DISA_STIG_VMware_vSphere_6.7_STS_Tomcat_v1r3.audit from DISA VMware vSphere 6.7 STS Tomcat v1r3 STIGDISA STIG VMware vSphere 6.7 STS Tomcat v1r3Unix
WN12-AD-000009-DC - The directory server supporting (directly or indirectly) system access or resource authorization must run on a machine dedicated to that function - RolesDISA Windows Server 2012 and 2012 R2 DC STIG v3r7Windows

SYSTEM AND COMMUNICATIONS PROTECTION

WN12-AU-000031 - Windows Server 2012/2012 R2 must be configured to audit Logon/Logoff - Account Lockout failures.DISA Windows Server 2012 and 2012 R2 MS STIG v3r7Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY