| 1.1.3.11.14 Configure 'Network Security: Restrict NTLM: Incoming NTLM traffic' | CIS Windows 8 L1 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 1.1.24 Disable USB Storage - lsmod | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.1.24 Disable USB Storage - modprobe | CIS Oracle Linux 7 Workstation L2 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.3.1 Disable Bluetooth by using System Preferences for each user account | CIS Apple OSX 10.6 Snow Leopard L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.10.5 Disable IPv6 | CIS Apple OSX 10.6 Snow Leopard L2 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.6.1 Secure Bonjour | CIS Apple OSX 10.6 Snow Leopard L2 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.10 Ensure 'Transport Pickup Directory Path' is not set | CIS Microsoft Exchange Server 2019 L1 Edge v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 1.30 Set 'Synchronize Outlook RSS Feeds with Common Feed List' to 'Disabled' | CIS MS Office Outlook 2010 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 2.1.3 Show Bluetooth status in menu bar | CIS Apple OSX 10.11 El Capitan L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.3 Ensure talk client is not installed - zypper | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.4 Ensure telnet client is not installed - dpkg | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.16.1 Ensure 'System settings: Optional subsystems' is set to Defined:(blank) | CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 2.4 Ensure nonessential services are removed or masked | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.4.14.13 Configure Internet Sharing (Check NAT is not Enabled in com.apple.nat) | CIS Apple OSX 10.5 Leopard L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.6.2 Enable Gatekeeper | CIS Apple OSX 10.11 El Capitan L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 3.5.2.10 Ensure nftables service is enabled | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 3.5.2.10 Ensure nftables service is enabled | CIS Oracle Linux 7 Workstation L1 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 3.5.3.3.6 Ensure ip6tables is enabled and running - running | CIS Oracle Linux 7 Server L1 v3.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.1 Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.1 Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.4 Ensure 'HomeGroup Listener (HomeGroupListener)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.4 Ensure 'HomeGroup Provider (HomeGroupProvider)' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.5 Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.5 Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.6 Ensure 'IIS Admin Service (IISADMIN)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.8 Ensure 'Media Center Extender Service (Mcx2Svc)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.9 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.9 Ensure 'Microsoft FTP Service (FTPSVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.10 Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.15 Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.17 Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.20 Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.21 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.23 Ensure 'Server (LanmanServer)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.24 Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.24 Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.26 Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.28 Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.35 Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.35 Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.3.3 Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver' | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.5.4.2 Ensure 'Turn off multicast name resolution' is set to 'Enabled' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.5.4.2 Ensure 'Turn off multicast name resolution' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| Application Identity | MSCT Windows Server 1903 DC v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Configure Solicited Remote Assistance - fAllowFullControl | MSCT Windows 10 1607 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Configure Solicited Remote Assistance - fUseMailto | MSCT Windows 10 v1511 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Enable Structured Exception Handling Overwrite Protection (SEHOP) | MSCT Windows Server 1903 DC v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| HKLM\Software\Policies\Microsoft\Windows\Safer\: MSFT Windows Server 1903 - Domain Controller | MSCT Windows Server 1903 DC v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| HKLM\Software\Policies\Microsoft\Windows\SrpV2\Exe\EnforcementMode: MSFT Windows Server 1903 - Domain Controller | MSCT Windows Server 1903 DC v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
