Item Search

NameAudit NamePluginCategory
1.20 VCSA-80-000123CIS VMware vSphere 8.0 vCenter STIG v1.0.0 CAT IIVMware

ACCESS CONTROL

1.26 ALMA-09-005080CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.27 ALMA-09-005190CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.28 ALMA-09-005300CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.29 ALMA-09-005410CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.30 ALMA-09-005960CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.31 ALMA-09-006070CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.34 AZLX-23-001075CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.35 AZLX-23-001080CIS Amazon Linux 2023 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

1.92 OL09-00-000500CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.94 OL09-00-000510CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.95 OL09-00-000515CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.96 OL09-00-000520CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.97 OL09-00-000525CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.98 OL09-00-000530CIS Oracle Linux 9 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE

1.103 SLES-15-030000CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.104 SLES-15-030010CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.105 SLES-15-030020CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

1.106 SLES-15-030030CIS SUSE Linux Enterprise Server 15 STIG v1.0.0 CAT IIUnix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

AIX7-00-001000 - AIX /etc/security/mkuser.sys.custom file must not exist unless it is needed for customizing a new user account.DISA IBM AIX 7.x STIG v3r2Unix

ACCESS CONTROL

AIX7-00-001015 - The shipped /etc/security/mkuser.sys file on AIX must not be customized directly.DISA IBM AIX 7.x STIG v3r2Unix

ACCESS CONTROL

AZLX-23-001075 - Amazon Linux 2023 must have the firewalld package installed.DISA Amazon Linux 2023 STIG v1r3Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

AZLX-23-001080 - Amazon Linux 2023 must have the firewalld service active.DISA Amazon Linux 2023 STIG v1r3Unix

ACCESS CONTROL, CONFIGURATION MANAGEMENT

ESXI-80-000114 - The ESXi host must offload logs via syslog.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

ESXI-80-000114 - The ESXi host must offload logs via syslog.DISA VMware vSphere 8.0 ESXi STIG v2r3 VMwareVMware

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

F5BI-DM-000013 - The BIG-IP appliance must provide automated support for account management functions.DISA F5 BIG-IP Device Management STIG v2r4F5

ACCESS CONTROL, CONFIGURATION MANAGEMENT

JUSX-DM-000039 - The Juniper SRX Services Gateway must allow only the information system security manager (ISSM) (or administrators/roles appointed by the ISSM) to select which auditable events are to be generated and forwarded to the syslog and/or local logs - or administrators/roles appointed by the ISSM to select which auditable events are to be generated and forwarded to the syslog and/or local logs.DISA Juniper SRX Services Gateway NDM v3r3Juniper

ACCESS CONTROL, CONFIGURATION MANAGEMENT

JUSX-DM-000060 - For local logging, the Juniper SRX Services Gateway must generate a message to the system management console when a log processing failure occurs.DISA Juniper SRX Services Gateway NDM v3r3Juniper

ACCESS CONTROL, CONFIGURATION MANAGEMENT

JUSX-DM-000061 - In the event that communications with the events server is lost, the Juniper SRX Services Gateway must continue to queue log records locally.DISA Juniper SRX Services Gateway NDM v3r3Juniper

ACCESS CONTROL, CONFIGURATION MANAGEMENT

JUSX-DM-000097 - The Juniper SRX Services Gateway must be configured to use a centralized authentication server to authenticate privileged users for remote and nonlocal access for device management.DISA Juniper SRX Services Gateway NDM v3r3Juniper

ACCESS CONTROL, CONFIGURATION MANAGEMENT

MD3X-00-000010 - MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA STIG MongoDB Enterprise Advanced 3.x v2r3 OSUnix

ACCESS CONTROL

O112-C2-001800 - The system must employ automated mechanisms for supporting Oracle user account management.DISA STIG Oracle 11.2g v2r5 DatabaseOracleDB

ACCESS CONTROL

O121-C2-001800 - The system must employ automated mechanisms for supporting Oracle user account management.DISA Oracle Database 12c STIG v3r5 OracleDBOracleDB

ACCESS CONTROL

OL6-00-000524 - The system must provide automated support for account management functions.DISA STIG Oracle Linux 6 v2r7Unix

ACCESS CONTROL

PGS9-00-000500 - PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA STIG PostgreSQL 9.x on RHEL OS v2r5Unix

ACCESS CONTROL

SLES-12-020200 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA SLES 12 STIG v3r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-12-020210 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.DISA SLES 12 STIG v3r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-12-020220 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.DISA SLES 12 STIG v3r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-12-020230 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/opasswd.DISA SLES 12 STIG v3r5Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-15-030000 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/passwd.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-15-030010 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/group.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-15-030020 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/shadow.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SLES-15-030030 - The SUSE operating system must generate audit records for all account creations, modifications, disabling, and termination events that affect /etc/security/opasswd.DISA SUSE Linux Enterprise Server 15 STIG v2r6Unix

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

SPLK-CL-000020 - Splunk Enterprise must notify the system administrator (SA) and information system security officer (ISSO) when account events are received (creation, deletion, modification, or disabling) - creation, deletion, modification, or disabling.DISA STIG Splunk Enterprise 8.x for Linux v2r3 STIG REST APISplunk

ACCESS CONTROL

SPLK-CL-000200 - Splunk Enterprise must notify the system administrator (SA) and information system security officer (ISSO) when account events are received (creation, deletion, modification, disabling) - creation, deletion, modification, disabling.DISA STIG Splunk Enterprise 7.x for Windows v3r2 REST APISplunk

ACCESS CONTROL

SPLK-CL-000235 - Splunk Enterprise must notify analysts of applicable events for Tier 2 CSSP and JRSS only.DISA STIG Splunk Enterprise 7.x for Windows v3r2 REST APISplunk

ACCESS CONTROL

SQL4-00-030300 - SQL Server authentication and identity management must be integrated with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA STIG SQL Server 2014 Instance DB Audit v2r4MS_SQLDB

ACCESS CONTROL

SQL6-D0-000100 - SQL Server databases must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA MS SQL Server 2016 Database STIG v3r5MS_SQLDB

ACCESS CONTROL

SQL6-D0-003700 - SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals.DISA MS SQL Server 2016 Instance STIG v3r6 MS_SQLDBMS_SQLDB

ACCESS CONTROL

VCSA-80-000123 - The vCenter Server must provide an immediate real-time alert to the system administrator (SA) and information system security officer (ISSO), at a minimum, on every Single Sign-On (SSO) account action.DISA VMware vSphere 8.0 vCenter STIG v2r3VMware

ACCESS CONTROL