Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabled - lsmodCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabled - modprobeCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabled - modprobeCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.3 Ensure mounting of jffs2 filesystems is disabledCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabledCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure mounting of hfs filesystems is disabled - modprobeCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabledCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabledCIS CentOS 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - modprobeCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.5 Ensure mounting of hfsplus filesystems is disabled - modprobeCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabledCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure mounting of squashfs filesystems is disabled - modprobeCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabledCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabledCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.5 Ensure noexec option set on /tmp partitionCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.10 Ensure noexec option set on /var/tmp partitionCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.10 Ensure noexec option set on /var/tmp partitionCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.17 Ensure noexec option set on /dev/shm partitionCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.17 Ensure noexec option set on /dev/shm partitionCIS Red Hat 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.17 Ensure noexec option set on /dev/shm partitionCIS Distribution Independent Linux Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.17 Ensure noexec option set on /dev/shm partitionCIS Distribution Independent Linux Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.19 Ensure noexec option set on removable media partitionsCIS Debian 8 Server L1 v2.0.1Unix

ACCESS CONTROL

1.1.19 Ensure noexec option set on removable media partitionsCIS Red Hat EL7 Workstation L1 v3.0.1Unix

ACCESS CONTROL

1.1.20 Ensure noexec option set on removable media partitionsCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

1.1.20 Ensure noexec option set on removable media partitionsCIS Oracle Linux 8 Server L1 v1.0.0Unix

ACCESS CONTROL

1.1.20 Ensure noexec option set on removable media partitionsCIS Distribution Independent Linux Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

1.1.21 Ensure noexec option set on removable media partitionsCIS Ubuntu Linux 20.04 LTS Server L1 v1.0.0Unix

ACCESS CONTROL

1.1.21 Ensure noexec option set on removable media partitionsCIS Ubuntu Linux 20.04 LTS Workstation L1 v1.0.0Unix

ACCESS CONTROL

2.2 Scan for TROJAN aka Untrusted/Unauthorized Applications (Implement Allowlist)CIS IBM AIX 7.2 L1 v1.0.0Unix
2.2.15 Ensure net-snmp is not installedCIS Red Hat EL7 Server L1 v3.0.1Unix

CONFIGURATION MANAGEMENT

2.2.18 Ensure NIS server is not installedCIS Red Hat EL7 Workstation L1 v3.0.1Unix

CONFIGURATION MANAGEMENT

2.3.1 Ensure NIS Client is not installedCIS Red Hat 6 Server L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3.1 Ensure NIS Client is not installedCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3.3 Ensure talk client is not installedCIS Ubuntu Linux 18.04 LXD Host L1 Server v1.0.0Unix

CONFIGURATION MANAGEMENT

2.3.4 Ensure telnet client is not installedCIS CentOS 6 Workstation L1 v3.0.0Unix

CONFIGURATION MANAGEMENT

2.3.4 Ensure telnet client is not installedCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.3.5 Ensure LDAP client is not installedCIS Oracle Linux 6 Workstation L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.3.5 Ensure LDAP client is not installedCIS Debian 8 Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.3.5 Ensure LDAP client is not installedCIS Oracle Linux 6 Server L1 v2.0.0Unix

CONFIGURATION MANAGEMENT

2.5.2.1 Enable GatekeeperCIS Apple macOS 11 v1.1.0 L1Unix

CONFIGURATION MANAGEMENT

4.2.12 Ensure that the Kubelet only makes use of Strong Cryptographic CiphersCIS RedHat OpenShift Container Platform v1.6.0 L1OpenShift

IDENTIFICATION AND AUTHENTICATION

18.9.80.1.1 Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' - EnableSmartScreenCIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0Windows
18.9.80.1.1 Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' - ShellSmartScreenLevelCIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0Windows
18.9.80.1.1 Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' - ShellSmartScreenLevelCIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0Windows
18.9.80.1.1 Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass' - ShellSmartScreenLevelCIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0Windows