Item Search

NameAudit NamePluginCategory
1.1.5 Ensure that the --insecure-bind-address argument is not setCIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

SYSTEM AND INFORMATION INTEGRITY

1.2.2 Ensure that the --address argument is set to 127.0.0.1CIS Kubernetes 1.13 Benchmark v1.4.1 L1Unix

SYSTEM AND INFORMATION INTEGRITY

2.1 Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'CIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.1 Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'CIS SQL Server 2014 Database L1 AWS RDS v1.5.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.2.5 Ensure 'REMOTE_LISTENER' Is EmptyCIS Oracle Server 18c DB Traditional Auditing v1.1.0OracleDB

SYSTEM AND INFORMATION INTEGRITY

2.2.5 Ensure 'REMOTE_LISTENER' Is EmptyCIS Oracle Server 18c DB Unified Auditing v1.1.0OracleDB

SYSTEM AND INFORMATION INTEGRITY

2.3 Ensure the WebDAV Modules Are DisabledCIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

2.4 Ensure 'Database Mail XPs' Server Configuration Option is set to '0'CIS SQL Server 2012 Database L1 AWS RDS v1.6.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.4 Ensure 'Database Mail XPs' Server Configuration Option is set to '0'CIS SQL Server 2012 Database L1 DB v1.6.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.6 Ensure the Proxy Modules Are DisabledCIS Apache HTTP Server 2.2 L1 v3.6.0Unix

SYSTEM AND INFORMATION INTEGRITY

2.7 Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'CIS SQL Server 2014 Database L1 AWS RDS v1.5.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

2.10 Ensure Unnecessary SQL Server Protocols are set to 'Disabled' - 'TCP/IP protocol is disabled'CIS SQL Server 2014 Database L1 OS v1.5.0Windows

SYSTEM AND INFORMATION INTEGRITY

2.11 Ensure Unnecessary SQL Server Protocols are set to 'Disabled' - 'Named Pipes protocol is disabled'CIS SQL Server 2008 R2 DB OS L1 v1.7.0Windows

SYSTEM AND INFORMATION INTEGRITY

2.13 Ensure 'Hide Instance' option is set to 'Yes' for Production SQL Server instancesCIS SQL Server 2008 R2 DB OS L1 v1.7.0Windows

SYSTEM AND INFORMATION INTEGRITY

2.16 Ensure 'xp_cmdshell' Server Configuration Option is set to '0'CIS SQL Server 2008 R2 DB Engine L1 v1.7.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

3.1.4.1 If VLAN interfaces have IP addreses, configure anti spoofing / ingress filtering protectionsCIS Cisco NX-OS L1 v1.1.0Cisco

SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

3.2 Restrict Recursive Queries - Authoritative Name ServerCIS BIND DNS v1.0.0 L1 Authoritative Name ServerUnix

SYSTEM AND INFORMATION INTEGRITY

3.5.1 Ensure DCCP is disabled - lsmodCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.1 Ensure DCCP is disabled - modprobeCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.2 Ensure SCTP is disabled - modprobeCIS Ubuntu Linux 18.04 LXD Host L2 Workstation v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.3 Ensure RDS is disabled - lsmodCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.3 Ensure RDS is disabled - modprobeCIS Debian Family Server L2 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.4 Ensure TIPC is disabled - lsmodCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.5.4 Ensure TIPC is disabled - modprobeCIS Ubuntu Linux 18.04 LXD Host L2 Server v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.10 Ensure SharePoint database servers are segregated from application server and placed in a secure zone.CIS Microsoft SharePoint 2019 OS v1.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

5.5 (L1) Ensure 'HomeGroup Provider (HomeGroupProvider)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L1 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

5.9 Ensure Old HTTP Protocol Versions Are Disallowed - 'httpd.conf <VirtualHost> RewriteEngine = on'CIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

5.9 Ensure Old HTTP Protocol Versions Are Disallowed - 'httpd.conf RewriteCond = %{THE_REQUEST} !HTTP/1.1$'CIS Apache HTTP Server 2.2 L1 v3.6.0Unix

SYSTEM AND INFORMATION INTEGRITY

5.9 Ensure Old HTTP Protocol Versions Are Disallowed - 'httpd.conf RewriteCond = %{THE_REQUEST} !HTTP/1.1$'CIS Apache HTTP Server 2.2 L2 v3.6.0Unix

SYSTEM AND INFORMATION INTEGRITY

5.9 Ensure Old HTTP Protocol Versions Are Disallowed - Rewrite module not loadedCIS Apache HTTP Server 2.2 L1 v3.6.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

5.10 (L2) Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

5.11 (L2) Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2Windows

SYSTEM AND INFORMATION INTEGRITY

5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{HTTP_HOST} exists'CIS Apache HTTP Server 2.2 L2 v3.6.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

5.12 Ensure IP Address Based Requests Are Disallowed - 'httpd.conf RewriteCond %{REQUEST_URI} exists'CIS Apache HTTP Server 2.2 L2 v3.6.0 MiddlewareUnix

SYSTEM AND INFORMATION INTEGRITY

5.12 Ensure IP Address Based Requests Are Disallowed - Rewrite module not loadedCIS Apache HTTP Server 2.2 L2 v3.6.0Unix

SYSTEM AND INFORMATION INTEGRITY

5.13 (L2) Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

5.14 (L2) Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

5.17 (L2) Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

5.18 (L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2Windows

SYSTEM AND INFORMATION INTEGRITY

5.18 (L2) Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

6.4 Ensure DNS sinkholing is configured on all anti-spyware profiles in useCIS Palo Alto Firewall 10 v1.2.0 L1Palo_Alto

SYSTEM AND INFORMATION INTEGRITY

6.4 Ensure DNS sinkholing is configured on all anti-spyware profiles in useCIS Palo Alto Firewall 11 v1.1.0 L1Palo_Alto

SYSTEM AND INFORMATION INTEGRITY

6.5 Ensure passive DNS monitoring is set to enabled on all anti-spyware profiles in useCIS Palo Alto Firewall 9 v1.1.0 L1Palo_Alto

SYSTEM AND INFORMATION INTEGRITY

8.1 Ensure 'SQL Server Browser Service' is configured correctlyCIS SQL Server 2014 Database L1 DB v1.5.0MS_SQLDB

SYSTEM AND INFORMATION INTEGRITY

18.1.3 (L2) Ensure 'Allow Online Tips' is set to 'Disabled'CIS Microsoft Windows Server 2022 v3.0.0 L2 Member ServerWindows

SYSTEM AND INFORMATION INTEGRITY

18.1.3 Ensure 'Allow Online Tips' is set to 'Disabled'CIS Microsoft Windows Server 2022 STIG v1.0.0 L2 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.8.22.1.1 (L2) Ensure 'Turn off access to the Store' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L2Windows

SYSTEM AND INFORMATION INTEGRITY

18.8.22.1.1 (L2) Ensure 'Turn off access to the Store' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.59.3.3.3 (L2) Ensure 'Do not allow LPT port redirection' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L2 BitlockerWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.59.3.3.4 (L2) Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled'CIS Microsoft Windows 8.1 v2.4.1 L2Windows

SYSTEM AND INFORMATION INTEGRITY