Item Search

NameAudit NamePluginCategory
1.001 - Physical security of the Automated Information System (AIS) does not meet DISA requirements.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

1.008 - Shared user accounts are permitted on the system.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

2.015 - File share ACLs have not been reconfigured to remove the Everyone group.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.070 - The system is configured to permit storage of credentials or .NET Passports.DISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

3.082 - The system is configured to allow unsolicited remote assistance offers.DISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

3.130 - User Account Control - Behavior of elevation prompt for administratorsDISA Windows Vista STIG v6r41Windows

SYSTEM AND COMMUNICATIONS PROTECTION

4.008 - Auditing must be configured as required. - 'Detailed Tracking -> Process Creation' successes.DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - 'Policy Change -> Authentication Policy Change' successes.DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.008 - Auditing must be configured as required. - System -> System Integrity'DISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

4.010 - User rights assignments must meet minimum requirements. - Allow log on locallyDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Backup files and directoriesDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Change the time zoneDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Profile system performanceDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.010 - User rights assignments must meet minimum requirements. - Shut down the systemDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

4.039 - Built-in Admin Account StatusDISA Windows Vista STIG v6r41Windows

IDENTIFICATION AND AUTHENTICATION

5.002 - Event log sizes do not meet minimum requirements. - SecurityDISA Windows Vista STIG v6r41Windows

AUDIT AND ACCOUNTABILITY

5.003 - Booting into alternate operating systems is permitted.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.017 - The user is allowed to launch Windows Messenger (MSN Messenger, .NET Messenger).DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.045 - Terminal Services is not configured to delete temporary folders.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.050 - IPv6 must be disabled until a deliberate transition strategy has been implemented.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.130 - Computer prevented from downloading print driver packages over HTTP.DISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.200 - Network - Mapper I/O Driver - AllowLLTDIOOnPublicNetDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.230 - Online Assistance - Untrusted ContentDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

5.246 - Windows Mail - Disable ApplicationDISA Windows Vista STIG v6r41Windows

CONFIGURATION MANAGEMENT

DTOO218 - Outlook - Level of calendar details that a user can publish must be restricted.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO221 - Outlook - Junk Mail UI must be configured.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO224 - Outlook - Recipients of sent email must be unable to be added to the safe sender's list.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO226 - Outlook - Dial-up and Hang up Options for Outlook must be configured.DISA STIG Office 2010 Outlook v1r14Windows

SYSTEM AND COMMUNICATIONS PROTECTION

DTOO229 - Outlook - Outlook must be enforced as the default email, calendar, and contacts program.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO230 - Outlook - Folders in non-default stores, set as folder home pages, must be disallowed.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO270 - Outlook - External content and pictures in HTML eMail must be displayed.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO282 - Outlook - RSS Feeds must be disallowed.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO314 - Outlook - Default message format must be set to use Plain Text.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

DTOO425 - Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.DISA STIG Office 2010 Outlook v1r14Windows

CONFIGURATION MANAGEMENT

GEN005800 - All NFS-exported system files and system directories must be owned by root.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005810 - All NFS-exported system files and system directories must be group-owned by root, bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN005840 - The NFS server must be configured to restrict file system access to local hosts - 'Exports containing rw should be reviewed'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN006120 - The /usr/lib/smb.conf file must be group-owned by bin, sys, or system.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006200 - The /var/private/smbpasswd file must have mode 0600 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006260 - The /etc/news/hosts.nntp (or equivalent) must have mode 0600 or less permissive.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006330 - The /etc/news/passwd.nntp file must not have an extended ACL.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN006420 - NIS maps must be protected through hard-to-guess domain names.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN006600 - The system's access control program must log each system access attempt - 'auth.info'DISA STIG AIX 5.3 v1r2Unix

AUDIT AND ACCOUNTABILITY

GEN006640 - The system must use and update a DoD-approved virus scan program - 'names.dat' - update dateDISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN006640 - The system must use and update a DoD-approved virus scan program - 'uvscan exists in crontabs'DISA STIG AIX 5.3 v1r2Unix

SYSTEM AND INFORMATION INTEGRITY

GEN007720 - The IPv6 protocol handler must be prevented from dynamic loading unless needed.DISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN007840 - The DHCP client must be disabled if not needed.DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN007850 - The DHCP client must not send dynamic DNS updates - 'updateDNS exists in /etc/dhcpc.opt'DISA STIG AIX 5.3 v1r2Unix

CONFIGURATION MANAGEMENT

GEN008120 - If the system is using LDAP the /etc/ldap.conf file must not have an extended ACLDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL

GEN008180 - The TLS certificate authority file must have mode 0644 (0755 for directories) or less permissiveDISA STIG AIX 5.3 v1r2Unix

ACCESS CONTROL