Item Search

NameAudit NamePluginCategory
1.1.1.1 Ensure mounting of cramfs filesystems is disabled - lsmodCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Red Hat EL8 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.1 Ensure mounting of cramfs filesystems is disabled - modprobeCIS Red Hat EL8 Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure mounting of freevxfs filesystems is disabledCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

1.1.1.3 Ensure mounting of jffs2 filesystems is disabled - lsmodCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

1.1.1.3 Ensure mounting of squashfs filesystems is disabled - modprobeCIS Red Hat EL8 Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure mounting of udf filesystems is disabledCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

1.2.2 Disable the rhnsd DaemonCIS Red Hat EL8 Workstation L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service login in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service rquotad in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1 Disable standard services - Comment service ufsd in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.1.1 Ensure chargen services are not enabled - chargen-udpCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

2.1.2 Ensure openbsd-inetd is not installedCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

2.1.4 Ensure echo services are not enabledCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

2.1.5 Ensure time services are not enabledCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

2.1.6 Ensure rsh server is not enabled - rloginCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

2.4 Only enable rlogin/rsh/rcp if absolutely necessary - Uncomment service login in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.07 otrace - 'Disable' - no directoryCIS v1.1.0 Oracle 11g OS Windows Level 1Windows

CONFIGURATION MANAGEMENT

2.9 Only enable Solaris Volume Manager daemons if absolutely necessary - Uncomment service 100229 in /etc/inet/inetd.confCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

2.10 OEM objects - 'Remove if OEM not used'CIS v1.1.0 Oracle 11g OS L2Unix

CONFIGURATION MANAGEMENT

3.3 Disable inetd if possible, Ensure file /etc/rc2.d/S72inetsvc does not existCIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.4.2.2 Ensure iptables is not enabled - disabledCIS Red Hat EL8 Server L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

3.5.1 Ensure DCCP is disabledCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

3.5.4.1.3 Ensure outbound and established connections are configuredCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

3.6 Disable other standard boot services - Ensure file /etc/rc2.d/S74autofs does not exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.6 Disable other standard boot services - Ensure file /etc/rc3.d/S13kdc.master does not exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.6 Disable other standard boot services - Ensure file /etc/rc3.d/S15nfs.server does not exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.6 Disable other standard boot services - Ensure file /etc/rc3.d/S77dmi does not exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.9 Only enable NFS client processes if absolutely necessary - Ensure file /etc/rc2.d/S73nfs.client does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.16 Only enable the volume manager if absolutely necessary - Ensure file /etc/rc2.d/S92volmgt does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.19 Only enable SNMP if absolutely necessary - Ensure file /etc/rc3.d/S76snmpdx does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

3.20 Only enable DHCP server if absolutely necessary - Ensure file /etc/rc3.d/S34dhcp does NOT exist.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

4.1 Disable Bonjour advertising serviceCIS Apple OSX 10.11 El Capitan L2 v1.1.0Unix

CONFIGURATION MANAGEMENT

4.2.1.6 Ensure remote rsyslog messages are only accepted on designated log hosts - ModLoadCIS Ubuntu Linux 18.04 LTS Workstation L1 v2.0.1Unix

CONFIGURATION MANAGEMENT

4.05 init.ora - 'remote_listener = NULL String'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows

CONFIGURATION MANAGEMENT

4.43 listener.ora - 'extproc_dlls = ONLY'CIS v1.1.0 Oracle 11g OS Windows Level 1Windows

CONFIGURATION MANAGEMENT

5.2 Turn on additional logging for FTP daemon - Check if '-l' & '-d' flags are set for ftpd in /etc/inet/inetd.conf.CIS Solaris 9 v1.3Unix

CONFIGURATION MANAGEMENT

6.2.14 Ensure no users have .rhosts filesCIS SUSE Linux Enterprise Server 12 L1 v2.1.0Unix

CONFIGURATION MANAGEMENT

8.0.5 Remove Default Databases - 'Database name != SAMPLE'CIS IBM DB2 OS L2 v1.2.0Unix

CONFIGURATION MANAGEMENT

9.10 Check for Presence of User .rhosts FilesCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

9.20 Check for Presence of User .forward FilesCIS Solaris 11.2 L1 v1.1.0Unix

CONFIGURATION MANAGEMENT

18.6.5.1 (L2) Ensure 'Enable Font Providers' is set to 'Disabled'CIS Microsoft Windows Server 2019 v3.0.1 L2 MSWindows

CONFIGURATION MANAGEMENT

18.6.5.1 (L2) Ensure 'Enable Font Providers' is set to 'Disabled'CIS Microsoft Windows Server 2022 v3.0.0 L2 Member ServerWindows

CONFIGURATION MANAGEMENT

18.6.5.1 Ensure 'Enable Font Providers' is set to 'Disabled'CIS Microsoft Windows Server 2022 STIG v1.0.0 L2 DCWindows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 v21H2 v1.0.0Windows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 1803 v1.0.0Windows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 1809 v1.0.0Windows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 1903 v1.19.9Windows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 v2004 v1.0.0Windows

CONFIGURATION MANAGEMENT

Disable new DMA devices when this computer is lockedMSCT Windows 10 v20H2 v1.0.0Windows

CONFIGURATION MANAGEMENT