Item Search

NameAudit NamePluginCategory
1.3.1 Ensure that the --terminated-pod-gc-threshold argument is set as appropriateCIS Kubernetes v1.23 Benchmark v1.0.1 L1 MasterUnix

SYSTEM AND INFORMATION INTEGRITY

1.4.1 Ensure address space layout randomization (ASLR) is enabledCIS CentOS Linux 7 v4.0.0 L1 WorkstationUnix

SYSTEM AND INFORMATION INTEGRITY

1.4.3 Ensure address space layout randomization (ASLR) is enabledCIS Google Container-Optimized OS v1.2.0 L1 ServerUnix

SYSTEM AND INFORMATION INTEGRITY

1.5.2 Ensure XD/NX support is enabledCIS Debian 8 Workstation L1 v2.0.2Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.3 Ensure address space layout randomization (ASLR) is enabledCIS CentOS Linux 8 Server L1 v2.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.5.3 Ensure address space layout randomization (ASLR) is enabled - sysctlCIS Amazon Linux v2.1.0 L1Unix

SYSTEM AND INFORMATION INTEGRITY

3.2 Enable Stack Protection - noexec_user_stackCIS Solaris 11.2 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

3.2 Enable Stack Protection - set noexec_user_stack = 1CIS Solaris 11 L1 v1.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0CIS Kubernetes v1.20 Benchmark v1.0.1 L1 WorkerUnix

SYSTEM AND INFORMATION INTEGRITY

4.2.5 Ensure that the --streaming-connection-idle-timeout argument is not set to 0CIS Kubernetes v1.23 Benchmark v1.0.1 L1 WorkerUnix

SYSTEM AND INFORMATION INTEGRITY

5.3 Ensure that, if applicable, SELinux security options are setCIS Docker v1.6.0 L2 Docker LinuxUnix

SYSTEM AND INFORMATION INTEGRITY

5.7 Services - crontab access is root only - adm exists in cron.allowCIS IBM AIX 7.1 L2 v2.1.0Unix

SYSTEM AND INFORMATION INTEGRITY

6.1.3 Ensure sudo commands use ptyCIS IBM AIX 7 v1.0.0 L2Unix

SYSTEM AND INFORMATION INTEGRITY

6.2.3 Ensure crontab is restricted authorized usersCIS IBM AIX 7 v1.0.0 L2Unix

SYSTEM AND INFORMATION INTEGRITY

18.3.3 (L1) Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.3.3 Ensure 'Enable Structured Exception Handling Overwrite Protection (SEHOP)' is set to 'Enabled' - EnabledCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

SYSTEM AND INFORMATION INTEGRITY

18.7.2 Ensure 'Configure Redirection Guard' is set to 'Enabled: Redirection Guard Enabled'CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain ControllerWindows

SYSTEM AND INFORMATION INTEGRITY

18.7.9 Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain ControllerWindows

SYSTEM AND INFORMATION INTEGRITY

18.7.9 Ensure 'Manage processing of Queue-specific files' is set to 'Enabled: Limit Queue-specific files to Color profiles'CIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.8.4.2 Ensure 'Remote host allows delegation of non-exportable credentials' is set to 'Enabled'CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.8.5.3 Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 MS NGWindows

SYSTEM AND INFORMATION INTEGRITY

18.8.5.7 (NG) Ensure 'Turn On Virtualization Based Security: Secure Launch Configuration' is set to 'Enabled'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 NG MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.8.14.1 (L1) Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.25.4 (L1) Ensure 'Default Protections for Popular Software' is set to 'Enabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.25.5 (L1) Ensure 'Default Protections for Recommended Software' is set to 'Enabled'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.25.6 (L1) Ensure 'System ASLR' is set to 'Enabled: Application Opt-In'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.25.7 (L1) Ensure 'System DEP' is set to 'Enabled: Application Opt-Out'CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1Windows

SYSTEM AND INFORMATION INTEGRITY

18.9.31.2 (L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.47.5.1.2 (L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configuredCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.47.5.1.2 (L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configuredCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DCWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.47.5.1.2 Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured - 75668c1f-73b5-4cf0-bb93-3ecf5cb7cc84CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DCWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.47.5.1.2 Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured - 26190899-1602-49e8-8b27-eb1d0a1ce869CIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.9.47.5.1.2 Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configured - d3e037e1-3eb8-44c8-a917-57927947596dCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MSWindows

SYSTEM AND INFORMATION INTEGRITY

18.10.24.2 (L1) Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)CIS Windows Server 2012 MS L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.24.7 (L1) Ensure 'System DEP' is set to 'Enabled: Application Opt-Out'CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.24.8 (L1) Ensure 'System SEHOP' is set to 'Enabled: Application Opt-Out'CIS Windows Server 2012 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.29.2 (L1) Ensure 'Turn off Data Execution Prevention for Explorer' is set to 'Disabled'CIS Windows Server 2012 MS L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.43.6.1.2 (L1) Ensure 'Configure Attack Surface Reduction rules: Set the state for each ASR rule' is configuredCIS Windows Server 2012 R2 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

18.10.76.2.1 (L1) Ensure 'Configure Windows Defender SmartScreen' is set to 'Enabled: Warn and prevent bypass'CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

SYSTEM AND INFORMATION INTEGRITY

23.1 (NG) Ensure 'Enable Virtualization Based Security' is set to 'Enable virtualization based security'CIS Microsoft Intune for Windows 10 v3.0.1 Next Generation Windows Security (NG)Windows

SYSTEM AND INFORMATION INTEGRITY

23.2 (L1) Ensure 'Configure System Guard Launch' is set to 'Unmanaged Enables Secure Launch if supported by hardware'CIS Microsoft Intune for Windows 11 v3.0.1 L1Windows

SYSTEM AND INFORMATION INTEGRITY

23.3 (L1) Ensure 'Require Platform Security Features' is set to 'Turns on VBS with Secure Boot' or higherCIS Microsoft Intune for Windows 11 v3.0.1 L1Windows

SYSTEM AND INFORMATION INTEGRITY

64.1.1 (L1) Ensure 'Notify Malicious' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v3.0.1 L1Windows

SYSTEM AND INFORMATION INTEGRITY

78.1 (L1) Ensure 'Disallow Exploit Protection Override' is set to '(Enable)'CIS Microsoft Intune for Windows 10 v3.0.1 L1Windows

SYSTEM AND INFORMATION INTEGRITY

Buffer overflow protection should be configured 'LimitRequestFields'TNS IBM HTTP Server Best PracticeUnix

SYSTEM AND INFORMATION INTEGRITY

Buffer overflow protection should be configured 'LimitRequestline'TNS IBM HTTP Server Best PracticeUnix

SYSTEM AND INFORMATION INTEGRITY

IBM i : Share Memory Control (QSHRMEMCTL) - '1'IBM iSeries Security Reference v5r4AS/400

SYSTEM AND INFORMATION INTEGRITY

IBM i : Share Memory Control (QSHRMEMCTL) - '1'IBM System i Security Reference for V7R1 and V6R1AS/400

SYSTEM AND INFORMATION INTEGRITY

IBM i : Share Memory Control (QSHRMEMCTL) - '1'IBM System i Security Reference for V7R2AS/400

SYSTEM AND INFORMATION INTEGRITY

Potential strpy buffer overflow in C/C++ code.TNS File Analysis - Source Code ErrorsFileContent

SYSTEM AND INFORMATION INTEGRITY