Item Search

NameAudit NamePluginCategory
1.1.2 Ensure /tmp is configuredCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.2.3 Ensure gpgcheck is globally activatedCIS Aliyun Linux 2 L1 v1.0.0Unix

SYSTEM AND INFORMATION INTEGRITY

1.3.1 Ensure AIDE is installedCIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

1.4.2 Ensure authentication required for single user mode - emergency.serviceCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

1.5.2 Ensure address space layout randomization (ASLR) is enabled - sysctlCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.1.2 Ensure ntp is configured - restrict -6CIS Aliyun Linux 2 L1 v1.0.0Unix

AUDIT AND ACCOUNTABILITY

2.1.10 Ensure HTTP server is not enabledCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.12 Ensure Samba is not enabled - statusCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.1.13 Ensure HTTP Proxy Server is not enabled - statusCIS Aliyun Linux 2 L1 v1.0.0Unix

CONFIGURATION MANAGEMENT

2.2.30 (L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Windows Server 2012 R2 MS L1 v3.0.0Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.30 (L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Windows Server 2012 R2 DC L1 v3.0.0Windows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.31 (L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows Server 2019 v3.0.1 L1 MSWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.36 Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows Server 2016 STIG v3.0.0 STIG DCWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.38 Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows Server 2022 STIG v1.0.0 L1 MSWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.38 Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DCWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

2.2.39 (L1) Ensure 'Generate security audits' is set to 'LOCAL SERVICE, NETWORK SERVICE'CIS Microsoft Windows Server 2019 STIG v2.0.0 L1 DCWindows

ACCESS CONTROL, AUDIT AND ACCOUNTABILITY

check if firewalld is not activeCIS Amazon Linux 2 v3.0.0 L1Unix
CISC-ND-000210 - The Cisco switch must be configured to protect against an individual falsely denying having performed organization-defined actions to be covered by non-repudiation.DISA STIG Cisco NX-OS Switch NDM v3r2Cisco

AUDIT AND ACCOUNTABILITY

CISC-ND-000940 - The Cisco switch must be configured to audit the execution of privileged functions.DISA STIG Cisco NX-OS Switch NDM v3r2Cisco

ACCESS CONTROL

config file maxauthtries settingCIS Amazon Linux 2 v3.0.0 L1Unix
cups.socket cups.service activeCIS Amazon Linux 2 v3.0.0 L1Unix
cups.socket cups.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix
dhcpd.service dhcpd6.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix
dovecot exist on the systemCIS Amazon Linux 2 v3.0.0 L1Unix
dovecot.socket dovecot.service cyrus-imapd.service activeCIS Amazon Linux 2 v3.0.0 L1Unix
DTOO189 - The encryption type for password protected Open XML files must be set.DISA STIG Microsoft Office System 2016 v2r3Windows

SYSTEM AND COMMUNICATIONS PROTECTION

firewalld check - activeCIS Amazon Linux 2 v3.0.0 L1Unix
ip6tables inputCIS Amazon Linux 2 v3.0.0 L1Unix
ip6tables outputCIS Amazon Linux 2 v3.0.0 L1Unix
iptables Chain OUTPUTCIS Amazon Linux 2 v3.0.0 L1Unix
iptables enabledCIS Amazon Linux 2 v3.0.0 L1Unix
login.defsCIS Amazon Linux 2 v3.0.0 L1Unix
New format input imtcpCIS Amazon Linux 2 v3.0.0 L1Unix
nfs-server.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix
O365-CO-000009 - Office applications must be configured to specify encryption type in password-protected Office Open XML files.DISA STIG Microsoft Office 365 ProPlus v3r1Windows

SYSTEM AND COMMUNICATIONS PROTECTION

On disk timestamp_timeoutCIS Amazon Linux 2 v3.0.0 L1Unix
pam.dCIS Amazon Linux 2 v3.0.0 L1Unix
review /etc/sysconfig/ip6tablesCIS Amazon Linux 2 v3.0.0 L1Unix
rsyslog check - activeCIS Amazon Linux 2 v3.0.0 L1Unix
shadow password max daysCIS Amazon Linux 2 v3.0.0 L1Unix
snmpd.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix
sshd maxauthtries settingCIS Amazon Linux 2 v3.0.0 L1Unix
system-auth authfail denyCIS Amazon Linux 2 v3.0.0 L1Unix
system-auth authfail unlock_timeCIS Amazon Linux 2 v3.0.0 L1Unix
telnet.socket activeCIS Amazon Linux 2 v3.0.0 L1Unix
tftp-server is installedCIS Amazon Linux 2 v3.0.0 L1Unix
URLCIS Amazon Linux 2 v3.0.0 L1Unix
vsftpd.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix
ypserv installedCIS Amazon Linux 2 v3.0.0 L1Unix
ypserv.service enabledCIS Amazon Linux 2 v3.0.0 L1Unix