Detections
Analytics

Item Search

NameAudit NamePluginCategory
2.1.4 Ensure rsync service is not enabledCIS Google Container-Optimized OS L1 Server v1.0.0Unix
2.2.3 Ensure 'Access this computer from the network' is set to 'Administrators, Authenticated Users' (MS only)CIS Windows Server 2012 R2 MS L1 v2.6.0Windows
2.3.3.9 Ensure Content Caching Is DisabledCIS Apple macOS 13.0 Ventura v1.0.0 L2Unix
2.3.3.9 Ensure Content Caching Is DisabledCIS Apple macOS 13.0 Ventura v2.0.0 L2Unix
2.3.3.9 Ensure Content Caching Is DisabledCIS Apple macOS 14.0 Sonoma v1.0.0 L2Unix
2.9.3 Ensure Wake for Network Access Is DisabledCIS Apple macOS 14.0 Sonoma v1.0.0 L1Unix
4.2.1 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'CIS Google Chrome L2 v2.1.0Windows
4.5 Ensure 'Enable Connecting to Serial Ports' Is Not Enabled for VM InstanceCIS Google Cloud Platform v1.3.0 L1GCP
4.5 Ensure 'Enable Connecting to Serial Ports' Is Not Enabled for VM InstanceCIS Google Cloud Platform v2.0.0 L1GCP
5.1 Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + NGWindows
5.1.6 Ensure SSH X11 forwarding is disabledCIS Google Container-Optimized OS L1 Server v1.0.0Unix
5.2 Ensure 'Print Spooler (Spooler)' is set to 'Disabled' (MS only)CIS Windows Server 2012 R2 MS L2 v2.5.0Windows
5.2 Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1 + NGWindows
5.3 Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
6.3.5 Ensure 'remote access' database flag for Cloud SQL SQL Server instance is set to 'off'CIS Google Cloud Platform v1.1.0 L1GCP
8.1.4 Configure the Service Name for TLS (SSL_SVCENAME)CIS IBM DB2 11 v1.0.0 Windows OS Level 1Windows
8.1.7 Unset the Service Name for Plaintext Communication (SVCENAME)CIS IBM DB2 11 v1.0.0 Linux OS Level 1Unix
18.4.3 Ensure 'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is set to 'Enabled: Highest protection, source routing is completely disabled'CIS Windows Server 2012 R2 MS L1 v2.6.0Windows
18.4.5 Ensure 'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.4.6 Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled'CIS Windows Server 2012 MS L1 v2.4.0Windows
18.4.7 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'CIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.5.9.1 Ensure 'Turn on Mapper I/O (LLTDIO) driver' is set to 'Disabled' - AllowLLTDIOOnDomainCIS Windows Server 2012 MS L2 v2.4.0Windows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - EnableRspndrCIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.5.9.2 Ensure 'Turn on Responder (RSPNDR) driver' is set to 'Disabled' - ProhibitRspndrOnPrivateNetCIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.5.20.2 Ensure 'Prohibit access of the Windows Connect Now wizards' is set to 'Enabled'CIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.8.22.1.2 Ensure 'Turn off handwriting personalization data sharing' is set to 'Enabled'CIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.22.1.4 Ensure 'Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.22.1.7 Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.22.1.7 Ensure 'Turn off Registration if URL connection is referring to Microsoft.com' is set to 'Enabled'CIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.8.22.1.9 Ensure 'Turn off the 'Order Prints' picture task' is set to 'Enabled' - EnabledCIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.22.1.11 Ensure 'Turn off the Windows Messenger Customer Experience Improvement Program' is set to 'Enabled'CIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.36.2 Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'CIS Windows Server 2012 R2 MS L1 v2.6.0Windows
18.8.37.1 Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only)CIS Windows Server 2012 R2 MS L1 v2.6.0Windows
18.8.37.2 Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only)CIS Windows Server 2012 MS L2 v2.4.0Windows
18.8.48.5.1 Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled' - DisabledCIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.8.50.1 Ensure 'Turn off the advertising ID' is set to 'Enabled' - EnabledCIS Windows Server 2012 R2 MS L2 v2.6.0Windows
18.9.5.1 Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.14.1 Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.17.1 Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.37.1 Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows
18.9.37.2 Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows
18.9.47.3.1 Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.65.3.3.4 Ensure 'Do not allow supported Plug and Play device redirection' is set to 'Enabled' - EnabledCIS Windows Server 2012 MS L2 v2.4.0Windows
18.9.75.2 Ensure 'Only display the private store within the Microsoft Store' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.75.3 Ensure 'Turn off the offer to update to the latest version of Windows' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v1.0.0 L1Windows
18.9.86.3 Ensure 'Automatically send memory dumps for OS-generated error reports' is set to 'Disabled' - DisabledCIS Windows Server 2012 R2 MS L1 v2.6.0Windows
18.10.4.1 Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Disabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows
18.10.58.3.9.2 Ensure 'Require secure RPC communication' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows
18.10.58.3.9.4 Ensure 'Require user authentication for remote connections by using Network Level Authentication' is set to 'Enabled'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows
18.10.58.3.9.5 Ensure 'Set client connection encryption level' is set to 'Enabled: High Level'CIS Microsoft Intune for Windows 11 v2.0.0 L1Windows