Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-254317 Medium Windows Server 2022 must be configured to audit Object Access - Removable Storage successes
V-205840 Medium Windows Server 2019 must be configured to audit Object Access - Removable Storage successes
V-253324 Medium The system must be configured to audit Object Access - Removable Storage successes
V-220766 Medium The system must be configured to audit Object Access - Removable Storage successes
V-260604 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the apparmor_par...
V-260605 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chacl command
V-260606 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chage command
V-260607 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chcon command
V-260608 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chfn command
V-260609 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chsh command
V-260610 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the crontab command
V-260611 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use the fdis...
V-260612 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the gpasswd command
V-260613 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use the kmod...
V-260614 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful attempts to use modprobe...
V-260615 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the mount command
V-260616 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the newgrp command
V-260617 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the pam_timestam...
V-260618 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the passwd command
V-260619 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the setfacl command
V-260620 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the ssh-agent co...
V-260621 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the ssh-keysign ...
V-260622 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the su command
V-260623 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the sudo command
V-260624 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the sudoedit com...
V-260625 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the umount command
V-260626 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the unix_update ...
V-260627 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the usermod command
V-260633 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chmod, fchmo...
V-260634 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the chown, fchow...
V-260635 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the creat, open,...
V-260636 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the delete_modul...
V-260637 Medium Ubuntu 22.04 LTS must generate audit records for successful/unsuccessful uses of the init_module ...
V-260638 Medium Ubuntu 22.04 LTS must generate audit records for any use of the setxattr, fsetxattr, lsetxattr, r...
V-260639 Medium Ubuntu 22.04 LTS must generate audit records for any successful/unsuccessful use of unlink, unlin...
V-260641 Medium Ubuntu 22.04 LTS must generate audit records for the /var/log/btmp file
V-260642 Medium Ubuntu 22.04 LTS must generate audit records for the /var/log/wtmp file
V-260643 Medium Ubuntu 22.04 LTS must generate audit records for the /var/run/utmp file
V-260644 Medium Ubuntu 22.04 LTS must generate audit records for the use and modification of faillog file
V-260645 Medium Ubuntu 22.04 LTS must generate audit records for the use and modification of the lastlog file
V-260646 Medium Ubuntu 22.04 LTS must generate audit records when successful/unsuccessful attempts to modify the ...
V-260647 Medium Ubuntu 22.04 LTS must generate audit records when successful/unsuccessful attempts to modify the ...
V-253426 Medium Windows 11 Kernel (Direct Memory Access) DMA Protection must be enabled
V-224881 Medium Windows Server 2016 must be configured to audit Account Logon - Credential Validation successes
V-224882 Medium Windows Server 2016 must be configured to audit Account Logon - Credential Validation failures
V-224887 Medium Windows Server 2016 must be configured to audit Detailed Tracking - Plug and Play Events successes
V-224891 Medium Windows Server 2016 must be configured to audit Logon/Logoff - Group Membership successes
V-224895 Medium Windows Server 2016 must be configured to audit Logon/Logoff - Special Logon successes
V-224896 Medium Windows 2016 must be configured to audit Object Access - Other Object Access Events successes
V-224897 Medium Windows 2016 must be configured to audit Object Access - Other Object Access Events failures
V-224898 Medium Windows Server 2016 must be configured to audit Object Access - Removable Storage successes
V-224899 Medium Windows Server 2016 must be configured to audit Object Access - Removable Storage failures
V-254306 Medium Windows Server 2022 must be configured to audit Detailed Tracking - Plug and Play Events successes
V-205839 Medium Windows Server 2019 must be configured to audit Detailed Tracking - Plug and Play Events successes
V-254310 Medium Windows Server 2022 must be configured to audit Logon/Logoff - Group Membership successes
V-205834 Medium Windows Server 2019 must be configured to audit Logon/Logoff - Group Membership successes
V-253314 Medium The system must be configured to audit Logon/Logoff - Group Membership successes
V-220756 Medium The system must be configured to audit Logon/Logoff - Group Membership successes
V-254311 Medium Windows Server 2022 must be configured to audit logoff successes
V-253317 Medium The system must be configured to audit Logon/Logoff - Logon successes
V-253316 Medium The system must be configured to audit Logon/Logoff - Logon failures
V-254314 Medium Windows Server 2022 must be configured to audit Logon/Logoff - Special Logon successes
V-205835 Medium Windows Server 2019 must be configured to audit Logon/Logoff - Special Logon successes
V-253318 Medium The system must be configured to audit Logon/Logoff - Special Logon successes
V-220760 Medium The system must be configured to audit Logon/Logoff - Special Logon successes
V-254315 Medium Windows Server 2022 must be configured to audit Object Access - Other Object Access Events successes
V-205836 Medium Windows Server 2019 must be configured to audit Object Access - Other Object Access Events successes
V-253321 Medium Windows 11 must be configured to audit Object Access - Other Object Access Events successes
V-220763 Medium Windows 10 must be configured to audit Object Access - Other Object Access Events successes
V-254316 Medium Windows Server 2022 must be configured to audit Object Access - Other Object Access Events failures
V-205837 Medium Windows Server 2019 must be configured to audit Object Access - Other Object Access Events failures
V-253322 Medium Windows 11 must be configured to audit Object Access - Other Object Access Events failures
V-220764 Medium Windows 10 must be configured to audit Object Access - Other Object Access Events failures
V-254318 Medium Windows Server 2022 must be configured to audit Object Access - Removable Storage failures
V-205841 Medium Windows Server 2019 must be configured to audit Object Access - Removable Storage failures
V-253323 Medium The system must be configured to audit Object Access - Removable Storage failures
V-220765 Medium The system must be configured to audit Object Access - Removable Storage failures
V-253325 Medium The system must be configured to audit Policy Change - Audit Policy Change successes
V-220767 Medium The system must be configured to audit Policy Change - Audit Policy Change successes
V-253326 Medium The system must be configured to audit Policy Change - Authentication Policy Change successes
V-253327 Medium The system must be configured to audit Policy Change - Authorization Policy Change successes
V-220769 Medium The system must be configured to audit Policy Change - Authorization Policy Change successes
V-253329 Medium The system must be configured to audit Privilege Use - Sensitive Privilege Use successes
V-253331 Medium The system must be configured to audit System - Other System Events successes
V-220773 Medium The system must be configured to audit System - Other System Events successes
V-253332 Medium The system must be configured to audit System - Other System Events failures
V-220774 Medium The system must be configured to audit System - Other System Events failures
V-253333 Medium The system must be configured to audit System - Security State Change successes
V-253334 Medium The system must be configured to audit System - Security System Extension successes
V-253336 Medium The system must be configured to audit System - System Integrity successes
V-253335 Medium The system must be configured to audit System - System Integrity failures
V-254300 Medium Windows Server 2022 must be configured to audit Account Logon - Credential Validation successes
V-205832 Medium Windows Server 2019 must be configured to audit Account Logon - Credential Validation successes
V-253307 Medium The system must be configured to audit Account Logon - Credential Validation successes
V-220749 Medium The system must be configured to audit Account Logon - Credential Validation successes
V-254301 Medium Windows Server 2022 must be configured to audit Account Logon - Credential Validation failures
V-205833 Medium Windows Server 2019 must be configured to audit Account Logon - Credential Validation failures
V-253306 Medium The system must be configured to audit Account Logon - Credential Validation failures
V-220748 Medium The system must be configured to audit Account Logon - Credential Validation failures
V-253313 Medium The system must be configured to audit Logon/Logoff - Account Lockout failures
V-220755 Medium The system must be configured to audit Logon/Logoff - Account Lockout failures
V-268451 Medium The macOS system must configure sudo to log events
V-278047 Medium Windows Server 2025 must be configured to audit Account Logon - Credential Validation successes
V-278048 Medium Windows Server 2025 must be configured to audit Account Logon - Credential Validation failures
V-278049 Medium Windows Server 2025 must be configured to audit Account Management - Other Account Management Eve...
V-278053 Medium Windows Server 2025 must be configured to audit Detailed Tracking - Plug and Play Events successes
V-278054 Medium Windows Server 2025 must be configured to audit Detailed Tracking - Process Creation successes
V-278055 Medium Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout successes
V-278056 Medium Windows Server 2025 must be configured to audit Logon/Logoff - Account Lockout failures
V-278057 Medium Windows Server 2025 must be configured to audit Logon/Logoff - Group Membership successes
V-278058 Medium Windows Server 2025 must be configured to audit logoff successes
V-278061 Medium Windows Server 2025 must be configured to audit Logon/Logoff - Special Logon successes
V-278062 Medium Windows Server 2025 must be configured to audit Object Access - Other Object Access Events successes
V-278063 Medium Windows Server 2025 must be configured to audit Object Access - Other Object Access Events failures
V-278064 Medium Windows Server 2025 must be configured to audit Object Access - Removable Storage successes
V-278065 Medium Windows Server 2025 must be configured to audit Object Access - Removable Storage failures
V-278066 Medium Windows Server 2025 must be configured to audit Policy Change - Audit Policy Change successes
V-278067 Medium Windows Server 2025 must be configured to audit Policy Change - Audit Policy Change failures
V-278068 Medium Windows Server 2025 must be configured to audit Policy Change - Authentication Policy Change succ...
V-278069 Medium Windows Server 2025 must be configured to audit Policy Change - Authorization Policy Change succe...
V-278070 Medium Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use successes
V-278071 Medium Windows Server 2025 must be configured to audit Privilege Use - Sensitive Privilege Use failures
V-278072 Medium Windows Server 2025 must be configured to audit System - IPsec Driver successes
V-278073 Medium Windows Server 2025 must be configured to audit System - IPsec Driver failures
V-278074 Medium Windows Server 2025 must be configured to audit System - Other System Events successes
V-278075 Medium Windows Server 2025 must be configured to audit System - Other System Events failures
V-278076 Medium Windows Server 2025 must be configured to audit System - Security State Change successes
V-278077 Medium Windows Server 2025 must be configured to audit System - Security System Extension successes
V-278078 Medium Windows Server 2025 must be configured to audit System - System Integrity successes
V-278079 Medium Windows Server 2025 must be configured to audit System - System Integrity failures
V-278148 Medium Windows Server 2025 Active Directory Group Policy Objects (GPOs) must be configured with proper a...
V-278149 Medium Windows Server 2025 Active Directory (AD) Domain object must be configured with proper audit sett...
V-278150 Medium Windows Server 2025 Active Directory (AD) Infrastructure object must be configured with proper au...
V-278151 Medium Windows Server 2025 Active Directory (AD) Domain Controllers Organizational Unit (OU) object must...
V-278152 Medium Windows Server 2025 Active Directory (AD) AdminSDHolder object must be configured with proper aud...
V-278153 Medium Windows Server 2025 Active Directory (AD) RID Manager$ object must be configured with proper audi...
V-278155 Medium Windows Server 2025 must be configured to audit DS Access - Directory Service Access successes
V-278156 Medium Windows Server 2025 must be configured to audit DS Access - Directory Service Access failures
V-278157 Medium Windows Server 2025 must be configured to audit DS Access - Directory Service Changes successes
V-278158 Medium Windows Server 2025 must be configured to audit DS Access - Directory Service Changes failures
V-279916 Medium Windows Server 2025 must be configured to audit file system failures
V-279917 Medium Windows Server 2025 must be configured to audit file system successes
V-279918 Medium Windows Server 2025 must be configured to audit handle manipulation failures
V-279919 Medium Windows Server 2025 must be configured to audit handle manipulation successes
V-279920 Medium Windows Server 2025 must be configured to audit registry failures
V-279921 Medium Windows Server 2025 must be configured to audit registry successes
V-279922 Medium Windows Server 2025 must be configured to audit sensitive privilege use successes
V-279923 Medium Windows Server 2025 must be configured to audit sensitive privilege use failures
V-277059 Medium The macOS system must configure sudo to log events