Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
    AppLocker
    EventSentry
    Security
    stig
    Vulnerability IDSeverityDescription
    V-253385 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
    V-220826 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
    V-254351 Low Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting...
    V-205691 Low Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting...
    V-253441 Low The computer account password must not be prevented from being reset
    V-220917 Low The computer account password must not be prevented from being reset
    V-253447 Low Caching of logon credentials must be limited
    V-220923 Low Caching of logon credentials must be limited
    V-253442 Low The maximum age for machine account passwords must be configured to 30 days or less
    V-220918 Low The maximum age for machine account passwords must be configured to 30 days or less
    V-254335 Low Windows Server 2022 Internet Protocol version 6 (IPv6) source routing must be configured to the h...
    V-205858 Low Windows Server 2019 Internet Protocol version 6 (IPv6) source routing must be configured to the h...
    V-254336 Low Windows Server 2022 source routing must be configured to the highest protection level to prevent ...
    V-205859 Low Windows Server 2019 source routing must be configured to the highest protection level to prevent ...
    V-260472 Low Ubuntu 22.04 LTS must restrict access to the kernel message buffer
    V-260476 Low Ubuntu 22.04 LTS must be configured so that the Advance Package Tool (APT) prevents the installat...
    V-260479 Low Ubuntu 22.04 LTS must have the "chrony" package installed
    V-260480 Low Ubuntu 22.04 LTS must not have the "systemd-timesyncd" package installed
    V-260481 Low Ubuntu 22.04 LTS must not have the "ntp" package installed
    V-260519 Low Ubuntu 22.04 LTS must, for networked systems, compare internal information system clocks at least...
    V-260520 Low Ubuntu 22.04 LTS must synchronize internal information system clocks to the authoritative time so...
    V-260521 Low Ubuntu 22.04 LTS must record time stamps for audit records that can be mapped to Coordinated Univ...
    V-260549 Low Ubuntu 22.04 LTS must automatically lock an account until the locked account is released by an ad...
    V-260550 Low Ubuntu 22.04 LTS must enforce a delay of at least four seconds between logon prompts following a ...
    V-260552 Low Ubuntu 22.04 LTS must limit the number of concurrent sessions to ten for all accounts and/or acco...
    V-260581 Low Ubuntu 22.04 LTS must be configured such that Pluggable Authentication Module (PAM) prohibits the...
    V-260587 Low Ubuntu 22.04 LTS must have a crontab script running weekly to offload audit events of standalone ...
    V-260592 Low Ubuntu 22.04 LTS audit event multiplexor must be configured to offload audit logs onto a differen...
    V-260593 Low Ubuntu 22.04 LTS must alert the information system security officer (ISSO) and system administrat...
    V-260595 Low Ubuntu 22.04 LTS must allocate audit record storage capacity to store at least one weeks' worth o...
    V-260596 Low Ubuntu 22.04 LTS must immediately notify the system administrator (SA) and information system sec...
    V-224836 Low Non-administrative accounts or groups must only have print permissions on printer shares
    V-224862 Low The time service must synchronize with an appropriate DoD time source
    V-224864 Low Secure Boot must be enabled on Windows Server 2016 systems
    V-224865 Low Windows 2016 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be confi...
    V-224916 Low Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection le...
    V-224917 Low Source routing must be configured to the highest protection level to prevent Internet Protocol (I...
    V-224918 Low Windows Server 2016 must be configured to prevent Internet Control Message Protocol (ICMP) redire...
    V-224919 Low Windows Server 2016 must be configured to ignore NetBIOS name release requests except from WINS s...
    V-224931 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
    V-224942 Low Turning off File Explorer heap termination on corruption must be disabled
    V-224979 Low The directory service must be configured to terminate LDAP-based network connections to the direc...
    V-205857 Low Windows Server 2019 must have Secure Boot enabled
    V-220700 Low Secure Boot must be enabled on Windows 10 systems
    V-254357 Low Windows Server 2022 Windows Update must not obtain updates from other PCs on the internet
    V-205870 Low Windows Server 2019 Windows Update must not obtain updates from other PCs on the Internet
    V-253394 Low Windows Update must not obtain updates from other PCs on the internet
    V-220835 Low Windows Update must not obtain updates from other PCs on the internet
    V-225037 Low The Windows dialog box title for the legal banner must be configured with the appropriate text
    V-205856 Low Windows Server 2019 systems must have Unified Extensible Firmware Interface (UEFI) firmware and b...
    V-218827 Low The IIS 10.0 web server must enable HTTP Strict Transport Security (HSTS)
    V-241789 Low ASP.NET version must be removed from the HTTP Response Header information
    V-268467 Low The macOS system must configure audit retention to seven days
    V-268554 Low The macOS system must configure install.log retention to 365
    V-254337 Low Windows Server 2022 must be configured to prevent Internet Control Message Protocol (ICMP) redire...
    V-205860 Low Windows Server 2019 must be configured to prevent Internet Control Message Protocol (ICMP) redire...
    V-220797 Low The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from ...
    V-254338 Low Windows Server 2022 must be configured to ignore NetBIOS name release requests except from WINS s...
    V-205819 Low Windows Server 2019 must be configured to ignore NetBIOS name release requests except from WINS s...
    V-253356 Low The system must be configured to ignore NetBIOS name release requests except from WINS servers
    V-220798 Low The system must be configured to ignore NetBIOS name release requests except from WINS servers
    V-254481 Low Windows Server 2022 default permissions of global system objects must be strengthened
    V-205923 Low Windows Server 2019 default permissions of global system objects must be strengthened
    V-253467 Low The default permissions of global system objects must be increased
    V-220943 Low The default permissions of global system objects must be increased
    V-225060 Low The default permissions of global system objects must be strengthened
    V-254458 Low Windows Server 2022 title for legal banner dialog box must be configured with the appropriate text
    V-205632 Low Windows Server 2019 title for legal banner dialog box must be configured with the appropriate text
    V-253446 Low The Windows message title for the legal notice must be configured
    V-220922 Low The Windows dialog box title for the legal banner must be configured
    V-254363 Low Windows Server 2022 Turning off File Explorer heap termination on corruption must be disabled
    V-205871 Low Windows Server 2019 Turning off File Explorer heap termination on corruption must be disabled
    V-253397 Low File Explorer heap termination on corruption must be disabled
    V-220838 Low Turning off File Explorer heap termination on corruption must be disabled
    V-278002 Low Windows Server 2025 nonadministrative accounts or groups must only have print permissions on prin...
    V-278029 Low The Windows Server 2025 time service must synchronize with an appropriate DOD time source
    V-278082 Low Windows Server 2025 Internet Protocol version 6 (IPv6) source routing must be configured to the h...
    V-278083 Low Windows Server 2025 source routing must be configured to the highest protection level to prevent ...
    V-278084 Low Windows Server 2025 must be configured to prevent Internet Control Message Protocol (ICMP) redire...
    V-278085 Low Windows Server 2025 must be configured to ignore NetBIOS name release requests except from WINS s...
    V-278098 Low Windows Server 2025 Application Compatibility Program Inventory must be prevented from collecting...
    V-278104 Low Windows Server 2025 Windows Update must not obtain updates from other PCs on the internet
    V-278110 Low Windows Server 2025 Turning off File Explorer heap termination on corruption must be disabled
    V-278147 Low Windows Server 2025 directory service must be configured to terminate LDAP-based network connecti...
    V-278208 Low Windows Server 2025 title for legal banner dialog box must be configured with the appropriate text
    V-278231 Low Windows Server 2025 default permissions of global system objects must be strengthened
    V-243488 Low User accounts with delegated authority must be removed from Windows built-in administrative group...
    V-243494 Low Each cross-directory authentication configuration must be documented
    V-243499 Low Active Directory implementation information must be added to the organization contingency plan wh...
    V-243501 Low The impact of CPCON changes on the cross-directory authentication configuration must be considere...
    V-277074 Low The macOS system must configure audit retention to seven days
    V-277163 Low The macOS system must configure install.log retention to 365