CyberStrikeus/CyberStrike - Page 162

cis-gcp-foundations-6-2-7

Ensure 'Log_min_duration_statement' Database Flag for Cloud SQL PostgreSQL Instance Is Set to '-1' (Disabled)

cis-gcp-foundations-6-2-8

Ensure 'cloudsql.enable_pgaudit' Database Flag for each Cloud SQL PostgreSQL Instance Is Set to 'on' For Centralized Logging

cis-gcp-foundations-6-3-1

Ensure 'external scripts enabled' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

cis-gcp-foundations-6-3-2

Ensure 'cross db ownership chaining' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

cis-gcp-foundations-6-3-3

Ensure 'user Connections' Database Flag for Cloud SQL SQL Server Instance Is Set to a Non-limiting Value

cis-gcp-foundations-6-3-4

Ensure 'user options' Database Flag for Cloud SQL SQL Server Instance Is Not Configured

cis-gcp-foundations-6-3-5

Ensure 'remote access' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

cis-gcp-foundations-6-3-6

Ensure '3625 (trace flag)' Database Flag for all Cloud SQL SQL Server Instances Is Set to 'on'

cis-gcp-foundations-6-3-7

Ensure 'contained database authentication' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

cis-gcp-foundations-6-4

Ensure That the Cloud SQL Database Instance Requires All Incoming Connections To Use SSL

cis-gcp-foundations-6-5

Ensure That Cloud SQL Database Instances Do Not Implicitly Whitelist All Public IP Addresses

cis-gcp-foundations-6-6

Ensure That Cloud SQL Database Instances Do Not Have Public IPs

cis-gcp-foundations-6-7

Ensure That Cloud SQL Database Instances Are Configured With Automated Backups

cis-gcp-foundations-7-1

Ensure That BigQuery Datasets Are Not Anonymously or Publicly Accessible

cis-gcp-foundations-7-2

Ensure That All BigQuery Tables Are Encrypted With Customer-Managed Encryption Key (CMEK)

cis-gcp-foundations-7-3

Ensure That a Default Customer-Managed Encryption Key (CMEK) Is Specified for All BigQuery Data Sets

cis-gcp-foundations-7-4

Ensure all data in BigQuery has been classified

cis-gcp-foundations-8-1

Ensure That Dataproc Cluster Is Encrypted Using Customer-Managed Encryption Key

cis-gcp-cos-1-1-1-1

Ensure mounting of udf filesystems is disabled

cis-gcp-cos-1-1-10

Ensure nodev option set on /dev/shm partition

cis-gcp-cos-1-1-11

Ensure nosuid option set on /dev/shm partition

cis-gcp-cos-1-1-12

Ensure noexec option set on /dev/shm partition

cis-gcp-cos-1-1-13

Disable Automounting

cis-gcp-cos-1-1-2

Ensure /tmp is configured

cis-gcp-cos-1-1-3

Ensure nodev option set on /tmp partition

cis-gcp-cos-1-1-4

Ensure nosuid option set on /tmp partition

cis-gcp-cos-1-1-5

Ensure noexec option set on /tmp partition

cis-gcp-cos-1-1-6

Ensure nosuid option set on /var partition

cis-gcp-cos-1-1-7

Ensure noexec option set on /var partition

cis-gcp-cos-1-1-8

Ensure nodev option set on /var partition

cis-gcp-cos-1-1-9

Ensure nodev option set on /home partition

cis-gcp-cos-1-2-1

Ensure dm-verity is enabled

cis-gcp-cos-1-3-1

Ensure authentication required for single user mode

cis-gcp-cos-1-4-1

Ensure core dumps are restricted

cis-gcp-cos-1-4-2

Ensure XD/NX support is enabled

cis-gcp-cos-1-4-3

Ensure address space layout randomization (ASLR) is enabled

cis-gcp-cos-1-5-1-1

Ensure message of the day is configured properly

cis-gcp-cos-1-5-1-2

Ensure local login warning banner is configured properly

cis-gcp-cos-1-5-1-3

Ensure remote login warning banner is configured properly

cis-gcp-cos-1-5-1-4

Ensure permissions on /etc/motd are configured