CyberStrikeus/CyberStrike - Page 37

cis-bind9-v301-1-2

Do Not Install a Multi-Use System (Manual)

cis-bind9-v301-1-3

Dedicated Name Server Role (Automated)

cis-bind9-v301-1-4

Use Secure Upstream Caching DNS Servers (Manual)

cis-bind9-v301-1-5

Installing ISC BIND 9 (Automated)

cis-bind9-v301-2-1

Run BIND as a non-root User (Automated)

cis-bind9-v301-2-2

Give the BIND User Account an Invalid Shell (Automated)

cis-bind9-v301-2-3

Lock the BIND User Account (Automated)

cis-bind9-v301-2-4

Set root Ownership of BIND Directories (Automated)

cis-bind9-v301-2-5

Set root Ownership of BIND Configuration Files (Automated)

cis-bind9-v301-2-6

Set Group named or root for BIND Directories and Files (Automated)

cis-bind9-v301-2-7

Set Group and Other Permissions Read-Only for BIND Non-Runtime Directories (Automated)

cis-bind9-v301-2-8

Set Group and Other Permissions Read-Only for All BIND Files (Automated)

cis-bind9-v301-2-9

Isolate BIND with chroot'ed Subdirectory (Automated)

cis-bind9-v301-3-1

Ignore Erroneous or Unwanted Queries (Automated)

cis-bind9-v301-3-2

Restrict Recursive Queries (Automated)

cis-bind9-v301-3-3

Restrict Query Origins (Manual)

cis-bind9-v301-3-4

Restrict Queries of the Cache (Automated)

cis-bind9-v301-4-1

Use TSIG Keys 256 Bits in Length (Scored)

cis-bind9-v301-4-2

Include Cryptographic Key Files (Scored)

cis-bind9-v301-4-3

Use Unique Keys for Each Pair of Hosts (Scored)

cis-bind9-v301-4-4

Restrict Access to All Key Files (Scored)

cis-bind9-v301-4-5

Protect TSIG Key Files During Deployment (Not Scored)

cis-bind9-v301-5-1

Securely Authenticate Zone Transfers (Scored)

cis-bind9-v301-5-2

Securely Authenticate Dynamic Updates (Scored)

cis-bind9-v301-5-3

Securely Authenticate Update Forwarding (Scored)

cis-bind9-v301-6-1

Hide BIND Version String (Scored)

cis-bind9-v301-6-2

Hide Nameserver ID (Scored)

cis-bind9-v301-7-1

Do Not Define a Static Source Port (Scored)

cis-bind9-v301-7-2

Enable DNSSEC Validation (Scored)

cis-bind9-v301-7-3

Disable the dnssec-accept-expired Option (Scored)

cis-bind9-v301-8-1

Apply Applicable Updates (Scored)

cis-bind9-v301-8-2

Configure a Logging File Channel (Scored)

cis-bind9-v301-8-3

Configure a Logging Syslog Channel (Scored)

cis-bind9-v301-8-4

Disable the HTTP Statistics Server (Scored)

cis-docker-v160-1-1-1

Ensure a separate partition for containers has been created

cis-docker-v160-1-1-10

Ensure auditing is configured for Docker files and directories - /etc/default/docker

cis-docker-v160-1-1-11

Ensure auditing is configured for Docker files and directories - /etc/docker/daemon.json

cis-docker-v160-1-1-12

Ensure auditing is configured for Docker files and directories - /etc/containerd/config.toml

cis-docker-v160-1-1-13

Ensure auditing is configured for Docker files and directories - /etc/sysconfig/docker

cis-docker-v160-1-1-14

Ensure auditing is configured for Docker files and directories - /usr/bin/containerd