CyberStrikeus/CyberStrike - Seite 146

cis-ubuntu-14-04-lts-3-2-4-ensure-suspicious-packets-are-logged

Verify that packets with un-routable source addresses are logged for investigation

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-2-8-ensure-tcp-syn-cookies-is-enabled

Verify that TCP SYN Cookies are enabled to protect against SYN flood attacks

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-3-3-ensure-ipv6-is-disabled

Verify that IPv6 is disabled if not required to reduce the attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-4-1-ensure-tcp-wrappers-is-installed

Verify that TCP Wrappers is installed for host-based access control

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-4-2-ensure-etc-hosts-allow-is-configured

Verify that /etc/hosts.allow is configured to permit authorized network access

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-4-3-ensure-etc-hosts-deny-is-configured

Verify that /etc/hosts.deny is configured to deny all unauthorized network access

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-6-1-ensure-iptables-is-installed

Verify that iptables is installed for firewall management and configuration

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-6-2-ensure-default-deny-firewall-policy

Verify that default deny firewall policy is configured for INPUT, OUTPUT, and FORWARD chains

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-6-3-ensure-loopback-traffic-is-configured

Verify that loopback interface accepts traffic and other interfaces deny loopback network traffic

Quellsprache: Englisch

cis-ubuntu-14-04-lts-3-7-ensure-wireless-interfaces-are-disabled

Verify that wireless interfaces are disabled to reduce the attack surface

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-1-2-ensure-auditd-service-is-enabled

Enable the auditd daemon to record system events for security monitoring

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-2-1-1-ensure-rsyslog-service-is-enabled

Enable the rsyslog service to ensure system logging is active

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-2-1-2-ensure-logging-is-configured

Configure rsyslog to capture appropriate logging for all facilities

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-2-2-1-ensure-syslog-ng-service-is-enabled

Enable the syslog-ng service to ensure system logging is active

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-2-2-2-ensure-logging-is-configured

Configure syslog-ng to capture appropriate logging for all facilities

Quellsprache: Englisch

cis-ubuntu-14-04-lts-4-3-ensure-logrotate-is-configured

Configure logrotate to ensure logs are rotated regularly to prevent disk exhaustion

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-1-1-ensure-cron-daemon-is-enabled

Verify the cron daemon is enabled to execute scheduled batch jobs on the system

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-2-14-ensure-ssh-access-is-limited

Verify SSH access is limited using AllowUsers, AllowGroups, DenyUsers, or DenyGroups directives

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-2-2-ensure-ssh-protocol-is-set-to-2

Verify SSH is configured to use Protocol version 2 only

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-2-4-ensure-ssh-x11-forwarding-is-disabled

Verify SSH X11 forwarding is disabled to prevent remote graphic connection tunneling

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-2-6-ensure-ssh-ignorerhosts-is-enabled

Verify SSH IgnoreRhosts is set to yes to prevent .rhosts-based authentication

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-2-8-ensure-ssh-root-login-is-disabled

Verify SSH PermitRootLogin is set to no to prevent direct root login over SSH

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-3-3-ensure-password-reuse-is-limited

Verify PAM is configured to remember at least 5 previous passwords to prevent reuse

Quellsprache: Englisch

cis-ubuntu-14-04-lts-5-4-2-ensure-system-accounts-are-non-login

Verify system accounts have non-login shells and are locked to prevent interactive access

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-1-10-ensure-no-world-writable-files-exist

Find and remediate world writable files across all local filesystems

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-1-13-audit-suid-executables

Identify and review all SUID executables to ensure they are legitimate

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-1-14-audit-sgid-executables

Identify and review all SGID executables to ensure they are legitimate

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-1-ensure-password-fields-are-not-empty

Verify all accounts in /etc/shadow have a password or are locked

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-11-ensure-no-users-have-forward-files

Verify no users have .forward files in their home directories

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-12-ensure-no-users-have-netrc-files

Verify no users have .netrc files in their home directories

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-14-ensure-no-users-have-rhosts-files

Verify no users have .rhosts files in their home directories

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-16-ensure-no-duplicate-uids-exist

Verify no duplicate User IDs exist in /etc/passwd

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-17-ensure-no-duplicate-gids-exist

Verify no duplicate Group IDs exist in /etc/group

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-18-ensure-no-duplicate-user-names-exist

Verify no duplicate user names exist in /etc/passwd

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-20-ensure-shadow-group-is-empty

Verify the shadow group has no users assigned to it

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-5-ensure-root-is-the-only-uid-0-account

Verify that only the root account has UID 0

Quellsprache: Englisch

cis-ubuntu-14-04-lts-6-2-6-ensure-root-path-integrity

Verify root PATH does not contain writable or non-root-owned directories

Quellsprache: Englisch

cis-ubuntu1604-v200-1-1-1-1

Ensure mounting of cramfs filesystems is disabled

Quellsprache: Englisch

cis-ubuntu1604-v200-1-1-1-2

Ensure mounting of freevxfs filesystems is disabled

Quellsprache: Englisch

cis-ubuntu1604-v200-1-1-1-3

Ensure mounting of jffs2 filesystems is disabled

Quellsprache: Englisch