← all publishers

cyberstrikeus

@cyberstrikeus source repo

Report this profile Claim this profile

• 7.2k skills
• 0 followers
• 1 day ago last updated

1. ▌
   Cis Ubuntu2004 V300 3 2 1 · cyberstrikeus

   Ensure dccp kernel module is not available
   0
   installs
2. ▌
   Cis Ubuntu2004 V300 3 2 2 · cyberstrikeus

   Ensure tipc kernel module is not available
   0
   installs
3. ▌
   Cis Ubuntu2004 V300 3 2 3 · cyberstrikeus

   Ensure rds kernel module is not available
   0
   installs
4. ▌
   Cis Ubuntu2004 V300 3 2 4 · cyberstrikeus

   Ensure sctp kernel module is not available
   0
   installs
5. ▌
   Cis Ubuntu2004 V300 3 3 1 · cyberstrikeus

   Ensure ip forwarding is disabled
   0
   installs
6. ▌
   Cis Ubuntu2004 V300 3 3 2 · cyberstrikeus

   Ensure packet redirect sending is disabled
   0
   installs
7. ▌
   Cis Ubuntu2004 V300 3 3 3 · cyberstrikeus

   Ensure bogus icmp responses are ignored
   0
   installs
8. ▌
   Cis Ubuntu2004 V300 3 3 4 · cyberstrikeus

   Ensure broadcast icmp requests are ignored
   0
   installs
9. ▌
   Cis Ubuntu2004 V300 3 3 5 · cyberstrikeus

   Ensure icmp redirects are not accepted
   0
   installs
10. ▌
    Cis Ubuntu2004 V300 3 3 6 · cyberstrikeus

    Ensure secure icmp redirects are not accepted
    0
    installs
11. ▌
    Cis Ubuntu2004 V300 3 3 7 · cyberstrikeus

    Ensure reverse path filtering is enabled
    0
    installs
12. ▌
    Cis Ubuntu2004 V300 3 3 8 · cyberstrikeus

    Ensure source routed packets are not accepted
    0
    installs
13. ▌
    Cis Ubuntu2004 V300 3 3 9 · cyberstrikeus

    Ensure suspicious packets are logged
    0
    installs
14. ▌
    Cis Ubuntu2004 V300 4 1 1 · cyberstrikeus

    Ensure a single firewall configuration utility is in use
    0
    installs
15. ▌
    Cis Ubuntu2004 V300 4 2 1 · cyberstrikeus

    Ensure ufw is installed
    0
    installs
16. ▌
    Cis Ubuntu2004 V300 4 2 2 · cyberstrikeus

    Ensure nftables is not in use with ufw
    0
    installs
17. ▌
    Cis Ubuntu2004 V300 4 2 3 · cyberstrikeus

    Ensure iptables-persistent is not installed with ufw
    0
    installs
18. ▌
    Cis Ubuntu2004 V300 4 2 4 · cyberstrikeus

    Ensure ufw service is enabled
    0
    installs
19. ▌
    Cis Ubuntu2004 V300 4 2 5 · cyberstrikeus

    Ensure ufw loopback traffic is configured
    0
    installs
20. ▌
    Cis Ubuntu2004 V300 4 2 6 · cyberstrikeus

    Ensure ufw outbound connections are configured
    0
    installs
21. ▌
    Cis Ubuntu2004 V300 4 2 7 · cyberstrikeus

    Ensure ufw firewall rules exist for all open ports
    0
    installs
22. ▌
    Cis Ubuntu2004 V300 4 2 8 · cyberstrikeus

    Ensure ufw default deny firewall policy
    0
    installs
23. ▌
    Cis Ubuntu2004 V300 4 3 1 · cyberstrikeus

    Ensure nftables is installed
    0
    installs
24. ▌
    Cis Ubuntu2004 V300 4 3 2 · cyberstrikeus

    Ensure ufw is uninstalled or disabled with nftables
    0
    installs
25. ▌
    Cis Ubuntu2004 V300 4 3 3 · cyberstrikeus

    Ensure iptables are flushed with nftables
    0
    installs
26. ▌
    Cis Ubuntu2004 V300 4 3 4 · cyberstrikeus

    Ensure a nftables table exists
    0
    installs
27. ▌
    Cis Ubuntu2004 V300 4 3 5 · cyberstrikeus

    Ensure nftables base chains exist
    0
    installs
28. ▌
    Cis Ubuntu2004 V300 4 3 6 · cyberstrikeus

    Ensure nftables loopback traffic is configured
    0
    installs
29. ▌
    Cis Ubuntu2004 V300 4 3 7 · cyberstrikeus

    Ensure nftables outbound and established connections are configured
    0
    installs
30. ▌
    Cis Ubuntu2004 V300 4 3 8 · cyberstrikeus

    Ensure nftables default deny firewall policy
    0
    installs
31. ▌
    Cis Ubuntu2004 V300 4 3 9 · cyberstrikeus

    Ensure nftables service is enabled
    0
    installs
32. ▌
    Cis Ubuntu2004 V300 5 1 1 · cyberstrikeus

    Ensure access to /etc/ssh/sshd_config is configured
    0
    installs
33. ▌
    Cis Ubuntu2004 V300 5 1 2 · cyberstrikeus

    Ensure access to SSH private host key files is configured
    0
    installs
34. ▌
    Cis Ubuntu2004 V300 5 1 3 · cyberstrikeus

    Ensure access to SSH public host key files is configured
    0
    installs
35. ▌
    Cis Ubuntu2004 V300 5 1 4 · cyberstrikeus

    Ensure sshd access is configured
    0
    installs
36. ▌
    Cis Ubuntu2004 V300 5 1 5 · cyberstrikeus

    Ensure sshd Banner is configured
    0
    installs
37. ▌
    Cis Ubuntu2004 V300 5 1 6 · cyberstrikeus

    Ensure sshd Ciphers are configured
    0
    installs
38. ▌
    Cis Ubuntu2004 V300 5 1 7 · cyberstrikeus

    Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured
    0
    installs
39. ▌
    Cis Ubuntu2004 V300 5 1 8 · cyberstrikeus

    Ensure sshd DisableForwarding is enabled
    0
    installs
40. ▌
    Cis Ubuntu2004 V300 5 1 9 · cyberstrikeus

    Ensure sshd GSSAPIAuthentication is disabled
    0
    installs
41. ▌
    Cis Ubuntu2004 V300 5 2 1 · cyberstrikeus

    Ensure sudo is installed
    0
    installs
42. ▌
    Cis Ubuntu2004 V300 5 2 2 · cyberstrikeus

    Ensure sudo commands use pty
    0
    installs
43. ▌
    Cis Ubuntu2004 V300 5 2 3 · cyberstrikeus

    Ensure sudo log file exists
    0
    installs
44. ▌
    Cis Ubuntu2004 V300 5 2 4 · cyberstrikeus

    Ensure users must provide password for privilege escalation
    0
    installs
45. ▌
    Cis Ubuntu2004 V300 5 2 5 · cyberstrikeus

    Ensure re-authentication for privilege escalation is not disabled globally
    0
    installs
46. ▌
    Cis Ubuntu2004 V300 5 2 6 · cyberstrikeus

    Ensure sudo authentication timeout is configured
    0
    installs
47. ▌
    Cis Ubuntu2004 V300 5 2 7 · cyberstrikeus

    Ensure access to the su command is restricted
    0
    installs
48. ▌
    Cis Ubuntu2004 V300 6 1 1 · cyberstrikeus

    Ensure AIDE is installed
    0
    installs
49. ▌
    Cis Ubuntu2004 V300 6 1 2 · cyberstrikeus

    Ensure filesystem integrity is regularly checked
    0
    installs
50. ▌
    Cis Ubuntu2004 V300 6 1 3 · cyberstrikeus

    Ensure cryptographic mechanisms are used to protect the integrity of audit tools
    0
    installs
51. ▌
    Cis Ubuntu2004 V300 7 1 1 · cyberstrikeus

    Ensure access to /etc/passwd is configured
    0
    installs
52. ▌
    Cis Ubuntu2004 V300 7 1 2 · cyberstrikeus

    Ensure access to /etc/passwd- is configured
    0
    installs
53. ▌
    Cis Ubuntu2004 V300 7 1 3 · cyberstrikeus

    Ensure access to /etc/group is configured
    0
    installs
54. ▌
    Cis Ubuntu2004 V300 7 1 4 · cyberstrikeus

    Ensure access to /etc/group- is configured
    0
    installs
55. ▌
    Cis Ubuntu2004 V300 7 1 5 · cyberstrikeus

    Ensure access to /etc/shadow is configured
    0
    installs
56. ▌
    Cis Ubuntu2004 V300 7 1 6 · cyberstrikeus

    Ensure access to /etc/shadow- is configured
    0
    installs
57. ▌
    Cis Ubuntu2004 V300 7 1 7 · cyberstrikeus

    Ensure access to /etc/gshadow is configured
    0
    installs
58. ▌
    Cis Ubuntu2004 V300 7 1 8 · cyberstrikeus

    Ensure access to /etc/gshadow- is configured
    0
    installs
59. ▌
    Cis Ubuntu2004 V300 7 1 9 · cyberstrikeus

    Ensure access to /etc/shells is configured
    0
    installs
60. ▌
    Cis Ubuntu2004 V300 7 2 1 · cyberstrikeus

    Ensure accounts in /etc/passwd use shadowed passwords
    0
    installs
61. ▌
    Cis Ubuntu2004 V300 7 2 2 · cyberstrikeus

    Ensure /etc/shadow password fields are not empty
    0
    installs
62. ▌
    Cis Ubuntu2004 V300 7 2 3 · cyberstrikeus

    Ensure all groups in /etc/passwd exist in /etc/group
    0
    installs
63. ▌
    Cis Ubuntu2004 V300 7 2 4 · cyberstrikeus

    Ensure shadow group is empty
    0
    installs
64. ▌
    Cis Ubuntu2004 V300 7 2 5 · cyberstrikeus

    Ensure no duplicate UIDs exist
    0
    installs
65. ▌
    Cis Ubuntu2004 V300 7 2 6 · cyberstrikeus

    Ensure no duplicate GIDs exist
    0
    installs
66. ▌
    Cis Ubuntu2004 V300 7 2 7 · cyberstrikeus

    Ensure no duplicate user names exist
    0
    installs
67. ▌
    Cis Ubuntu2004 V300 7 2 8 · cyberstrikeus

    Ensure no duplicate group names exist
    0
    installs
68. ▌
    Cis Ubuntu2004 V300 7 2 9 · cyberstrikeus

    Ensure local interactive user home directories are configured
    0
    installs
69. ▌
    Cis Apache 10 1 · cyberstrikeus

    Ensure the LimitRequestLine directive is Set to 512 or less
    0
    installs
70. ▌
    Cis Apache 10 2 · cyberstrikeus

    Ensure the LimitRequestFields Directive is Set to 100 or Less
    0
    installs
71. ▌
    Cis Apache 10 3 · cyberstrikeus

    Ensure the LimitRequestFieldsize Directive is Set to 1024 or Less
    0
    installs
72. ▌
    Cis Apache 10 4 · cyberstrikeus

    Ensure the LimitRequestBody Directive is Set to 102400 or Less
    0
    installs
73. ▌
    Cis Apache 11 1 · cyberstrikeus

    Ensure SELinux Is Enabled in Enforcing Mode
    0
    installs
74. ▌
    Cis Apache 11 2 · cyberstrikeus

    Ensure Apache Processes Run in the httpd_t Confined Context
    0
    installs
75. ▌
    Cis Apache 11 3 · cyberstrikeus

    Ensure the httpd_t Type Is Not in Permissive Mode
    0
    installs
76. ▌
    Cis Apache 11 4 · cyberstrikeus

    Ensure Only the Necessary SELinux Booleans Are Enabled
    0
    installs
77. ▌
    Cis Apache 12 1 · cyberstrikeus

    Ensure the AppArmor Framework Is Enabled
    0
    installs
78. ▌
    Cis Apache 12 2 · cyberstrikeus

    Ensure the Apache AppArmor Profile Is Configured Properly
    0
    installs
79. ▌
    Cis Apache 12 3 · cyberstrikeus

    Ensure the Apache AppArmor Profile Is in Enforce Mode
    0
    installs
80. ▌
    Cis Apache 3 10 · cyberstrikeus

    Ensure the ScoreBoard File Is Secured
    0
    installs
81. ▌
    Cis Apache 3 11 · cyberstrikeus

    Ensure Group Write Access for the Apache Directories and Files Is Properly Restricted
    0
    installs
82. ▌
    Cis Apache 3 12 · cyberstrikeus

    Ensure Group Write Access for the Document Root Directories and Files Is Properly Restricted
    0
    installs
83. ▌
    Cis Apache 3 13 · cyberstrikeus

    Ensure Access to Special Purpose Application Writable Directories is Properly Restricted
    0
    installs
84. ▌
    Cis Apache 5 10 · cyberstrikeus

    Ensure Access to .ht* Files Is Restricted
    0
    installs
85. ▌
    Cis Apache 5 11 · cyberstrikeus

    Ensure Access to Inappropriate File Extensions Is Restricted
    0
    installs
86. ▌
    Cis Apache 5 12 · cyberstrikeus

    Ensure IP Address Based Requests Are Disallowed
    0
    installs
87. ▌
    Cis Apache 5 13 · cyberstrikeus

    Ensure the IP Addresses for Listening for Requests Are Specified
    0
    installs
88. ▌
    Cis Apache 5 14 · cyberstrikeus

    Ensure Browser Framing Is Restricted
    0
    installs
89. ▌
    Cis Apache 7 10 · cyberstrikeus

    Ensure the TLSv1.0 and TLSv1.1 Protocols are Disabled
    0
    installs
90. ▌
    Cis Apache 7 11 · cyberstrikeus

    Ensure HTTP Strict Transport Security Is Enabled
    0
    installs
91. ▌
    Cis Apache 7 12 · cyberstrikeus

    Ensure Only Cipher Suites That Provide Forward Secrecy Are Enabled
    0
    installs
92. ▌
    Cis Gke Autopilot V100 4 1 2 · cyberstrikeus

    Minimize access to secrets (Automated)
    0
    installs
93. ▌
    Cis Gke Autopilot V100 4 1 7 · cyberstrikeus

    Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
    0
    installs
94. ▌
    Cis Gke Autopilot V100 4 1 8 · cyberstrikeus

    Avoid bindings to system:anonymous (Automated)
    0
    installs
95. ▌
    Cis Gke Autopilot V100 4 1 9 · cyberstrikeus

    Avoid non-default bindings to system:unauthenticated (Automated)
    0
    installs
96. ▌
    Cis Gke Autopilot V100 4 2 1 · cyberstrikeus

    Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
    0
    installs
97. ▌
    Cis Gke Autopilot V100 4 3 1 · cyberstrikeus

    Ensure that all Namespaces have Network Policies defined (Automated)
    0
    installs
98. ▌
    Cis Gke Autopilot V100 4 4 1 · cyberstrikeus

    Consider external secret storage (Manual)
    0
    installs
99. ▌
    Cis Gke Autopilot V100 4 5 1 · cyberstrikeus

    Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
    0
    installs
100. ▌
     Cis Gke Autopilot V100 4 6 3 · cyberstrikeus

     Apply Security Context to Pods and Containers (Manual)
     0
     installs