← all publishers

cyberstrikeus

@cyberstrikeus source repo

Report this profile Claim this profile

• 7.2k skills
• 0 followers
• 20 hours ago last updated

1. ▌
   Cis Ubuntu1604 V200 4 1 1 1 · cyberstrikeus

   Ensure auditd is installed
   0
   installs
2. ▌
   Cis Ubuntu1604 V200 4 1 1 2 · cyberstrikeus

   Ensure auditd service is enabled
   0
   installs
3. ▌
   Cis Ubuntu1604 V200 4 1 1 3 · cyberstrikeus

   Ensure auditing for processes that start prior to auditd is enabled
   0
   installs
4. ▌
   Cis Ubuntu1604 V200 4 1 1 4 · cyberstrikeus

   Ensure audit_backlog_limit is sufficient
   0
   installs
5. ▌
   Cis Ubuntu1604 V200 4 1 2 1 · cyberstrikeus

   Ensure audit log storage size is configured
   0
   installs
6. ▌
   Cis Ubuntu1604 V200 4 1 2 2 · cyberstrikeus

   Ensure audit logs are not automatically deleted
   0
   installs
7. ▌
   Cis Ubuntu1604 V200 4 1 2 3 · cyberstrikeus

   Ensure system is disabled when audit logs are full
   0
   installs
8. ▌
   Cis Ubuntu1604 V200 4 2 1 1 · cyberstrikeus

   Ensure rsyslog is installed
   0
   installs
9. ▌
   Cis Ubuntu1604 V200 4 2 1 2 · cyberstrikeus

   Ensure rsyslog Service is enabled
   0
   installs
10. ▌
    Cis Ubuntu1604 V200 4 2 1 3 · cyberstrikeus

    Ensure logging is configured
    0
    installs
11. ▌
    Cis Ubuntu1604 V200 4 2 1 4 · cyberstrikeus

    Ensure rsyslog default file permissions configured
    0
    installs
12. ▌
    Cis Ubuntu1604 V200 4 2 1 5 · cyberstrikeus

    Ensure rsyslog is configured to send logs to a remote log host
    0
    installs
13. ▌
    Cis Ubuntu1604 V200 4 2 1 6 · cyberstrikeus

    Ensure remote rsyslog messages are only accepted on designated log hosts
    0
    installs
14. ▌
    Cis Ubuntu1604 V200 4 2 2 1 · cyberstrikeus

    Ensure journald is configured to send logs to rsyslog
    0
    installs
15. ▌
    Cis Ubuntu1604 V200 4 2 2 2 · cyberstrikeus

    Ensure journald is configured to compress large log files
    0
    installs
16. ▌
    Cis Ubuntu1604 V200 4 2 2 3 · cyberstrikeus

    Ensure journald is configured to write logfiles to persistent disk
    0
    installs
17. ▌
    Cis Ubuntu1604 V200 5 5 1 1 · cyberstrikeus

    Ensure minimum days between password changes is configured
    0
    installs
18. ▌
    Cis Ubuntu1604 V200 5 5 1 2 · cyberstrikeus

    Ensure password expiration is 365 days or less
    0
    installs
19. ▌
    Cis Ubuntu1604 V200 5 5 1 3 · cyberstrikeus

    Ensure password expiration warning days is 7 or more
    0
    installs
20. ▌
    Cis Ubuntu1604 V200 5 5 1 4 · cyberstrikeus

    Ensure inactive password lock is 30 days or less
    0
    installs
21. ▌
    Cis Ubuntu1604 V200 5 5 1 5 · cyberstrikeus

    Ensure all users last password change date is in the past
    0
    installs
22. ▌
    Cis Ubuntu1804 V220 1 1 1 1 · cyberstrikeus

    Ensure mounting of cramfs filesystems is disabled
    0
    installs
23. ▌
    Cis Ubuntu1804 V220 1 1 1 2 · cyberstrikeus

    Ensure mounting of freevxfs filesystems is disabled
    0
    installs
24. ▌
    Cis Ubuntu1804 V220 1 1 1 3 · cyberstrikeus

    Ensure mounting of jffs2 filesystems is disabled
    0
    installs
25. ▌
    Cis Ubuntu1804 V220 1 1 1 4 · cyberstrikeus

    Ensure mounting of hfs filesystems is disabled
    0
    installs
26. ▌
    Cis Ubuntu1804 V220 1 1 1 5 · cyberstrikeus

    Ensure mounting of hfsplus filesystems is disabled
    0
    installs
27. ▌
    Cis Ubuntu1804 V220 1 1 1 6 · cyberstrikeus

    Ensure mounting of squashfs filesystems is disabled
    0
    installs
28. ▌
    Cis Ubuntu1804 V220 1 1 1 7 · cyberstrikeus

    Ensure mounting of udf filesystems is disabled
    0
    installs
29. ▌
    Cis Ubuntu1804 V220 1 1 2 1 · cyberstrikeus

    Ensure /tmp is a separate partition
    0
    installs
30. ▌
    Cis Ubuntu1804 V220 1 1 2 2 · cyberstrikeus

    Ensure nodev option set on /tmp partition
    0
    installs
31. ▌
    Cis Ubuntu1804 V220 1 1 2 3 · cyberstrikeus

    Ensure noexec option set on /tmp partition
    0
    installs
32. ▌
    Cis Ubuntu1804 V220 1 1 2 4 · cyberstrikeus

    Ensure nosuid option set on /tmp partition
    0
    installs
33. ▌
    Cis Ubuntu1804 V220 1 1 3 1 · cyberstrikeus

    Ensure separate partition exists for /var
    0
    installs
34. ▌
    Cis Ubuntu1804 V220 1 1 3 2 · cyberstrikeus

    Ensure nodev option set on /var partition
    0
    installs
35. ▌
    Cis Ubuntu1804 V220 1 1 3 3 · cyberstrikeus

    Ensure nosuid option set on /var partition
    0
    installs
36. ▌
    Cis Ubuntu1804 V220 1 1 4 1 · cyberstrikeus

    Ensure separate partition exists for /var/tmp
    0
    installs
37. ▌
    Cis Ubuntu1804 V220 1 1 4 2 · cyberstrikeus

    Ensure nodev option set on /var/tmp partition
    0
    installs
38. ▌
    Cis Ubuntu1804 V220 1 1 4 3 · cyberstrikeus

    Ensure noexec option set on /var/tmp partition
    0
    installs
39. ▌
    Cis Ubuntu1804 V220 1 1 4 4 · cyberstrikeus

    Ensure nosuid option set on /var/tmp partition
    0
    installs
40. ▌
    Cis Ubuntu1804 V220 1 1 5 1 · cyberstrikeus

    Ensure separate partition exists for /var/log
    0
    installs
41. ▌
    Cis Ubuntu1804 V220 1 1 5 2 · cyberstrikeus

    Ensure nodev option set on /var/log partition
    0
    installs
42. ▌
    Cis Ubuntu1804 V220 1 1 5 3 · cyberstrikeus

    Ensure noexec option set on /var/log partition
    0
    installs
43. ▌
    Cis Ubuntu1804 V220 1 1 5 4 · cyberstrikeus

    Ensure nosuid option set on /var/log partition
    0
    installs
44. ▌
    Cis Ubuntu1804 V220 1 1 6 1 · cyberstrikeus

    Ensure separate partition exists for /var/log/audit
    0
    installs
45. ▌
    Cis Ubuntu1804 V220 1 1 6 2 · cyberstrikeus

    Ensure nodev option set on /var/log/audit partition
    0
    installs
46. ▌
    Cis Ubuntu1804 V220 1 1 6 3 · cyberstrikeus

    Ensure noexec option set on /var/log/audit partition
    0
    installs
47. ▌
    Cis Ubuntu1804 V220 1 1 6 4 · cyberstrikeus

    Ensure nosuid option set on /var/log/audit partition
    0
    installs
48. ▌
    Cis Ubuntu1804 V220 1 1 7 1 · cyberstrikeus

    Ensure separate partition exists for /home
    0
    installs
49. ▌
    Cis Ubuntu1804 V220 1 1 7 2 · cyberstrikeus

    Ensure nodev option set on /home partition
    0
    installs
50. ▌
    Cis Ubuntu1804 V220 1 1 7 3 · cyberstrikeus

    Ensure nosuid option set on /home partition
    0
    installs
51. ▌
    Cis Ubuntu1804 V220 1 1 8 1 · cyberstrikeus

    Ensure nodev option set on /dev/shm partition
    0
    installs
52. ▌
    Cis Ubuntu1804 V220 1 1 8 2 · cyberstrikeus

    Ensure noexec option set on /dev/shm partition
    0
    installs
53. ▌
    Cis Ubuntu1804 V220 1 1 8 3 · cyberstrikeus

    Ensure nosuid option set on /dev/shm partition
    0
    installs
54. ▌
    Cis Ubuntu1804 V220 1 6 1 1 · cyberstrikeus

    Ensure AppArmor is installed
    0
    installs
55. ▌
    Cis Ubuntu1804 V220 1 6 1 2 · cyberstrikeus

    Ensure AppArmor is enabled in the bootloader configuration
    0
    installs
56. ▌
    Cis Ubuntu1804 V220 1 6 1 3 · cyberstrikeus

    Ensure all AppArmor Profiles are in enforce or complain mode
    0
    installs
57. ▌
    Cis Ubuntu1804 V220 1 6 1 4 · cyberstrikeus

    Ensure all AppArmor Profiles are enforcing
    0
    installs
58. ▌
    Cis Ubuntu1804 V220 2 1 1 1 · cyberstrikeus

    Ensure a single time synchronization daemon is in use
    0
    installs
59. ▌
    Cis Ubuntu1804 V220 2 1 2 1 · cyberstrikeus

    Ensure chrony is configured with authorized timeserver
    0
    installs
60. ▌
    Cis Ubuntu1804 V220 2 1 2 2 · cyberstrikeus

    Ensure chrony is running as user _chrony
    0
    installs
61. ▌
    Cis Ubuntu1804 V220 2 1 2 3 · cyberstrikeus

    Ensure chrony is enabled and running
    0
    installs
62. ▌
    Cis Ubuntu1804 V220 2 1 3 1 · cyberstrikeus

    Ensure systemd-timesyncd configured with authorized timeserver
    0
    installs
63. ▌
    Cis Ubuntu1804 V220 2 1 3 2 · cyberstrikeus

    Ensure systemd-timesyncd is enabled and running
    0
    installs
64. ▌
    Cis Ubuntu1804 V220 2 1 4 1 · cyberstrikeus

    Ensure ntp access control is configured
    0
    installs
65. ▌
    Cis Ubuntu1804 V220 2 1 4 2 · cyberstrikeus

    Ensure ntp is configured with authorized timeserver
    0
    installs
66. ▌
    Cis Ubuntu1804 V220 2 1 4 3 · cyberstrikeus

    Ensure ntp is running as user ntp
    0
    installs
67. ▌
    Cis Ubuntu1804 V220 2 1 4 4 · cyberstrikeus

    Ensure ntp is enabled and running
    0
    installs
68. ▌
    Cis Ubuntu1804 V220 3 4 1 1 · cyberstrikeus

    Ensure ufw is installed
    0
    installs
69. ▌
    Cis Ubuntu1804 V220 3 4 1 2 · cyberstrikeus

    Ensure iptables-persistent is not installed with ufw
    0
    installs
70. ▌
    Cis Ubuntu1804 V220 3 4 1 3 · cyberstrikeus

    Ensure ufw service is enabled
    0
    installs
71. ▌
    Cis Ubuntu1804 V220 3 4 1 4 · cyberstrikeus

    Ensure ufw loopback traffic is configured
    0
    installs
72. ▌
    Cis Ubuntu1804 V220 3 4 1 5 · cyberstrikeus

    Ensure ufw outbound connections are configured
    0
    installs
73. ▌
    Cis Ubuntu1804 V220 3 4 1 6 · cyberstrikeus

    Ensure ufw firewall rules exist for all open ports
    0
    installs
74. ▌
    Cis Ubuntu1804 V220 3 4 1 7 · cyberstrikeus

    Ensure ufw default deny firewall policy
    0
    installs
75. ▌
    Cis Ubuntu1804 V220 3 4 2 1 · cyberstrikeus

    Ensure nftables is installed
    0
    installs
76. ▌
    Cis Ubuntu1804 V220 3 4 2 2 · cyberstrikeus

    Ensure ufw is uninstalled or disabled with nftables
    0
    installs
77. ▌
    Cis Ubuntu1804 V220 3 4 2 3 · cyberstrikeus

    Ensure iptables are flushed with nftables
    0
    installs
78. ▌
    Cis Ubuntu1804 V220 3 4 2 4 · cyberstrikeus

    Ensure a nftables table exists
    0
    installs
79. ▌
    Cis Ubuntu1804 V220 3 4 2 5 · cyberstrikeus

    Ensure nftables base chains exist
    0
    installs
80. ▌
    Cis Ubuntu1804 V220 3 4 2 6 · cyberstrikeus

    Ensure nftables loopback traffic is configured
    0
    installs
81. ▌
    Cis Ubuntu1804 V220 3 4 2 7 · cyberstrikeus

    Ensure nftables outbound and established connections are configured
    0
    installs
82. ▌
    Cis Ubuntu1804 V220 3 4 2 8 · cyberstrikeus

    Ensure nftables default deny firewall policy
    0
    installs
83. ▌
    Cis Ubuntu1804 V220 3 4 2 9 · cyberstrikeus

    Ensure nftables service is enabled
    0
    installs
84. ▌
    Cis Ubuntu1804 V220 4 5 1 1 · cyberstrikeus

    Ensure minimum days between password changes is configured
    0
    installs
85. ▌
    Cis Ubuntu1804 V220 4 5 1 2 · cyberstrikeus

    Ensure password expiration is 365 days or less
    0
    installs
86. ▌
    Cis Ubuntu1804 V220 4 5 1 3 · cyberstrikeus

    Ensure password expiration warning days is 7 or more
    0
    installs
87. ▌
    Cis Ubuntu1804 V220 4 5 1 4 · cyberstrikeus

    Ensure inactive password lock is 30 days or less
    0
    installs
88. ▌
    Cis Ubuntu1804 V220 4 5 1 5 · cyberstrikeus

    Ensure all users last password change date is in the past
    0
    installs
89. ▌
    Cis Ubuntu1804 V220 4 5 1 6 · cyberstrikeus

    Ensure the number of changed characters in a new password is configured
    0
    installs
90. ▌
    Cis Ubuntu1804 V220 4 5 1 7 · cyberstrikeus

    Ensure password dictionary check is enabled
    0
    installs
91. ▌
    Cis Ubuntu1804 V220 5 1 1 2 · cyberstrikeus

    Ensure journald service is enabled
    0
    installs
92. ▌
    Cis Ubuntu1804 V220 5 1 1 3 · cyberstrikeus

    Ensure journald is configured to compress large log files
    0
    installs
93. ▌
    Cis Ubuntu1804 V220 5 1 1 4 · cyberstrikeus

    Ensure journald is configured to write logfiles to persistent disk
    0
    installs
94. ▌
    Cis Ubuntu1804 V220 5 1 1 5 · cyberstrikeus

    Ensure journald is not configured to send logs to rsyslog
    0
    installs
95. ▌
    Cis Ubuntu1804 V220 5 1 1 6 · cyberstrikeus

    Ensure journald log rotation is configured per site policy
    0
    installs
96. ▌
    Cis Ubuntu1804 V220 5 1 1 7 · cyberstrikeus

    Ensure journald default file permissions configured
    0
    installs
97. ▌
    Cis Ubuntu1804 V220 5 1 2 1 · cyberstrikeus

    Ensure rsyslog is installed
    0
    installs
98. ▌
    Cis Ubuntu1804 V220 5 1 2 2 · cyberstrikeus

    Ensure rsyslog service is enabled
    0
    installs
99. ▌
    Cis Ubuntu1804 V220 5 1 2 3 · cyberstrikeus

    Ensure journald is configured to send logs to rsyslog
    0
    installs
100. ▌
     Cis Ubuntu1804 V220 5 1 2 4 · cyberstrikeus

     Ensure rsyslog default file permissions are configured
     0
     installs