Profile My skills Saved Collections Edit profile Submit a skill

← all publishers

cyberstrikeus

@cyberstrikeus source repo

7171 published skills · page 4 of 72

  1. ▌
    Cis Ubuntu1804 V220 5 1 2 5 · cyberstrikeus
    Ensure logging is configured
    0
    installs
  2. ▌
    Cis Ubuntu1804 V220 5 1 2 6 · cyberstrikeus
    Ensure rsyslog is configured to send logs to a remote log host
    0
    installs
  3. ▌
    Cis Ubuntu1804 V220 5 1 2 7 · cyberstrikeus
    Ensure rsyslog is not configured to receive logs from a remote client
    0
    installs
  4. ▌
    Cis Ubuntu1804 V220 5 2 1 1 · cyberstrikeus
    Verify that auditd and audispd-plugins packages are installed
    0
    installs
  5. ▌
    Cis Ubuntu1804 V220 5 2 1 2 · cyberstrikeus
    Verify that the auditd daemon is enabled and running to record system events
    0
    installs
  6. ▌
    Cis Ubuntu1804 V220 5 2 1 3 · cyberstrikeus
    Configure grub2 to enable auditing for processes that start prior to auditd daemon startup
    0
    installs
  7. ▌
    Cis Ubuntu1804 V220 5 2 1 4 · cyberstrikeus
    Configure the audit_backlog_limit kernel parameter to prevent audit event loss
    0
    installs
  8. ▌
    Cis Ubuntu1804 V220 5 2 2 1 · cyberstrikeus
    Configure the maximum size of audit log files to prevent system impact and audit data loss
    0
    installs
  9. ▌
    Cis Ubuntu1804 V220 5 2 2 2 · cyberstrikeus
    Configure auditd to keep audit logs and never delete them automatically
    0
    installs
  10. ▌
    Cis Ubuntu1804 V220 5 2 2 3 · cyberstrikeus
    Configure the system to halt when audit logs are full to prevent data loss
    0
    installs
  11. ▌
    Cis Ubuntu1804 V220 5 2 3 1 · cyberstrikeus
    Ensure changes to system administration scope (sudoers) is collected
    0
    installs
  12. ▌
    Cis Ubuntu1804 V220 5 2 3 2 · cyberstrikeus
    Ensure actions as another user are always logged
    0
    installs
  13. ▌
    Cis Ubuntu1804 V220 5 2 3 3 · cyberstrikeus
    Ensure events that modify the sudo log file are collected
    0
    installs
  14. ▌
    Cis Ubuntu1804 V220 5 2 3 4 · cyberstrikeus
    Ensure events that modify date and time information are collected
    0
    installs
  15. ▌
    Cis Ubuntu1804 V220 5 2 3 5 · cyberstrikeus
    Ensure events that modify the system's network environment are collected
    0
    installs
  16. ▌
    Cis Ubuntu1804 V220 5 2 3 6 · cyberstrikeus
    Ensure use of privileged commands are collected
    0
    installs
  17. ▌
    Cis Ubuntu1804 V220 5 2 3 7 · cyberstrikeus
    Ensure unsuccessful file access attempts are collected
    0
    installs
  18. ▌
    Cis Ubuntu1804 V220 5 2 3 8 · cyberstrikeus
    Ensure events that modify user/group information are collected
    0
    installs
  19. ▌
    Cis Ubuntu1804 V220 5 2 3 9 · cyberstrikeus
    Ensure discretionary access control permission modification events are collected
    0
    installs
  20. ▌
    Cis Ubuntu1804 V220 5 2 4 1 · cyberstrikeus
    5.2.4.1 Ensure audit log files are mode 0640 or less permissive
    0
    installs
  21. ▌
    Cis Ubuntu1804 V220 5 2 4 2 · cyberstrikeus
    5.2.4.2 Ensure only authorized users own audit log files
    0
    installs
  22. ▌
    Cis Ubuntu1804 V220 5 2 4 3 · cyberstrikeus
    5.2.4.3 Ensure only authorized groups are assigned ownership of audit log files
    0
    installs
  23. ▌
    Cis Ubuntu1804 V220 5 2 4 4 · cyberstrikeus
    5.2.4.4 Ensure the audit log directory is 0750 or more restrictive
    0
    installs
  24. ▌
    Cis Ubuntu1804 V220 5 2 4 5 · cyberstrikeus
    5.2.4.5 Ensure audit configuration files are 640 or more restrictive
    0
    installs
  25. ▌
    Cis Ubuntu1804 V220 5 2 4 6 · cyberstrikeus
    5.2.4.6 Ensure audit configuration files are owned by root
    0
    installs
  26. ▌
    Cis Ubuntu1804 V220 5 2 4 7 · cyberstrikeus
    5.2.4.7 Ensure audit configuration files belong to group root
    0
    installs
  27. ▌
    Cis Ubuntu1804 V220 5 2 4 8 · cyberstrikeus
    5.2.4.8 Ensure audit tools are 755 or more restrictive
    0
    installs
  28. ▌
    Cis Ubuntu1804 V220 5 2 4 9 · cyberstrikeus
    5.2.4.9 Ensure audit tools are owned by root
    0
    installs
  29. ▌
    Cis Ubuntu2004 V300 1 1 1 1 · cyberstrikeus
    Ensure cramfs kernel module is not available
    0
    installs
  30. ▌
    Cis Ubuntu2004 V300 1 1 1 2 · cyberstrikeus
    Ensure freevxfs kernel module is not available
    0
    installs
  31. ▌
    Cis Ubuntu2004 V300 1 1 1 3 · cyberstrikeus
    Ensure hfs kernel module is not available
    0
    installs
  32. ▌
    Cis Ubuntu2004 V300 1 1 1 4 · cyberstrikeus
    Ensure hfsplus kernel module is not available
    0
    installs
  33. ▌
    Cis Ubuntu2004 V300 1 1 1 5 · cyberstrikeus
    Ensure jffs2 kernel module is not available
    0
    installs
  34. ▌
    Cis Ubuntu2004 V300 1 1 1 6 · cyberstrikeus
    Ensure overlay kernel module is not available
    0
    installs
  35. ▌
    Cis Ubuntu2004 V300 1 1 1 7 · cyberstrikeus
    Ensure squashfs kernel module is not available
    0
    installs
  36. ▌
    Cis Ubuntu2004 V300 1 1 1 8 · cyberstrikeus
    Ensure udf kernel module is not available
    0
    installs
  37. ▌
    Cis Ubuntu2004 V300 1 1 1 9 · cyberstrikeus
    Ensure usb-storage kernel module is not available
    0
    installs
  38. ▌
    Cis Ubuntu2004 V300 1 2 1 1 · cyberstrikeus
    Ensure GPG keys are configured
    0
    installs
  39. ▌
    Cis Ubuntu2004 V300 1 2 1 2 · cyberstrikeus
    Ensure package manager repositories are configured
    0
    installs
  40. ▌
    Cis Ubuntu2004 V300 1 2 2 1 · cyberstrikeus
    Ensure updates, patches, and additional security software are installed
    0
    installs
  41. ▌
    Cis Ubuntu2004 V300 1 3 1 1 · cyberstrikeus
    Ensure latest versions of the apparmor packages are installed
    0
    installs
  42. ▌
    Cis Ubuntu2004 V300 1 3 1 2 · cyberstrikeus
    Ensure AppArmor is enabled in the bootloader configuration
    0
    installs
  43. ▌
    Cis Ubuntu2004 V300 1 3 1 3 · cyberstrikeus
    Ensure all AppArmor Profiles are not disabled
    0
    installs
  44. ▌
    Cis Ubuntu2004 V300 1 3 1 4 · cyberstrikeus
    Ensure all AppArmor Profiles are enforcing
    0
    installs
  45. ▌
    Cis Ubuntu2004 V300 2 3 1 1 · cyberstrikeus
    Ensure a single time synchronization daemon is in use
    0
    installs
  46. ▌
    Cis Ubuntu2004 V300 2 3 2 1 · cyberstrikeus
    Ensure systemd-timesyncd configured with authorized timeserver
    0
    installs
  47. ▌
    Cis Ubuntu2004 V300 2 3 2 2 · cyberstrikeus
    Ensure systemd-timesyncd is enabled and running
    0
    installs
  48. ▌
    Cis Ubuntu2004 V300 2 3 3 1 · cyberstrikeus
    Ensure chrony is configured with authorized timeserver
    0
    installs
  49. ▌
    Cis Ubuntu2004 V300 2 3 3 2 · cyberstrikeus
    Ensure chrony is running as user _chrony
    0
    installs
  50. ▌
    Cis Ubuntu2004 V300 2 3 3 3 · cyberstrikeus
    Ensure chrony is enabled and running
    0
    installs
  51. ▌
    Cis Ubuntu2004 V300 2 4 1 1 · cyberstrikeus
    Ensure cron daemon is enabled and active
    0
    installs
  52. ▌
    Cis Ubuntu2004 V300 2 4 1 2 · cyberstrikeus
    Ensure access to /etc/crontab is configured
    0
    installs
  53. ▌
    Cis Ubuntu2004 V300 2 4 1 3 · cyberstrikeus
    Ensure access to /etc/cron.hourly is configured
    0
    installs
  54. ▌
    Cis Ubuntu2004 V300 2 4 1 4 · cyberstrikeus
    Ensure access to /etc/cron.daily is configured
    0
    installs
  55. ▌
    Cis Ubuntu2004 V300 2 4 1 5 · cyberstrikeus
    Ensure access to /etc/cron.weekly is configured
    0
    installs
  56. ▌
    Cis Ubuntu2004 V300 2 4 1 6 · cyberstrikeus
    Ensure access to /etc/cron.monthly is configured
    0
    installs
  57. ▌
    Cis Ubuntu2004 V300 2 4 1 7 · cyberstrikeus
    Ensure access to /etc/cron.yearly is configured
    0
    installs
  58. ▌
    Cis Ubuntu2004 V300 2 4 1 8 · cyberstrikeus
    Ensure access to /etc/cron.d is configured
    0
    installs
  59. ▌
    Cis Ubuntu2004 V300 2 4 1 9 · cyberstrikeus
    Ensure access to crontab is configured
    0
    installs
  60. ▌
    Cis Ubuntu2004 V300 2 4 2 1 · cyberstrikeus
    Ensure access to at is configured
    0
    installs
  61. ▌
    Cis Ubuntu2004 V300 4 4 1 1 · cyberstrikeus
    Ensure iptables packages are installed
    0
    installs
  62. ▌
    Cis Ubuntu2004 V300 4 4 1 2 · cyberstrikeus
    Ensure nftables is not in use with iptables
    0
    installs
  63. ▌
    Cis Ubuntu2004 V300 4 4 1 3 · cyberstrikeus
    Ensure ufw is not in use with iptables
    0
    installs
  64. ▌
    Cis Ubuntu2004 V300 4 4 2 1 · cyberstrikeus
    Ensure iptables default deny firewall policy
    0
    installs
  65. ▌
    Cis Ubuntu2004 V300 4 4 2 2 · cyberstrikeus
    Ensure iptables loopback traffic is configured
    0
    installs
  66. ▌
    Cis Ubuntu2004 V300 4 4 2 3 · cyberstrikeus
    Ensure iptables outbound and established connections are configured
    0
    installs
  67. ▌
    Cis Ubuntu2004 V300 4 4 2 4 · cyberstrikeus
    Ensure iptables firewall rules exist for all open ports
    0
    installs
  68. ▌
    Cis Ubuntu2004 V300 4 4 3 1 · cyberstrikeus
    Ensure ip6tables default deny firewall policy
    0
    installs
  69. ▌
    Cis Ubuntu2004 V300 4 4 3 2 · cyberstrikeus
    Ensure ip6tables loopback traffic is configured
    0
    installs
  70. ▌
    Cis Ubuntu2004 V300 4 4 3 3 · cyberstrikeus
    Ensure ip6tables outbound and established connections are configured
    0
    installs
  71. ▌
    Cis Ubuntu2004 V300 4 4 3 4 · cyberstrikeus
    Ensure ip6tables firewall rules exist for all open ports
    0
    installs
  72. ▌
    Cis Ubuntu2004 V300 5 3 1 1 · cyberstrikeus
    Ensure latest version of pam is installed
    0
    installs
  73. ▌
    Cis Ubuntu2004 V300 5 3 1 2 · cyberstrikeus
    Ensure latest version of libpam-modules is installed
    0
    installs
  74. ▌
    Cis Ubuntu2004 V300 5 3 1 3 · cyberstrikeus
    Ensure latest version of libpam-pwquality is installed
    0
    installs
  75. ▌
    Cis Ubuntu2004 V300 5 3 2 1 · cyberstrikeus
    Ensure pam_unix module is enabled
    0
    installs
  76. ▌
    Cis Ubuntu2004 V300 5 3 2 2 · cyberstrikeus
    Ensure pam_faillock module is enabled
    0
    installs
  77. ▌
    Cis Ubuntu2004 V300 5 3 2 3 · cyberstrikeus
    Ensure pam_pwquality module is enabled
    0
    installs
  78. ▌
    Cis Ubuntu2004 V300 5 3 2 4 · cyberstrikeus
    Ensure pam_pwhistory module is enabled
    0
    installs
  79. ▌
    Cis Ubuntu2004 V300 5 4 1 1 · cyberstrikeus
    Ensure password expiration is configured
    0
    installs
  80. ▌
    Cis Ubuntu2004 V300 5 4 1 2 · cyberstrikeus
    Ensure minimum password days is configured
    0
    installs
  81. ▌
    Cis Ubuntu2004 V300 5 4 1 3 · cyberstrikeus
    Ensure password expiration warning days is configured
    0
    installs
  82. ▌
    Cis Ubuntu2004 V300 5 4 1 4 · cyberstrikeus
    Ensure strong password hashing algorithm is configured
    0
    installs
  83. ▌
    Cis Ubuntu2004 V300 5 4 1 5 · cyberstrikeus
    Ensure inactive password lock is configured
    0
    installs
  84. ▌
    Cis Ubuntu2004 V300 5 4 1 6 · cyberstrikeus
    Ensure all users last password change date is in the past
    0
    installs
  85. ▌
    Cis Ubuntu2004 V300 5 4 2 1 · cyberstrikeus
    Ensure root is the only UID 0 account
    0
    installs
  86. ▌
    Cis Ubuntu2004 V300 5 4 2 2 · cyberstrikeus
    Ensure root is the only GID 0 account
    0
    installs
  87. ▌
    Cis Ubuntu2004 V300 5 4 2 3 · cyberstrikeus
    Ensure group root is the only GID 0 group
    0
    installs
  88. ▌
    Cis Ubuntu2004 V300 5 4 2 4 · cyberstrikeus
    Ensure root account access is controlled
    0
    installs
  89. ▌
    Cis Ubuntu2004 V300 5 4 2 5 · cyberstrikeus
    Ensure root path integrity
    0
    installs
  90. ▌
    Cis Ubuntu2004 V300 5 4 2 6 · cyberstrikeus
    Ensure root user umask is configured
    0
    installs
  91. ▌
    Cis Ubuntu2004 V300 5 4 2 7 · cyberstrikeus
    Ensure system accounts do not have a valid login shell
    0
    installs
  92. ▌
    Cis Ubuntu2004 V300 5 4 2 8 · cyberstrikeus
    Ensure accounts without a valid login shell are locked
    0
    installs
  93. ▌
    Cis Ubuntu2004 V300 5 4 3 1 · cyberstrikeus
    Ensure nologin is not listed in /etc/shells
    0
    installs
  94. ▌
    Cis Ubuntu2004 V300 5 4 3 2 · cyberstrikeus
    Ensure default user shell timeout is configured
    0
    installs
  95. ▌
    Cis Ubuntu2004 V300 5 4 3 3 · cyberstrikeus
    Ensure default user umask is configured
    0
    installs
  96. ▌
    Cis Ubuntu2004 V300 6 2 1 1 · cyberstrikeus
    Ensure journald service is enabled and active
    0
    installs
  97. ▌
    Cis Ubuntu2004 V300 6 2 1 2 · cyberstrikeus
    Ensure journald log file access is configured
    0
    installs
  98. ▌
    Cis Ubuntu2004 V300 6 2 1 3 · cyberstrikeus
    Ensure journald log file rotation is configured
    0
    installs
  99. ▌
    Cis Ubuntu2004 V300 6 2 2 2 · cyberstrikeus
    Ensure journald ForwardToSyslog is disabled
    0
    installs
  100. ▌
    Cis Ubuntu2004 V300 6 2 2 3 · cyberstrikeus
    Ensure journald Compress is configured
    0
    installs