-
We use AWS Config and AWS Security Hub for automated management and verification of configuration settings.
The Team should configure or verify Security Hub is configured to validate the AWS accoun…
-
### What do you want to improve?
The helm chart Kiali ClusterRole is using :
```
- apiGroups:
- networking.istio.io
- security.istio.io
- extensions.istio.io
- telemetry.istio.io
…
-
|Wazuh version|Component|Install type|Install method|Platform|
|---|---|---|---|---|
| all | all | Manager/Agent | Packages | RHEL |
The Wazuh/OSSec components install themselves in `/var/ossec`.…
-
**Is your feature request related to a problem? Please describe.**
S3 bucket access logging should be enabled on the CloudTrail S3 bucket. The fact that is disabled prevents adopters from being compl…
-
**Is your feature request related to a problem? Please describe.**
Currently, the Harvester OS is not 100% compliant with CIS Linux security guidelines
We should adopt OpenSCAP scan tool in the UA…
-
**Image I'm using:**
bottlerocket-aws-k8s-1.29-aarch64-v1.21.1-82691b51
**What I expected to happen:**
No redundant warning about a world-inaccessible config file
**What actually hap…
-
### Description
It would be nice if I could make sure all of my CDK is CIS compliant. Right now there's the ability to check for PCI DSS, NIST, and AWS recommended best practices, but not CIS which i…
-
# Feature Request
**Describe the Feature Request**
We should ensure the modules provided are compliant, and will not result in new vulnerabilities being detected in the Lacework platform. As it s…
-
Hi Tyrone,
This is a feature request to be able to configure that some tests are disabled.
Sometimes there are good reasons to deviate from the CIS benchmark. A "Failed check" confuses people an…
-
Hi,
I have a problem with CIS Benchmark 2.1.4 Set 'no service dhcp' (Automated)
It looks like the benchmark is a bit naive and the defaults of Cisco of showing dhcp service has changed somewhere in …