Collaborate Disseminate
What are the differences between the CIS hardened linux and SELinux(security linux)? Also, all the public cloud service providers support CIS hardened linux. Does it mean SELinux has lost the battle? Or in terms of security, which flavor s… Continue reading CIS hardened linux vs SELinux(Security Enhanced)
I am trying to harden RHEL with CIS benchmark. One of the items states the following:
Ensure permissions on all logfiles are configured
Description: Log files stored in /var/log/ contain logged information
from many services on the system… Continue reading What is the practical approach for CIS Benchmark (Ensure permissions on all logfiles are configured)?
Microsoft offers RAP as a Service for various platforms like AD, Exchange, Windows Servers/Desktops etc. Does anyone have an insight about these services from Microsoft vs other free tools like for AD Bloodhound is a really good one to hig… Continue reading RAP as a Service vs other freeware software tools
I am creating a software approval list for the company I work for. We are trying to get up to IG1 of CIS Controls. Starting from scratch here as there was no policy in place. I had the SentinelOne client pull all of the local software in… Continue reading Approved Software [closed]
How does a whole asset fail a CIS benchmarks assessment?
I am using Rapid7’s InsightVM tool to run CIS scans on couple of our servers. One of them reported 68.27% compliance, while the other scored close too. However, in the summary of the… Continue reading Minimum acceptable CIS compliance percentage?
I am using CIS benchmark framework to audit my Linux OS, and I have received various pass/fail results. But is there any way to prioritize the fail results ? Is there any severity mapping available for these recommendations?
Continue reading Map CIS benchmark recommendation to Severity