Collaborate Disseminate
I am trying to harden RHEL with CIS benchmark. One of the items states the following:
Ensure permissions on all logfiles are configured
Description: Log files stored in /var/log/ contain logged information
from many services on the system… Continue reading What is the practical approach for CIS Benchmark (Ensure permissions on all logfiles are configured)?
Microsoft offers RAP as a Service for various platforms like AD, Exchange, Windows Servers/Desktops etc. Does anyone have an insight about these services from Microsoft vs other free tools like for AD Bloodhound is a really good one to hig… Continue reading RAP as a Service vs other freeware software tools
I am creating a software approval list for the company I work for. We are trying to get up to IG1 of CIS Controls. Starting from scratch here as there was no policy in place. I had the SentinelOne client pull all of the local software in… Continue reading Approved Software [closed]
How does a whole asset fail a CIS benchmarks assessment?
I am using Rapid7’s InsightVM tool to run CIS scans on couple of our servers. One of them reported 68.27% compliance, while the other scored close too. However, in the summary of the… Continue reading Minimum acceptable CIS compliance percentage?
I am using CIS benchmark framework to audit my Linux OS, and I have received various pass/fail results. But is there any way to prioritize the fail results ? Is there any severity mapping available for these recommendations?
Continue reading Map CIS benchmark recommendation to Severity