🦚 Peacock Unified

🔗 API Bindings

API → UI component mappings · 90,813 documents

IDDocumentSource
3fa537f013c19159SCA Check 35619: Ensure a single firewall configuration utility is in use. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133']…wazuh-sca
22d5f9675075db77SCA Check 35620: Ensure ufw is installed. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] The Uncomplicated Firewall (ufw)…wazuh-sca
34c6fe6a69f779ecSCA Check 35621: Ensure iptables-persistent is not installed with ufw. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] The…wazuh-sca
2bc0a2a648c9869eSCA Check 35622: Ensure ufw service is enabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] UncomplicatedFirewall (ufw)…wazuh-sca
86f8afb6d4f96664SCA Check 35623: Ensure ufw loopback traffic is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Configure the…wazuh-sca
594e918d686118a1SCA Check 35624: Ensure ufw default deny firewall policy. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] A default deny…wazuh-sca
869a728702087ccdSCA Check 35625: Ensure nftables is installed. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] nftables provides a new…wazuh-sca
5b89e81dea48d655SCA Check 35626: Ensure ufw is uninstalled or disabled with nftables. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133']…wazuh-sca
ed7ac0806278cf0eSCA Check 35627: Ensure iptables are flushed with nftables. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] nftables is a…wazuh-sca
d6b020f3c0a26e92SCA Check 35628: Ensure a nftables table exists. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Tables hold chains. Each…wazuh-sca
c5c35b2e822b7569SCA Check 35629: Ensure nftables base chains exist. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Chains are containers…wazuh-sca
dbea6af456da9dcaSCA Check 35630: Ensure nftables default deny firewall policy. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Base chain…wazuh-sca
eaf9c9261496d7dfSCA Check 35631: Ensure nftables service is enabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] The nftables service…wazuh-sca
300302aa1b34caacSCA Check 35632: Ensure nftables rules are permanent. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] nftables is a…wazuh-sca
c2a655af2acd4ebcSCA Check 35633: Ensure iptables packages are installed. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] iptables is a…wazuh-sca
63b6cd8dc416ec5aSCA Check 35634: Ensure nftables is not in use with iptables. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] nftables is a…wazuh-sca
166c8c8a7ae768f2SCA Check 35635: Ensure ufw is not in use with iptables. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Uncomplicated…wazuh-sca
7c3018fdade642a8SCA Check 35636: Ensure iptables default deny firewall policy. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] A default…wazuh-sca
df7fc22980a1bd77SCA Check 35637: Ensure iptables loopback traffic is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Configure…wazuh-sca
589a64e78343d6d2SCA Check 35638: Ensure ip6tables default deny firewall policy. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] A default…wazuh-sca
cc22a78d74990805SCA Check 35639: Ensure ip6tables loopback traffic is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0001', 'TA0011'] Techniques: ['T1046', 'T1090', 'T1133'] Configure…wazuh-sca
99ec54ea2feeb83dSCA Check 35640: Ensure permissions on /etc/ssh/sshd_config are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041',…wazuh-sca
3ff2dfb3d2bf0deaSCA Check 35641: Ensure permissions on SSH private host key files are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025',…wazuh-sca
58cc56f30e94a60bSCA Check 35642: Ensure permissions on SSH public host key files are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025',…wazuh-sca
f8c5a97aafd65fc3SCA Check 35643: Ensure sshd access is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567', 'T1573'] There…wazuh-sca
6427066424518cebSCA Check 35644: Ensure sshd Banner is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The Banner parameter specifies a…wazuh-sca
5bb04df3444f2649SCA Check 35645: Ensure sshd Ciphers are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567', 'T1573'] This…wazuh-sca
cf48c2c70406ed57SCA Check 35646: Ensure sshd ClientAliveInterval and ClientAliveCountMax are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046',…wazuh-sca
f11accea2f6bc11cSCA Check 35647: Ensure sshd DisableForwarding is enabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] The DisableForwarding parameter…wazuh-sca
f2367c97c3117a58SCA Check 35648: Ensure sshd GSSAPIAuthentication is disabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136',…wazuh-sca
540f261f038128a5SCA Check 35649: Ensure sshd HostbasedAuthentication is disabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The…wazuh-sca
849d5fb33f572cf1SCA Check 35650: Ensure sshd IgnoreRhosts is enabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] The…wazuh-sca
f5a66d99f0904102SCA Check 35651: Ensure sshd KexAlgorithms is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567', 'T1573']…wazuh-sca
7be38f733f0400fdSCA Check 35652: Ensure sshd LoginGraceTime is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The LoginGraceTime…wazuh-sca
3bdd60f8245d482fSCA Check 35653: Ensure sshd LogLevel is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] SSH…wazuh-sca
69691ebdcf18c3daSCA Check 35654: Ensure sshd MACs are configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567', 'T1573'] This…wazuh-sca
cb529f2bb6099a54SCA Check 35655: Ensure sshd MaxAuthTries is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040']…wazuh-sca
81ee019d6d3d56dfSCA Check 35656: Ensure sshd MaxSessions is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The MaxSessions parameter…wazuh-sca
8ad8d4da67c5a65dSCA Check 35657: Ensure sshd MaxStartups is configured. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The MaxStartups parameter…wazuh-sca
0fa4783356fc94c0SCA Check 35658: Ensure sshd PermitEmptyPasswords is disabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136',…wazuh-sca
121e80da956b531aSCA Check 35659: Ensure sshd PermitRootLogin is disabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556']…wazuh-sca
5b7cbcd68edaa9c4SCA Check 35660: Ensure sshd PermitUserEnvironment is disabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] The…wazuh-sca
5d7f70c859aae134SCA Check 35661: Ensure sshd UsePAM is enabled. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] The UsePAM…wazuh-sca
68b754e80a121a0aSCA Check 35662: Ensure sudo is installed. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] sudo allows a…wazuh-sca
d3377fbb13dfa63dSCA Check 35663: Ensure sudo commands use pty. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] sudo can be…wazuh-sca
7b7192cd22f22c0bSCA Check 35664: Ensure sudo log file exists. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] sudo can…wazuh-sca
de185208a3d08148SCA Check 35665: Ensure users must provide password for privilege escalation. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098',…wazuh-sca
1b1778dfe4585ebdSCA Check 35666: Ensure re-authentication for privilege escalation is not disabled globally. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078',…wazuh-sca
b761ccae2aa83b2bSCA Check 35667: Ensure sudo authentication timeout is configured correctly. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
6a993eada2c26d5eSCA Check 35668: Ensure access to the su command is restricted. Policy: CIS Ubuntu Linux 24.04 LTS Benchmark v1.0.0. Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567',…wazuh-sca