🦚 Peacock Unified

🔗 API Bindings

API → UI component mappings · 90,813 documents

IDDocumentSource
7d7b927af7c40f29SCA Check 19131: Ensure sudo commands use pty. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] sudo can be…wazuh-sca
2471347f47ae556fSCA Check 19132: Ensure sudo log file exists. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] sudo can use…wazuh-sca
516bad3a00ee602eSCA Check 19133: Ensure users must provide password for privilege escalation. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
61efdbeca784361dSCA Check 19134: Ensure re-authentication for privilege escalation is not disabled globally. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078',…wazuh-sca
a066ba22602b3d97SCA Check 19135: Ensure sudo authentication timeout is configured correctly. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
04c441589a59c126SCA Check 19136: Ensure access to the su command is restricted. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567',…wazuh-sca
09b16571bcf51a3cSCA Check 19137: Ensure password creation requirements are configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
61134a5e8b8ec2d5SCA Check 19138: Ensure lockout for failed password attempts is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1134', 'T1197', 'T1538',…wazuh-sca
125c7f615b4a7f5aSCA Check 19139: Ensure password reuse is limited. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136', 'T1556'] The…wazuh-sca
8c21e57af148d810SCA Check 19140: Ensure strong password hashing algorithm is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041',…wazuh-sca
41f0a678e3ae45d5SCA Check 19141: Ensure minimum days between password changes is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
2bcf93bb45e83135SCA Check 19142: Ensure password expiration is 365 days or less. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136',…wazuh-sca
6f7856d3aba9e6cdSCA Check 19143: Ensure password expiration warning days is 7 or more. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110',…wazuh-sca
af92ad0b0f13ee85SCA Check 19144: Ensure inactive password lock is 30 days or less. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078', 'T1098', 'T1110', 'T1136',…wazuh-sca
4cb0a96074f5088bSCA Check 19145: Ensure the number of changed characters in a new password is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078',…wazuh-sca
0dd35f412456d8b0SCA Check 19146: Ensure preventing the use of dictionary words for passwords is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078',…wazuh-sca
1b766fbd36323fc3SCA Check 19147: Ensure default group for the root account is GID 0. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041', 'T1567',…wazuh-sca
c349a6973b163047SCA Check 19148: Ensure nologin is not listed in /etc/shells. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] /etc/shells is a text…wazuh-sca
74a296aea299caaaSCA Check 19149: Ensure maximum number of same consecutive characters in a password is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques:…wazuh-sca
1601afecb7b428cdSCA Check 19150: Ensure systemd-journal-remote is installed. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
387d9dcc439b09f5SCA Check 19151: Ensure systemd-journal-remote is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
cdfdccf1670556aeSCA Check 19152: Ensure systemd-journal-remote is enabled. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040']…wazuh-sca
6d116b7038934595SCA Check 19153: Ensure journald is not configured to receive logs from a remote client. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564']…wazuh-sca
2c67a6ec93cadb95SCA Check 19154: Ensure journald service is enabled. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040']…wazuh-sca
f8a16f7b786a7a34SCA Check 19155: Ensure journald is configured to compress large log files. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
cc1d3aa0bb7c0facSCA Check 19156: Ensure journald is configured to write logfiles to persistent disk. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562',…wazuh-sca
04dc91cccaa673b6SCA Check 19157: Ensure journald is not configured to send logs to rsyslog. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
006539be99e16c08SCA Check 19158: Ensure journald log rotation is configured per site policy. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
34b671118f1d4534SCA Check 19159: Ensure rsyslog is installed. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] The rsyslog…wazuh-sca
7e73f867ffa620c5SCA Check 19160: Ensure rsyslog service is enabled. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] Once…wazuh-sca
4c725a3db5cfb707SCA Check 19161: Ensure journald is configured to send logs to rsyslog. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
c20fc9ac5e7beaafSCA Check 19162: Ensure rsyslog default file permissions are configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0009', 'TA0010'] Techniques: ['T1005', 'T1025', 'T1041',…wazuh-sca
dfa39a35efa24ba8SCA Check 19163: Ensure rsyslog is not configured to receive logs from a remote client. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] RSyslog…wazuh-sca
0f77a3a06d74e883SCA Check 19164: Ensure auditd is installed. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040'] auditd is the…wazuh-sca
cbc6826e7f1151aaSCA Check 19165: Ensure auditd service is enabled and active. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
ca003a7c66a925e3SCA Check 19166: Ensure auditing for processes that start prior to auditd is enabled. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562',…wazuh-sca
422451b8902d8227SCA Check 19167: Ensure audit_backlog_limit is sufficient. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059', 'T1040']…wazuh-sca
e3a9a09bfb1ed6deSCA Check 19168: Ensure audit log storage size is configured. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
8a08a8fe22f72c73SCA Check 19169: Ensure audit logs are not automatically deleted. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
c7f1525c7a51713bSCA Check 19170: Ensure system is disabled when audit logs are full. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
b72b5b3fc2191b94SCA Check 19171: Ensure changes to system administration scope (sudoers) is collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques:…wazuh-sca
b880cc309385f8f4SCA Check 19172: Ensure actions as another user are always logged. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
e60cc92dec213bf2SCA Check 19173: Ensure events that modify date and time information are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562',…wazuh-sca
a83a3add7c3f134fSCA Check 19174: Ensure events that modify the system's network environment are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques:…wazuh-sca
9712420110ef3f56SCA Check 19175: Ensure events that modify user/group information are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562',…wazuh-sca
3b5ca75a05776d12SCA Check 19176: Ensure successful file system mounts are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
894bb6b8bb3ee44dSCA Check 19177: Ensure session initiation information is collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
a24e42739b3b2426SCA Check 19178: Ensure login and logout events are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070', 'T1059',…wazuh-sca
1fc987bfcdaa87ceSCA Check 19179: Ensure file deletion events by users are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562', 'T1070',…wazuh-sca
91a937a02b0ac574SCA Check 19180: Ensure events that modify the system's Mandatory Access Controls are collected. Policy: CIS Ubuntu Linux 20.04 LTS Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007']…wazuh-sca