CyberStrikeus

Adversaries may attempt to access cached domain credentials used to allow authentication to occur in the event a domain controller is unavailable.

Communicate requirements to all third parties who will provide commercial software components to the organization for reuse by the organization’s o...

Implement the following additional monitoring of individuals during [organization-defined]: [organization-defined].

Ensure that the seccomp profile is set to docker/default in your pod definitions (Manual)

Ensure that the --service-account-private-key-file argument is set as appropriate (Manual)

Conduct an organizational assessment of risk prior to the acquisition or outsourcing of information security services;

Adversaries may compromise access to third-party web services that can be used during targeting.

[Legacy] Ensure that VHDs are Encrypted

Ensure separate partition exists for /var

Restrict access to the web administration application (Automated)

Ensure 'Owners can manage group membership requests in My Groups' is set to 'No'

Ensure events that modify user/group information are collected

Ensure clusters are created with Private Nodes (Automated)

Ensure to Regularly Patch Systems

Ensure local login warning banner is configured properly

Do not run applications as privileged

Set a nondeterministic Shutdown command value