Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
97 rules foundof 11,219Page 2 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-MSSQL-2.4 | Ensure 'Database Mail XPs' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.6 | Ensure 'Remote Access' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.7 | Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.8 | Ensure 'Scan For Startup Procs' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.14 | Ensure the 'sa' Login Account has been renamedmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.16 | Ensure no login exists with the name 'sa'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.1 | Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.2 | Ensure CONNECT permissions on the 'guest' user is Revoked within all SQL Server databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.3 | Ensure 'Orphaned Users' are Dropped From SQL Server Databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.4 | Ensure SQL Authentication is not used in contained databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.7 | Ensure the SQL Server's Full-Text Service Account is Not an Administratormssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL-3.8 | Ensure only the default permissions specified by Microsoft are granted to the public server rolemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.9 | Ensure Windows BUILTIN groups are not SQL Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.10 | Ensure Windows local groups are not SQL Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.11 | Ensure the public role in the msdb database is not granted access to SQL Agent proxiesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.13 | Ensure no admin role membership in MSDB databasemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-3.15 | Ensure access to 'sp_invoke_external_rest_endpoint' is limited to trusted accounts onlymssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL-4.1 | Ensure 'MUST_CHANGE' Option is set to 'ON' for All SQL Authenticated Loginsmssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL-4.2 | Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin Rolemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-4.3 | Ensure 'CHECK_POLICY' Option is set to 'ON' for All SQL Authenticated Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-5.2 | Ensure 'Default Trace Enabled' Server Configuration Option is set to '1'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-5.3 | Ensure 'Login Auditing' is set to 'failed logins'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-6.1 | Ensure Database and Application User Input is Sanitizedmssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL-6.2 | Ensure 'CLR Assembly Permission Set' is set to 'SAFE_ACCESS' for All CLR Assembliesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-7.1 | Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databasesmssql · Level 1 | mssql | Medium | 1 | Automated |