Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
359 rules foundof 11,219Page 3 of 15
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-AZURE-DB-2.5 | Ensure that 'System Assigned Managed Identity' is set to 'On'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-DB-3.3 | Ensure that 'disableLocalAuth' is set to 'true'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-DB-4.2 | Ensure Data Factory is using Managed Identitiesazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-DB-9.6 | Ensure that 'Data encryption' is set to 'On' on a SQL Databaseazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-DEFENDER-VIRTUALMACHINES | Ensure Microsoft Defender for Servers is set to Onazure · Level 2 | azure | High | 2 | Automated |
| TMA-AZURE-KEYVAULT-PURGE-PROTECTION | Ensure Key Vaults have soft delete and purge protection enabledazure · Level 1 | azure | High | 1 | Automated |
| TMA-AZURE-NSG-NO-RDP-FROM-INTERNET | Ensure RDP access from the Internet is restricted in network security groupsazure · Level 1 | azure | High | 1 | Automated |
| TMA-AZURE-NSG-NO-SSH-FROM-INTERNET | Ensure SSH access from the Internet is restricted in network security groupsazure · Level 1 | azure | High | 1 | Automated |
| TMA-AZURE-SQL-TDE | Ensure Transparent Data Encryption is enabled on every Azure SQL databaseazure · Level 1 | azure | High | 1 | Automated |
| TMA-AZURE-STORAGE-7.1.1 | Ensure root squash for NFS file shares is configured (Microsoft.FileShares)azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-7.1.2 | Ensure encryption in transit is required for File Shares (Microsoft.FileShares)azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-7.2.2 | Ensure 'SMB channel encryption' is set to 'AES-256-GCM' or higher for SMB file shares (Classic File Shares)azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-7.2.4 | Ensure root squash for NFS file shares is configured (Classic File Shares)azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-10.1 | Ensure 'Allowed Protocols' for shared access signature (SAS) tokens is set to 'HTTPS Only'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-10.4 | Ensure stored access policies (SAP) are used when generating shared access signature (SAS) tokensazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-15.1 | Ensure 'Allowed Protocols' for shared access signature (SAS) tokens is set to 'HTTPS Only'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-15.3 | Ensure stored access policies (SAP) are used when generating shared access signature (SAS) tokensazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-16.1.2 | Ensure 'Allowed Protocols' for shared access signature (SAS) tokens is set to 'HTTPS Only'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-16.4 | Ensure that 'Secure transfer required' is set to 'Enabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-16.13 | Ensure that 'Allow Blob Anonymous Access' is set to 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-16.14 | Ensure Azure Resource Manager Delete locks are applied to Azure Storage Accountsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-17.2 | Ensure stored access policies (SAP) are used when generating shared access signature (SAS) tokensazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-17.3 | Ensure Storage Explorer is using the latest versionazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-STORAGE-NO-PUBLIC-BLOB | Ensure anonymous blob access is disabled on storage accountsazure · Level 1 | azure | High | 1 | Automated |
| TMA-AZURE-STORAGE-SECURE-TRANSFER | Ensure secure transfer required is enabled on storage accountsazure · Level 1 | azure | High | 1 | Automated |