Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
97 rules foundof 11,219Page 3 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-MSSQL-7.2 | Ensure Asymmetric Key Size is set to 'greater than or equal to 2048' in non-system databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-7.3 | Ensure Database Backups are Encryptedmssql · Level 2 | mssql | Medium | 2 | Automated |
| TMA-MSSQL-7.5 | Ensure Databases are Encrypted with TDEmssql · Level 2 | mssql | Medium | 2 | Automated |
| TMA-MSSQL2022-2.1 | Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.2 | Ensure 'CLR Enabled' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.3 | Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.4 | Ensure 'Database Mail XPs' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.6 | Ensure 'Remote Access' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.7 | Ensure 'Remote Admin Connections' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.8 | Ensure 'Scan For Startup Procs' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.14 | Ensure the 'sa' Login Account has been renamedmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-2.16 | Ensure no login exists with the name 'sa'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.1 | Ensure 'Server Authentication' Property is set to 'Windows Authentication Mode'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.2 | Ensure CONNECT permissions on the 'guest' user is Revoked within all SQL Server databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.3 | Ensure 'Orphaned Users' are Dropped From SQL Server Databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.4 | Ensure SQL Authentication is not used in contained databasesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.7 | Ensure the SQL Server’s Full-Text Service Account is Not an Administratormssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL2022-3.8 | Ensure only the default permissions specified by Microsoft are granted to the public server rolemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.9 | Ensure Windows BUILTIN groups are not SQL Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.10 | Ensure Windows local groups are not SQL Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.11 | Ensure the public role in the msdb database is not granted access to SQL Agent proxiesmssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-3.13 | Ensure no admin role membership in MSDB databasemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-4.1 | Ensure 'MUST_CHANGE' Option is set to 'ON' for All SQL Authenticated Loginsmssql · Level 1 | mssql | Medium | 1 | Manual review |
| TMA-MSSQL2022-4.2 | Ensure 'CHECK_EXPIRATION' Option is set to 'ON' for All SQL Authenticated Logins Within the Sysadmin Rolemssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL2022-4.3 | Ensure 'CHECK_POLICY' Option is set to 'ON' for All SQL Authenticated Loginsmssql · Level 1 | mssql | Medium | 1 | Automated |