Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
359 rules foundof 8,597Page 1 of 15
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-AZURE-2.1.2 | Ensure that Network Security Groups are Configured for Databricks Subnetsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-2.1.6 | Ensure that Usage is Restricted and Expiry is Enforced for Databricks Personal Access Tokensazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-5.1.2 | Ensure that 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-5.1.3 | Ensure that 'multifactor authentication' is 'enabled' For All Usersazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-5.1.4 | Ensure that 'Allow users to remember multifactor authentication on devices they trust' is Disabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-5.3.3 | Ensure That Use of the 'User Access Administrator' Role is Restrictedazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-5.7 | Ensure there are between 2 and 3 Subscription Ownersazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-6.1.1.1 | Ensure that a 'Diagnostic Setting' Exists for Subscription Activity Logsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-6.1.4 | Ensure that Azure Monitor Resource Logging is Enabled for All Services that Support itazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.1 | Ensure that RDP Access from the Internet is Evaluated and Restrictedazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.2 | Ensure that SSH Access from the Internet is Evaluated and Restrictedazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.3 | Ensure that UDP Port Access from the Internet is Evaluated and Restrictedazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.4 | Ensure that HTTP(S) Access from the Internet is Evaluated and Restrictedazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.7 | Ensure that Public IP Addresses are Evaluated on a Periodic Basisazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.11 | Ensure Subnets Are Associated with Network Security Groupsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-7.12 | Ensure the SSL Policy's 'Min protocol version' is Set to 'TLSv1_2' or Higher on Azure Application Gatewayazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-8.1.11 | Ensure that non-deprecated Microsoft Cloud Security Benchmark policies are not set to 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-8.3.7 | Ensure Public Network Access is Disabledazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-9.1.3 | Ensure 'SMB channel encryption' is Set to 'AES-256-GCM' or Higher for SMB file sharesazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-9.3.2.2 | Ensure that 'Public Network Access' is 'Disabled' for Storage Accountsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-9.3.4 | Ensure that 'Secure transfer required' is Set to 'Enabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-9.3.8 | Ensure that 'Allow Blob Anonymous Access' is Set to 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-9.3.9 | Ensure Azure Resource Manager Delete Locks are Applied to Azure Storage Accountsazure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.1.5 | Ensure 'FTP State' is set to 'FTPS only' or 'Disabled'azure · Level 1 | azure | High | 1 | Manual review |
| TMA-AZURE-COMPUTE-2.1.7 | Ensure 'HTTPS Only' is set to 'On'azure · Level 1 | azure | High | 1 | Manual review |