Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
97 rules foundof 8,597Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-MSSQL-1.1 | Ensure Latest SQL Server Cumulative and Security Updates are Installedmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL-2.5 | Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL-2.9 | Ensure 'Trustworthy' Database Property is set to 'Off'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL-2.13 | Ensure the 'sa' Login Account is set to 'Disabled'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL-2.17 | Ensure 'clr strict security' Server Configuration Option is set to '1'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL-3.5 | Ensure the SQL Server's MSSQL Service Account is Not an Administratormssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL-3.6 | Ensure the SQL Server's SQLAgent Service Account is Not an Administratormssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL-3.12 | Ensure the 'SYSADMIN' Role is Limited to Administrative or Built-in Accountsmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL-3.14 | Ensure 'Control Server' permission is not grantedmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL-5.4 | Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL-7.4 | Ensure Network Encryption is Configured and Enabledmssql · Level 2 | mssql | High | 2 | Automated |
| TMA-MSSQL2022-1.1 | Ensure Latest SQL Server Cumulative and Security Updates are Installedmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL2022-2.5 | Ensure 'Ole Automation Procedures' Server Configuration Option is set to '0'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL2022-2.9 | Ensure 'Trustworthy' Database Property is set to 'Off'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL2022-2.13 | Ensure the 'sa' Login Account is set to 'Disabled'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL2022-2.17 | Ensure 'clr strict security' Server Configuration Option is set to '1'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL2022-3.5 | Ensure the SQL Server’s MSSQL Service Account is Not an Administratormssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL2022-3.6 | Ensure the SQL Server’s SQLAgent Service Account is Not an Administratormssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL2022-3.12 | Ensure the 'SYSADMIN' Role is Limited to Administrative or Built-in Accountsmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL2022-3.14 | Ensure 'Control Server' permission is not grantedmssql · Level 1 | mssql | High | 1 | Manual review |
| TMA-MSSQL2022-5.4 | Ensure 'SQL Server Audit' is set to capture both 'failed' and 'successful logins'mssql · Level 1 | mssql | High | 1 | Automated |
| TMA-MSSQL2022-7.4 | Ensure Network Encryption is Configured and Enabledmssql · Level 2 | mssql | High | 2 | Automated |
| TMA-MSSQL-2.1 | Ensure 'Ad Hoc Distributed Queries' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.2 | Ensure 'CLR Enabled' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |
| TMA-MSSQL-2.3 | Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0'mssql · Level 1 | mssql | Medium | 1 | Automated |