Security Checklists for Hardening / Auditing

A seguir você encontra uma lista de checklists de segurança para diferentes plataformas. Estes checklists são compilados a partir das melhores práticas observadas por especialistas do SANS Institute e do CIS (Center For Internet Security) e deve ser usado por profissionais de TI para os procedimentos de harnening (blindagem de segurança) de sistemas operacionais, dispositivos móveis, redes sem fio e dispositivos de conectividade.

Faça bom uso dos checklists na configuração de ambientes corporativos mais seguros!

• Apple iPhone Resources
  • CIS iPhone 2.2.1 Benchmark v1.0.0

• Microsoft Exchange Server Resources
  • CIS Exchange Server 2007 Benchmark v1.0.0
  • CIS Exchange Server 2003 Benchmark v1.0.0

• Microsoft Windows Resources
  • CIS Windows 2000 Level 1 Benchmark v1.2.1
  • CIS Windows NT Level 1 Benchmark v1.0.5

• Microsoft SQL Server Resources
  • CIS SQL Server 2005 Benchmark v1.1.1
  • CIS SQL Server 2005 Benchmark v1.1.0
  • CIS SQL Server 2000 Benchmark v1.0.0

• Linux Resources
  • CIS Red Hat Enterprise Linux 4 Benchmark v1.0.5
  • CIS Red Hat Enterprise Linux 4 Benchmark v1.0.5 Bundle w/ Bastille Configuration
  • CIS Red Hat Enterprise Linux 5 Benchmark v1.1.0
  • CIS SUSE Linux Enterprise Server 9/10 Benchmark v2.0.0
  • CIS Slackware Linux 10.2 Benchmark v1.1.0
  • CIS CIS Debian Benchmark v1.0.0

• Microsoft Windows 2000 Resources
  • CIS Windows 2000 Professional Level 2 Benchmark v2.2.1

• Microsoft Windows 2003 Resources
  • CIS Windows 2003 Server Domain Controller Benchmark v2.0.0
  • CIS Windows 2003 Server Member Server Benchmark v2.0.0

• FreeRadius Resources
  • CIS FreeRADIUS 1.1.3 Benchmark v1.0.0

• Microsoft Windows XP Resources
  • CIS Windows XP Professional Benchmark v2.0.1

• ISC BIND Resources
  • CIS BIND Benchmark v1.0.0.

• Cisco Resources
  • CIS Cisco Router Audit Tool v2.2.0 Installer for Windows.
  • CIS Cisco Router Audit Tool v2.2.0 ZIP archive for Windows
  • CIS Cisco Router Audit Tool v2.2.0 archive for UNIX
  • Note: The IOS checks performed by RAT correspond with v2.1.0 of the CIS IOS Benchmark. The current version of the benchmark is v2.2.0.
  • CIS Cisco IOS Benchmark v2.2.0
  • CIS Cisco IOS Benchmark v2.1.0
  • CIS Cisco IOS Questionnaire v2.1.0
  • NSA Router Security Configuration Guide
  • CIS Cisco ASA, FWSM, and PIX Benchmark v2.0

• Microsoft IIS Resources
  • CIS IIS 5.0/6.0 Benchmark v1.0.0

• Apache Web Server Resources
  • CIS Apache Web Server 1.3.37/2.0.59/2.2.4 Benchmark v2.2.0
  • CIS Apache Web Server 1.3.37/2.0.59/2.2.4 Benchmark v2.1.0
  • CIS Apache Web Server Scoring Tool for the 2.1.0 Benchmark

• CheckPoint Firewall Resources
  • CIS Checkpoint Firewall Benchmark v1.0.0

• Microsoft Windows 2000 Server Resources
  • CIS Windows 2000 Server Level 2 Benchmark v2.2.1

• Wireless Devices Resources
  • CIS Wireless Networks Benchmark v1.0.0
  • CIS Wireless Networks Cisco Hardware addendum
  • CIS Wireless Networks Linksys Hardware addendum
  • CIS Wireless Networks DLink Hardware addendum
  • CIS Wireless Networks Apple Hardware addendum
  • CIS Wireless Networks Assessment document
  • CIS Wireless Networks Real World Assessment Example document

• HP-UX Resources
  • CIS HP-UX 11i Benchmark v1.4.2
  • CIS HP-UX 11i Scoring Tool Archive for the 1.4.2 Benchmark
  • hp_checkperms Utility for the 1.4.2 Benchmark

• Oracle Database Resources
  • CIS Oracle Database 8i Benchmark v1.2.0
  • CIS Oracle Database 8i Scoring Tool for Windows - View Readme
  • CIS Oracle Database 8i Scoring Tool for Linux - View Readme
  • CIS Oracle Database 8i Scoring Tool for Sparc Solaris - View Readme
  • CIS Oracle Database 9i/10g Benchmark v2.0.0
  • CIS Oracle Database 9i/10g Benchmark v2.0.1
  • CIS Oracle Database 11g Benchmark v1.0.0
  • CIS Oracle Database 11g Benchmark v1.0.1

• OpenLDAP Resources
  • CIS OpenLDAP 2.3.39/2.4.6 Benchmark v1.2.0

• MySQL Database Resources
  • CIS MySQL 4.1/5.0/5.1 Benchmark v1.0.2
  • CIS MySQL 4.1/5.0/5.1 Benchmark v1.0.1
  • CIS MySQL 4.1/5.0/5.1 Benchmark v1.0.0

• FreeBSD Resources
  • CIS FreeBSD 4.10 Benchmark v1.0.5
  • CIS FreeBSD Scoring Tool for the 1.0.5 Benchmark

• Apple Mac OSX Leopard Resources
  • CIS Mac OSX 10.5 (Leopard) Benchmark v1.0.0

• Sun Solaris Resources
  • CIS Solaris Benchmark for Solaris 10 11/06 and 8/07 .tar.gz containing the PDF and appendix)
  • CIS Solaris 10,11/06,8/07 Benchmark v4.0.0 and appendix archive
  • CIS Solaris 10,11/06,8/07 Benchmark v4.0.0 and backup archive
  • CIS Solaris 2.5.1-9 Benchmark v1.3.0
  • CIS Solaris 10,11/06,8/07 Benchmark v2.1.3
  • CIS Solaris 2.5.1-9 Scoring Tool for the 1.3.0 Benchmark
  • Backup shell script (do-backup.sh) referenced in the Solaris Benchmark

• Novell Resources
  • CIS Novell eDirectory 8.7 Benchmark v1.0.0
  • CIS Novell NetWare Benchmark v1.0.0

• Apple Mac OSX Tiger Resources
  • CIS Mac OSX 10.4 (Tiger) Benchmark v2.0.0

• Xen Hypervisor Resources
  • CIS Xen 3.2 Benchmark v1.0.0

• IBM AIX Resources
  • CIS AIX 4.3.2/4.3.3/5L/5.1 Benchmark v1.0.1
  • Backup shell script (do-backup.sh) referenced in the AIX Benchmark