National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 499 matching records. Displaying matches 1 through 20.


Name (Version) Target Product Category Authority Last Modified Resources
USGCB Windows Vista (3.0.x.1) Microsoft Windows Vista Operating System USGCB/TIS 04/28/2015 SCAP 1.2 Content - USGCB Windows Vista using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows XP (3.0.x.1) Microsoft Windows XP Pro SP2
Microsoft Windows XP Service Pack 3
Operating System USGCB/TIS 04/28/2015 SCAP 1.2 Content - USGCB Windows XP using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows Vista Firewall (2.1.x.1) Microsoft Windows Vista Operating System USGCB/TIS 04/28/2015 SCAP 1.2 Content - USGCB Windows Vista Firewall using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows XP Firewall (2.1.x.1) Microsoft Windows XP Pro Service Pack 3
Microsoft Windows XP Pro Service Pack 2
Operating System USGCB/TIS 04/28/2015 SCAP 1.2 Content - USGCB Windows XP Firewall SCAP content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows XP Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Internet Explorer 7 (2.1.x.1) Microsoft Internet Explorer 7 Web Browser USGCB/TIS 01/25/2016 SCAP 1.2 Content - USGCB Internet Explorer 7 SCAP Content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB IE7 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows 7 (2.0.x.1) Microsoft Windows 7
Microsoft Windows 7 x86 (32-bit)
Microsoft Windows 7 x64 (64-bit)
Operating System USGCB/TIS 01/25/2016 SCAP 1.2 Content - Windows 7 Oval 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows 7 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows 7 Firewall (1.3.x.1) Microsoft Windows 7
Microsoft Windows 7 32-bit (X86)
Microsoft Windows 7 64-bit (X64)
Operating System USGCB/TIS 04/28/2015 SCAP 1.2 Content - Windows 7 Firewall Oval 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows 7 Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Internet Explorer 8 (1.3.x.1) Microsoft Internet Explorer 8 Web Browser USGCB/TIS 04/28/2015 SCAP 1.2 Content - USGCB Internet Explorer 8 SCAP Content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB IE8 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop (1.2.5.0) Red Hat Enterprise Linux 5 Operating System USGCB/TIS 04/30/2015 SCAP 1.1 Content - USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop - Tested By: USGCB/TIS
Puppet Module - RHEL 5 Puppet Module
Reference Link - Kickstart file
Prose - USGCB-RHEL5-Desktop-Issues-Version-1.0.5.0
Prose - USGCB-RHEL5-Desktop-Settings-Version-1.0.5.0
Security Baselines for Red Hat Enterprise Linux 7.x (v0.1.33-5) Red Hat Enterprise Linux 7.0
Red Hat Enterprise Linux 7.1
Red Hat Enterprise Linux 7.2
Red Hat Enterprise Linux 7.3
Red Hat Enterprise Linux 7.4
Red Hat 11/13/2017 SCAP 1.2 Content - SCAP Security Guide v0.1.33 - SCAP 1.2 with OVAL 5.10
SCAP 1.2 Content - [RECOMMENDED] SCAP Security Guide v0.1.33 - SCAP 1.2 with OVAL 5.11
Adobe Acrobat Reader DC Classic Track (Version 1, Release 2) Adobe Acrobat Reader Desktop Application Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Adobe Acrobat Reader Document Cloud (DC) Classic Track STIG Benchmark - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Adobe Acrobat Reader DC Classic Track STIG - Ver 1, Rel 2
APT-Suspicious file names and file locations (v0.4) Microsoft Windows XP
Microsoft Windows 7
Operating System CyberESI 05/05/2017 SCAP 1.2 Content - APT - Suspicious file names and file locations
Google Chrome Browser STIG for Windows (Version 1, Release 11) Google Chrome 24.0.1272.0
Google Chrome 23.0.1271.0
Web Browser Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Google Chrome for Windows STIG Benchmark - Ver 1, Rel 6
Standalone XCCDF 1.1.4 - Google Chrome Browser STIG - Ver 1, Rel 11
Internet Explorer 11 STIG (Version 1, Release 14) Microsoft Internet Explorer 11 Web Browser Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Internet Explorer 11 STIG Benchmark - Ver 1, Rel 11
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 11 STIG - Ver 1, Rel 14
Windows 10 STIG (Version 1, Release 12) Microsoft Windows 10 Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 10 STIG Benchmark - Ver 1, Rel 10
Standalone XCCDF 1.1.4 - Microsoft Windows 10 STIG - Ver 1, Rel 12
Windows 2008 STIG (Version 6, Release 39) Microsoft Windows Defender
Microsoft Internet Explorer
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Malware
Web Browser
Desktop Application
Operating System
Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 41
SCAP 1.2 Content - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 41
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 DC STIG - Ver 6, Rel 39
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 MS STIG - Ver 6, Rel 39
Microsoft Windows 2008 R2 STIG (Version 1, Release 25) Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 r2 Itanium
Microsoft Windows Server 2008 r2 x64
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2008 r2 Service Pack 1 Itanium
Microsoft Windows Server 2008 r2 x64 Service Pack 1
Operating System Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 27
SCAP 1.2 Content - Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 28
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 R2 DC STIG - Ver 1, Rel 25
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 R2 MS STIG - Ver 1, Rel 25
Windows Server 2012 / 2012 R2 STIG (Version 2, Release 11) Microsoft Windows Server 2012/2012 R2 Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 2012 and 2012 R2 DC STIG Benchmark - Ver 2, Rel 11
SCAP 1.2 Content - Microsoft Windows 2012 and 2012 R2 MS STIG Benchmark - Ver 2, Rel 11
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 DC STIG - Ver 2, Rel 11
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 MS STIG - Ver 2, Rel 11
Microsoft Windows 7 (Version 1, Release 29) Microsoft Windows 7 Operating System Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 35
Standalone XCCDF 1.1.4 - Microsoft Windows 7 STIG - Ver 1, Rel 29
Prose - Microsoft Windows 7 STIG Release Memo
Windows 8/8.1 STIG (Version 1, Release 20) Microsoft Windows 8 x86 (32-bit)
Microsoft Windows 8 x64 (64-bit)
Microsoft Windows 8.1 (x64)
Microsoft Windows 8.1 (x86)
Operating System Defense Information Systems Agency 02/18/2018 SCAP 1.2 Content - Microsoft Windows 8/8.1 STIG Benchmark - Ver 1, Rel 21
Standalone XCCDF 1.1.4 - Microsoft Windows 8/8.1 STIG - Ver 1, Rel 20
* This checklist is still undergoing review for inclusion into the NCP.