Claude Skills by CyberStrikeus

Ensure pam_unix does not include nullok

Ensure pam_unix does not include remember

Ensure pam_unix includes a strong password hashing algorithm

Ensure pam_unix includes use_authtok

Ensure password expiration is configured

Ensure minimum password days is configured

Ensure password expiration warning days is configured

Ensure strong password hashing algorithm is configured

Ensure inactive password lock is configured

Ensure all users last password change date is in the past

Ensure root is the only UID 0 account

Ensure root is the only GID 0 account

Ensure group root is the only GID 0 group

Ensure root account access is controlled

Ensure root path integrity

Ensure root user umask is configured

Ensure system accounts do not have a valid login shell

Ensure accounts without a valid login shell are locked

Ensure nologin is not listed in /etc/shells

Ensure default user shell timeout is configured

Ensure default user umask is configured

Ensure AIDE is installed

Ensure filesystem integrity is regularly checked

Ensure cryptographic mechanisms are used to protect the integrity of audit tools

Ensure journald service is enabled and active

Ensure journald log file access is configured

Ensure journald log file rotation is configured

Ensure systemd-journal-remote is installed

Ensure systemd-journal-upload authentication is configured

Ensure systemd-journal-upload is enabled and active

Ensure systemd-journal-remote service is not in use

Ensure journald ForwardToSyslog is disabled

Ensure journald Compress is configured

Ensure journald Storage is configured

Ensure rsyslog service is enabled and active

Ensure rsyslog is installed

Ensure journald is configured to send logs to rsyslog

Ensure rsyslog log file creation mode is configured

Ensure rsyslog logging is configured

Ensure rsyslog is configured to send logs to a remote log host

Ensure rsyslog is not configured to receive logs from a remote client

Ensure logrotate is configured

Ensure access to all logfiles has been configured

Ensure auditd packages are installed

Ensure auditd service is enabled and active

Ensure auditing for processes that start prior to auditd is enabled

Ensure audit_backlog_limit is configured

Ensure audit log storage size is configured

Ensure audit logs are not automatically deleted

Ensure system is disabled when audit logs are full