Device Checks
Kolide has over a hundred checks to help you measure and achieve your organization's compliance and security goals. Here are some of our most popular:
Achieve your security and compliance goals with ease.
You can use Device Checks to...
And many more checks...
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODI4LCJwdXIiOiJibG9iX2lkIn19--5575e995b45d19d0a08259d6271b51823a4d78a4/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/1password.png)
1Password
Disallow 1Password Emergency Kit to Be Stored in Plaintext
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzQ0LCJwdXIiOiJibG9iX2lkIn19--2f5ae16f61fc7f1172522548d61bfe329b093606/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/aws.png)
AWS Credentials
Require AWS Credentials File to Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzQ4LCJwdXIiOiJibG9iX2lkIn19--9885a08d15c748636dd7afd828837d5db63767e3/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/bios.png)
BIOS
Require CPU "No Execute" to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzUwLCJwdXIiOiJibG9iX2lkIn19--703edde88c514d5c261542a872557c2696f25d98/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/bios.png)
BIOS
Require Secure Boot to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzUxLCJwdXIiOiJibG9iX2lkIn19--dd68bad85ae780977718f113b4bd95b787647cf9/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/bitdefender.png)
BitDefender
Require BitDefender App to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzU0LCJwdXIiOiJibG9iX2lkIn19--483043aebeab52459c25331c5b114a0062f74c8f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/bitlocker.png)
BitLocker
Require Primary Disk to Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6ODY0MDc3LCJwdXIiOiJibG9iX2lkIn19--b741fe7f035c7ee1870e602d681446704b3efc0e/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/brave_browser.png)
Brave
Require Brave Browser to Be Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzU3LCJwdXIiOiJibG9iX2lkIn19--38899df514591938d61e3eed6274174e290e21eb/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/clamav.png)
ClamAV
Require ClamAV to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzU1LCJwdXIiOiJibG9iX2lkIn19--7d72bcb3c9677b8906a080a073c5325a2de1d156/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/clamav.png)
ClamAV
Require Clamscan Job to Be Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzU2LCJwdXIiOiJibG9iX2lkIn19--0efc4ef4e1030fd508a53b904fde944f9c23a6ce/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/clamav.png)
ClamAV
Require Freshclam Job to Be Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzU5LCJwdXIiOiJibG9iX2lkIn19--efcc6d8a81195202c40c97d3f11645cbf9cbc8c2/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/crowdstrike.png)
CrowdStrike
Require CrowdStrike Agent to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzYxLCJwdXIiOiJibG9iX2lkIn19--d78d18b688909b8dd5e45a20e70a3190c9c58c35/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/uptime.png)
Device Uptime
Require Device to Be Restarted Regularly
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzY0LCJwdXIiOiJibG9iX2lkIn19--6dbd0d0c8cde7021455638aed45b9c123c9a141a/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/disk-health.png)
Disk Health
Ensure Sufficient Free Space on Primary Disk
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzQ3LCJwdXIiOiJibG9iX2lkIn19--dfacb2c224b41d8675869cf4280f46692ce8de56/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/dropbox.png)
Dropbox
Dropbox App Should Not Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzY1LCJwdXIiOiJibG9iX2lkIn19--ecb620031cfbe70461e4d3f2575ca43448ea0e87/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/eset.png)
ESET
Require ESET Agent to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzY4LCJwdXIiOiJibG9iX2lkIn19--61d1c5fdbb80276fe3a74b7a8f4e024e25d0d235/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/f5.png)
F5 VPN
Require F5 VPN to Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzcyNzM0LCJwdXIiOiJibG9iX2lkIn19--06cea4a52618fea233c6ed7b3673a5615539f4be/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/firefox.png)
Firefox
Require Firefox Browser to Be Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzcxLCJwdXIiOiJibG9iX2lkIn19--8943a7e10e198ad4e6b421a38c0c0ee1718aefbf/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/gatekeeper.png)
Gatekeeper
Require macOS Gatekeeper to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6Nzg4NzMxLCJwdXIiOiJibG9iX2lkIn19--e64dc3f701c7b587bb414b256bacef624e72b55f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/github-copilot.png)
GitHub Copilot
GitHub Copilot Should Not Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzczLCJwdXIiOiJibG9iX2lkIn19--54a82af6e17e9ebf717ce8347a726f1d5d3c4c5d/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/github.png)
GitHub
Require GitHub 2FA Recovery Codes to Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6ODMzNDgxLCJwdXIiOiJibG9iX2lkIn19--0c3580b333aa73c1ca2fbb736b9b0122d6c34f64/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/google_chrome.png)
Google Chrome
Require Chrome Browser to Be Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzc3LCJwdXIiOiJibG9iX2lkIn19--4008ffb3cf9a0c2be5e2fb62b3d8e27541312457/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/google.png)
Google
Require GSuite 2FA Recovery Codes to Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzc5LCJwdXIiOiJibG9iX2lkIn19--7faacd262ff8aad01faa8e79ecf71995d21ed3d5/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/grammarly-browser-extension.png)
Grammarly
Grammarly Browser Extension Should Not Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzgwLCJwdXIiOiJibG9iX2lkIn19--6d76c1408b8acc6db318707e2be42bd7e6519d3f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/grammarly-app.png)
Grammarly
Grammarly Mac App Should Not Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA4Njg2MiwicHVyIjoiYmxvYl9pZCJ9fQ==--b71a1694430357b203f3603903822230faaff57a/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/homebrew.png)
Homebrew
Require Homebrew Packages To Be Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6Nzc0OTg4LCJwdXIiOiJibG9iX2lkIn19--929d56152a0f31fa995e944e077200dc458eed0e/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-icloud-relay.png)
iCloud
Require iCloud Private Relay to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzgxLCJwdXIiOiJibG9iX2lkIn19--b95dec60f74842f1ea16dff7701415af992e9606/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/iterm2.png)
iTerm2
Require Secure Keyboard Entry to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzgzLCJwdXIiOiJibG9iX2lkIn19--2c2adb0b89f38de8de6d42b3cd977048891f95a2/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/kolide-agent.png)
Kolide Agent
Require Kolide Agent to Have Full Disk Access Entitlement
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzg1LCJwdXIiOiJibG9iX2lkIn19--f51cac09028bde1a50d226d48a5f7271d9602394/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-disk-encryption.png)
Linux Disk Encryption
Require Disk To Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzg3LCJwdXIiOiJibG9iX2lkIn19--900691ca323074a95efd681bf0244c20a51d9587/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-firewall.png)
Linux Firewall
Ensure iptables Has Suitable Default Policy
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzg5LCJwdXIiOiJibG9iX2lkIn19--99e0c2f80b96f6ec720a7e37b5f1e5c7f7814f2e/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-firewall.png)
Linux Firewall
Require Uncomplicated Firewall (UFW) To Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6OTY4MTg4LCJwdXIiOiJibG9iX2lkIn19--367b7ff351ce6b7207d1f51c16a59f6fa8332e92/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-system.png)
Linux Package Updates
Ensure Linux Packages Are Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzkwLCJwdXIiOiJibG9iX2lkIn19--116fc278f06458c05324cb99090b282fa29a3ac7/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-screenlock.png)
Linux Screen Lock
Require Cinnamon Secure Screen Lock Configuration
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzkxLCJwdXIiOiJibG9iX2lkIn19--2a7d75801b88d5445e8b52d24b846ed5be55c71b/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-screenlock.png)
Linux Screen Lock
Require Gnome Secure Screen Lock Configuration
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzkyLCJwdXIiOiJibG9iX2lkIn19--ae4514c1fff7e5f2a500156c6ab77443688b4d2e/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/linux-screenlock.png)
Linux Screen Lock
Require Mate Secure Screen Lock Configuration
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA0NzQzOCwicHVyIjoiYmxvYl9pZCJ9fQ==--82a9b19a0ab6f80accdec13d1c649083ab0ea4fd/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/vmware.png)
Linux Workspace ONE UEM
Require Device To Be Enrolled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA1NTIyNSwicHVyIjoiYmxvYl9pZCJ9fQ==--a9f8f760c96fcdb38b507f1737f54e30eb083168/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/vmware.png)
Linux Workspace ONE UEM
Require Device to be Enrolled in and Properly Configured to Workspace ONE
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA0NzQzOSwicHVyIjoiYmxvYl9pZCJ9fQ==--7b766a05ce3fb1a02b6727e9f058da88cfc09ae1/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/vmware.png)
Linux Workspace ONE UEM
Require Device To Have All Profiles Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA0NzQzNywicHVyIjoiYmxvYl9pZCJ9fQ==--f8a4857b7b7f64306dc045464ec55816585e4c4f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/vmware.png)
Linux Workspace ONE UEM
Require Device To Satisfy Dependencies
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQzLCJwdXIiOiJibG9iX2lkIn19--4f60bc17151e68664399e11707598fb4e618beff/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Ensure Root Account Shells Are Set to nologin
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQ1LCJwdXIiOiJibG9iX2lkIn19--c3d84dfc1239bcb21edfe7287295a240da700802/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Ensure System Account Shells Are Set to nologin
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQxLCJwdXIiOiJibG9iX2lkIn19--e13321e3741fec74e17efecc64a9324f8debad14/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Require Guest User Account to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQ2LCJwdXIiOiJibG9iX2lkIn19--ecaa1fbcb9453ca672fcc3533f43c0d4ad47486d/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Require Root Accounts Have a Password Set or Be Locked
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQ3LCJwdXIiOiJibG9iX2lkIn19--c11db8663e2de19e97b38c7dc9e14f51a60d635c/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Require System Account Passwords To Be Locked
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQ4LCJwdXIiOiJibG9iX2lkIn19--8a2174689671dcfd14b98e5647e6189944944b1f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/user-accounts.png)
Login and Access
Require User Account Passwords To Be Locked or Set
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzkzLCJwdXIiOiJibG9iX2lkIn19--be9b0dfe4c503b0ea4db8ab5a1500936152e8c12/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-battery.png)
macOS Battery
Ensure Device Battery Is Healthy
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk0LCJwdXIiOiJibG9iX2lkIn19--51a1c881d4dcb98fa4241df904cd673121670ad0/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-finder.png)
macOS Finder
Require File Extensions to Be Visible in Finder
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA0NzQ2MSwicHVyIjoiYmxvYl9pZCJ9fQ==--12be81f66f10d96446fac83961348ee215e233e6/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/find-my.png)
macOS Find My
Require Find My Service to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzcwLCJwdXIiOiJibG9iX2lkIn19--c26006af0bdfcc996d212cad8d2b849f27c78bb2/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/find-my.png)
macOS Find My
Require Find My Service to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk1LCJwdXIiOiJibG9iX2lkIn19--767ece49993063b2ece790f35ae9ccd624f6fbe0/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/application-firewalls.png)
macOS Firewall
Require Firewall to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk2LCJwdXIiOiJibG9iX2lkIn19--6842511f90a18431250cf20ce1ab22ba730c1461/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-location-services.png)
macOS Location Services
Require Location Services to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk3LCJwdXIiOiJibG9iX2lkIn19--f7d7950f1017949723b201e68cbc641b8bc9eb1f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-mdm.png)
macOS MDM
Require Device to Be Enrolled in macOS MDM
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk4LCJwdXIiOiJibG9iX2lkIn19--ec26b16bc93a00a21357db1bc5dc24a01adb5296/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/jamf.png)
macOS MDM
Require Jamf Protect Agent to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzk5LCJwdXIiOiJibG9iX2lkIn19--0317697b3d2b6de0fdda820f4724c495a989ff21/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/notification-center-prefs.png)
macOS Notifications
Require Sensitive Previews to Be Disabled on Lock Screen
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODAwLCJwdXIiOiJibG9iX2lkIn19--ca964d91c427d60af67431a9dcfbf9a9e238a886/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-screenlock.png)
macOS Screen Lock
Require Secure Screen Lock Configuration
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODAxLCJwdXIiOiJibG9iX2lkIn19--b12aea466e76966a8e7c489237657d716d6c9e4c/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Bluetooth Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODAyLCJwdXIiOiJibG9iX2lkIn19--9bfdf426ab2567c45e9a7fa103d7ad868ef7e825/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Content Caching to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODAzLCJwdXIiOiJibG9iX2lkIn19--201274cdc6597cb688fac94bc919190c81c8af0c/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Disc Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA0LCJwdXIiOiJibG9iX2lkIn19--64cc0ceafa833e6ee7b57740f90726f4f6191412/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require File Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA1LCJwdXIiOiJibG9iX2lkIn19--4b661422615da90c5dbf5f44a051ab4d0f06f198/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Internet Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA2LCJwdXIiOiJibG9iX2lkIn19--d2ebce6e8ad35ec4800aa1b76f91252bc3d66158/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Printer Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA3LCJwdXIiOiJibG9iX2lkIn19--d38d7299212d298e4b620ed5e3423ed48a9780eb/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Remote Apple Events or App Scripting To Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA4LCJwdXIiOiJibG9iX2lkIn19--45c489375a113a48a24821a880024cda91700090/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Remote Login to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODA5LCJwdXIiOiJibG9iX2lkIn19--4aaf8f751ca9a179b2a834bc92e7b6982eaea16d/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Remote Management to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODEwLCJwdXIiOiJibG9iX2lkIn19--4b8551af4a8d6e32a860cdf0bf5f6d4ca15aa52c/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-sharing.png)
macOS Sharing
Require Screen Sharing to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6OTY4MTcxLCJwdXIiOiJibG9iX2lkIn19--f173a49e3557ac9c8f03892e225c0cf82e47c396/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/software-update-settings.png)
macOS Software Updates
Ensure OS Meets Minimum Required Version
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODEyLCJwdXIiOiJibG9iX2lkIn19--4d7646a3a51ebfa6c1d97777b680bdfb4f0ff9cf/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/software-update-settings.png)
macOS Software Updates
Ensure OS Version Is Supported by Apple
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODEzLCJwdXIiOiJibG9iX2lkIn19--3f45ec1f26fc9a39259e9b17fc948567132c5513/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/software-update-settings.png)
macOS Software Updates
Ensure OS Version Is Up-to-date
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODExLCJwdXIiOiJibG9iX2lkIn19--1627fd75350608cc078bebad399921ec5135bdf0/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/software-update-settings.png)
macOS Software Updates
Require Automatic Updates to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODIyLCJwdXIiOiJibG9iX2lkIn19--28bea7fd7d651b92649f90fd0de244e62e452605/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ms-intune.png)
Microsoft Intune
Require Device Enrollment
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzM0Njc2LCJwdXIiOiJibG9iX2lkIn19--fe53f6deea62f1d0d091ac98e95bc322d95a627e/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ms-intune.png)
Microsoft Intune
Require Regular Device Check In
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODIzLCJwdXIiOiJibG9iX2lkIn19--6578a90735d3b3cdde586bb14b90540617a6d2db/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/microsoft-software-licenses.png)
Microsoft Software Licenses
Require Microsoft Windows to Be Licensed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODI0LCJwdXIiOiJibG9iX2lkIn19--872108d7bf807a58fb33713d61ba5bb85faeae2f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/munki.png)
Munki
Require Munki to Be Installed and Run Recently
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODI1LCJwdXIiOiJibG9iX2lkIn19--f849f53553c8b8aed14eb7da1be149193e2f5698/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/date-time.png)
Network Time Protocol
Require Date and Time to Be Set Automatically
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA3ODA2NSwicHVyIjoiYmxvYl9pZCJ9fQ==--9c15e89b1450e8dabfd49a37d08d87b0e00f08e7/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/chatgpt-prohibit.png)
OpenAI
ChatGPT Mac App Should Not Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA3ODA2NCwicHVyIjoiYmxvYl9pZCJ9fQ==--0572a40e2d1f2ea3dc12c54d6874c425f6c77cc0/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/chatgpt-app.png)
OpenAI
ChatGPT Mac App Should Use Approved Workspace
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzI1Mjc5LCJwdXIiOiJibG9iX2lkIn19--b86334964cdcccae33aed98b0d3a417a1041c5b7/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/pwpolicy.png)
Password Policies
Require Password Policies to Be Configured Securely
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODI5LCJwdXIiOiJibG9iX2lkIn19--e5787702d204f17ed440a27fd06f57a14ea56d98/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/rapid7.png)
Rapid7
Require Rapid7 App to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODMwLCJwdXIiOiJibG9iX2lkIn19--18d4eaf7e7bd2e21bdeed520a62d5e2f60a4c57f/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/remote-access.png)
Remote Access
Remote Access Daemon Should Not Be Installed or Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6Nzc0OTQwLCJwdXIiOiJibG9iX2lkIn19--439b57b491c7d6cb03020761067bbc34fba9b7b8/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/removable-media.png)
Removable Media
Require Autorun to Be Disabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODMxLCJwdXIiOiJibG9iX2lkIn19--3df523b9d22d21eac5e223a5d40543b2f7a9191d/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/saltstack.png)
Salt
Require Salt App to Be Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6OTExMzY0LCJwdXIiOiJibG9iX2lkIn19--6e271960f179a7932c1b780eb45b8e5a2a64dafc/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/sentinel-one.png)
SentinelOne
Require SentinelOne Agent to Be Installed, Running, and Configured
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODMyLCJwdXIiOiJibG9iX2lkIn19--87c253a6eef0c659f76b7993521e83e53ebd92eb/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/sophos.png)
Sophos
Require Sophos App to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxNzQzLCJwdXIiOiJibG9iX2lkIn19--08c79c36daaeeb30fac12484d296f21715cc6668/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ssh-keys.png)
SSH Keys
Require SSH Keys to Be Encrypted
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODMzLCJwdXIiOiJibG9iX2lkIn19--3b6c0cec205fa63e01a49077cc524047ce4f9836/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/sudo.png)
Sudo
Disallow Passwordless Invocation
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODM0LCJwdXIiOiJibG9iX2lkIn19--c59ef366738425a1830ad6a0c6695397cef6f629/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/sudo.png)
Sudo
Require use_pty to Be Configured
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODM1LCJwdXIiOiJibG9iX2lkIn19--add760a41ada763675e2ff56597ed1ed2f57bee8/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/symantec.png)
Symantec
Require Symantec Endpoint Protection to Be Installed and Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODM2LCJwdXIiOiJibG9iX2lkIn19--380d106884c32f145a5890defbb251e767f48344/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/system-integrity-protection.png)
System Integrity Protection
Require System Integrity Protection to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODM4LCJwdXIiOiJibG9iX2lkIn19--b629fd4eda7574eddf466571eed77199fa36a9cf/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ubuntu.png)
Ubuntu
Ensure Cron Is Running
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODM5LCJwdXIiOiJibG9iX2lkIn19--ba315e188bccb54970605aa72d9270f27e022096/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ubuntu.png)
Ubuntu
Ensure OS Version Is Supported
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODQwLCJwdXIiOiJibG9iX2lkIn19--cc86c6d27338136591a2f31ee7c424b9211820d4/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/ubuntu.png)
Ubuntu
Require Unattended Upgrades to Be Properly Configured
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODUxLCJwdXIiOiJibG9iX2lkIn19--6c6d16a379cb057dd822d7566dead41d3fbccabe/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/vulnerabilities.png)
Vulnerabilities
Insecure Zoom Video Conference Server
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODUyLCJwdXIiOiJibG9iX2lkIn19--9910b9cfa26db87f44a7a1e641a8390d408b6290/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/tpm.png)
Windows 11
Disallow TPM/CPU Installation Bypass
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODUzLCJwdXIiOiJibG9iX2lkIn19--3f3cfcd1cb6963d77372c3097c3593e7dcdac8f4/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-explorer.png)
Windows Explorer
Require File Extensions to Be Visible
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTA2NDAxMSwicHVyIjoiYmxvYl9pZCJ9fQ==--0307450249db0c1249a14b526758cd857c37fe19/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/macos-mdm.png)
Windows MDM
Require Device to Be Enrolled in Windows MDM
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODU4LCJwdXIiOiJibG9iX2lkIn19--6c8ee9d77b3ca183569c1e39af8f636f06a510a3/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-security-center.png)
Windows Security Center
Require Antivirus to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODU5LCJwdXIiOiJibG9iX2lkIn19--4fdc6acd0ed7339a0cea58b62c0321233a614c59/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-security-center.png)
Windows Security Center
Require Ransomware Protection (Controlled Folder Access) to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODYzLCJwdXIiOiJibG9iX2lkIn19--794d05c9741ba61bf1fc5284a9a72fc98e8cf3ad/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-update.png)
Windows Software Updates
Ensure Important OS Updates Are Installed
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6MTAyMDc2NCwicHVyIjoiYmxvYl9pZCJ9fQ==--f7d9dfc4522fd191d58012d91cc05a051b995c27/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-update.png)
Windows Software Updates
Ensure OS Meets Minimum Version Requirement
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODYxLCJwdXIiOiJibG9iX2lkIn19--115d5a1a20a235964ffb7ab5767bef5252895be9/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/unsupported-windows.png)
Windows Software Updates
Ensure OS Version Is Supported by Microsoft
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODYwLCJwdXIiOiJibG9iX2lkIn19--d6f528de48b788de7b8d8d4ae6376fe36c46e4bd/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/windows-uac.png)
Windows UAC
Require User Account Control to Be Enabled
![](https://www-assets.kolide.com/rails/active_storage/representations/proxy/eyJfcmFpbHMiOnsiZGF0YSI6NzIxODY1LCJwdXIiOiJibG9iX2lkIn19--b6d2272ad5651f6bfd357be9c6f1920727728d7c/eyJfcmFpbHMiOnsiZGF0YSI6eyJmb3JtYXQiOiJwbmciLCJyZXNpemVfdG9fbGltaXQiOlszMDAsMzAwXX0sInB1ciI6InZhcmlhdGlvbiJ9fQ==--eeb05c9033f94fc36504417ffae11afb92488a6a/zscaler.png)
Zscaler
Require Zscaler App to Be Installed