Microsoft Windows 10 Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-OS-000474-GPOS-00219
Group -
SRG-OS-000474-GPOS-00219
Group -
Windows 10 must be configured to audit Object Access - File Share successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000474-GPOS-00219
Group -
Windows 10 must be configured to audit Object Access - Other Object Access Events successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000474-GPOS-00219
Group -
Windows 10 must be configured to audit Object Access - Other Object Access Events failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000474-GPOS-00219
Group -
The system must be configured to audit Object Access - Removable Storage failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000474-GPOS-00219
Group -
SRG-OS-000471-GPOS-00215
Group -
The system must be configured to audit Policy Change - Audit Policy Change successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
The system must be configured to audit Policy Change - Authentication Policy Change successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000471-GPOS-00215
Group -
The system must be configured to audit Policy Change - Authorization Policy Change successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
SRG-OS-000477-GPOS-00222
Group -
The system must be configured to audit System - IPSec Driver failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000471-GPOS-00215
Group -
SRG-OS-000471-GPOS-00215
Group -
The system must be configured to audit System - Other System Events failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
The system must be configured to audit System - Security State Change successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
SRG-OS-000327-GPOS-00127
Group -
The system must be configured to audit System - System Integrity failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000327-GPOS-00127
Group -
The system must be configured to audit System - System Integrity successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000341-GPOS-00132
Group -
The Application event log size must be configured to 32768 KB or greater.
Inadequate log size will cause the log to fill up quickly. This may prevent audit events from being recorded properly and require frequent attention by administrative personnel.Rule Medium Severity -
SRG-OS-000341-GPOS-00132
Group -
The Security event log size must be configured to 1024000 KB or greater.
Inadequate log size will cause the log to fill up quickly. This may prevent audit events from being recorded properly and require frequent attention by administrative personnel.Rule Medium Severity -
SRG-OS-000341-GPOS-00132
Group -
The System event log size must be configured to 32768 KB or greater.
Inadequate log size will cause the log to fill up quickly. This may prevent audit events from being recorded properly and require frequent attention by administrative personnel.Rule Medium Severity -
SRG-OS-000057-GPOS-00027
Group -
SRG-OS-000057-GPOS-00027
Group -
Windows 10 permissions for the Security event log must prevent access by non-privileged accounts.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. ...Rule Medium Severity -
SRG-OS-000057-GPOS-00027
Group -
SRG-OS-000037-GPOS-00015
Group -
Windows 10 must be configured to audit Other Policy Change Events Failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000037-GPOS-00015
Group -
Windows 10 must be configured to audit other Logon/Logoff Events Successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000037-GPOS-00015
Group -
SRG-OS-000037-GPOS-00015
Group -
Windows 10 must be configured to audit Detailed File Share Failures.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity -
SRG-OS-000037-GPOS-00015
Group -
Windows 10 must be configured to audit MPSSVC Rule-Level Policy Change Successes.
Maintaining an audit trail of system activity logs can help identify configuration errors, troubleshoot service disruptions, and analyze compromises that have occurred, as well as detect attacks. A...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.