Skip to content

Microsoft Defender Antivirus Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Microsoft Defender AV must be configured to scan all downloaded files and attachments.

    <VulnDiscussion>This policy setting allows configuration of scanning for all downloaded files and attachments. If this setting is enabled or ...
    Rule Medium Severity
  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
  • Microsoft Defender AV must be configured to always enable real-time protection.

    &lt;VulnDiscussion&gt;This policy setting turns off real-time protection prompts for known malware detection. Microsoft Defender Antivirus alerts ...
    Rule Medium Severity
  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
  • Microsoft Defender AV must be configured to enable behavior monitoring.

    &lt;VulnDiscussion&gt;This policy setting allows configuration of behavior monitoring. If this setting is enabled or not configured, behavior monit...
    Rule Medium Severity
  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
  • Microsoft Defender AV must be configured to process scanning when real-time protection is enabled.

    &lt;VulnDiscussion&gt;This policy setting allows the configuration of process scanning when real-time protection is turned on. This helps to catch ...
    Rule Medium Severity
  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
  • Microsoft Defender AV must be configured to scan archive files.

    &lt;VulnDiscussion&gt;This policy setting allows the configuration of scans for malicious software and unwanted software in archive files such as ....
    Rule Medium Severity
  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules