Skip to content

Microsoft Defender Antivirus Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000278

    Group
  • Microsoft Defender AV must be configured to scan archive files.

    This policy setting allows the configuration of scans for malicious software and unwanted software in archive files such as .ZIP or .CAB files. If this setting is enabled or not configured, archive...
    Rule Medium Severity
  • SRG-APP-000073

    Group
  • Microsoft Defender AV must be configured to scan removable drives.

    This policy setting allows the management of whether or not to scan for malicious software and unwanted software in the contents of removable drives such as USB flash drives when running a full sca...
    Rule Medium Severity
  • SRG-APP-000277

    Group
  • SRG-APP-000210

    Group
  • Microsoft Defender AV must be configured to turn on e-mail scanning.

    This policy setting allows the configuration of e-mail scanning. When e-mail scanning is enabled, the engine will parse the mailbox and mail files according to their specific format in order to ana...
    Rule Medium Severity
  • SRG-APP-000276

    Group
  • SRG-APP-000210

    Group
  • SRG-APP-000261

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules