Skip to content
Log In

Microsoft Excel 2013 STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • DTOO209 - Zone Elevation Protection

    Group
    Show

  • Protection from zone elevation must be enforced.

    Internet Explorer places restrictions on each web page users can use the browser to open. Web pages on a user's local computer have the fewest security restrictions and reside in the Local Machine ...
    Rule Medium Severity
    Show

  • DTOO211 - Restrict ActiveX Install

    Group
    Show

  • DTOO132 - Restrict File Download

    Group
    Show

  • File downloads must be configured for proper restrictions.

    Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the download. User preferences may also allow the download to occur withou...
    Rule Medium Severity
    Show

  • DTOO124 - Scripted Window Security

    Group
    Show

  • Scripted Window Security must be enforced.

    Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site to take control of the users' computers in some manner. Disabling or not ...
    Rule Medium Severity
    Show

  • DTOO127 - Add-ins are signed by Trusted Publisher

    Group
    Show

  • Add-ins to Office applications must be signed by a Trusted Publisher.

    Office 2013 applications do not, by default, check the digital signature on application add-ins before opening them. Disabling or not configuring this setting may allow an application to load a da...
    Rule Medium Severity
    Show

  • DTOO119 - Turn off file validation

    Group
    Show

  • DTOO122 - dBase III / IV files

    Group
    Show

  • DTOO112 - Dif and Sylk files

    Group
    Show

  • Open/Save actions for Dif and Sylk files must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO113 - Macrosheets and add-in files

    Group
    Show

  • Open/Save actions for Excel 2 macrosheets and add-in files must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO114 - Excel 2 worksheets

    Group
    Show

  • Open/Save actions for Excel 2 worksheets must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO115 - Excel 3 macrosheets and add-in files

    Group
    Show

  • Open/Save actions for Excel 3 macrosheets and add-in files must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO116 - Excel 3 worksheets

    Group
    Show

  • DTOO105 - Excel 4 macrosheets and add-in files

    Group
    Show

  • Open/Save actions for Excel 4 macrosheets and add-in files must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO106 - Excel 4 workbooks

    Group
    Show

  • Open/Save actions for Excel 4 workbooks must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO107 - Excel 4 worksheets

    Group
    Show

  • Open/Save actions for Excel 4 worksheets must be blocked.

    This setting specifies whether users can open, view, edit, or save files saved in the specified format. Enabling block of the specified format mitigates zero-day security attacks (which are attacks...
    Rule Medium Severity
    Show

  • DTOO108 - Excel 95 workbooks

    Group
    Show

  • DTOO109 - Excel 95-97 workbooks and templates

    Group
    Show

  • DTOO110 - Set default file block behavior

    Group
    Show

  • Blocking as default file block opening behavior must be enforced.

    Users can open, view, or edit a large number of file types in Office 2013. Some file types are safer than others, as some could allow malicious code to become active on user computers or the netwo...
    Rule Medium Severity
    Show

  • DTOO120 -Web pages and Excel 2003 XML spreadsheets

    Group
    Show

  • Open/Save actions for web pages and Excel 2003 XML spreadsheets must be blocked.

    This policy setting allows for determining whether users can open, view, edit, or save Excel files with the format specified by the title
    Rule Low Severity
    Show

  • DTOO121 - Files from the Internet zone

    Group
    Show

  • Files from the Internet zone must be opened in Protected View.

    This policy setting allows for determining if files downloaded from the Internet zone open in Protected View. If enabling this policy setting, files downloaded from the Internet zone do not open in...
    Rule Medium Severity
    Show

  • DTOO288 - Files in unsafe locations

    Group
    Show

  • Files in unsafe locations must be opened in Protected View.

    This policy setting determines whether files located in unsafe locations will open in Protected View. If unsafe locations have not been specified, only the "Downloaded Program Files" and "Temporary...
    Rule Medium Severity
    Show

  • DTOO292 - Set document behavior

    Group
    Show

  • Document behavior if file validation fails must be set.

    This policy key controls how Office documents should be handled when failing file validation. By requiring such documents to be opened in Protected View, any potentially malicious code would be dis...
    Rule Medium Severity
    Show

  • DTOO293 - Turn off Protected View for attachments

    Group
    Show

  • DTOO418 - Disable WEBSERVICE functions

    Group
    Show

  • DTOO419 - Disallow corrupt workbook options

    Group
    Show

  • Corrupt workbook options must be disallowed.

    This setting controls whether Excel presents users with a list of data extraction options before beginning an Open and Repair operation when users choose to open a corrupt workbook in repair or ext...
    Rule Medium Severity
    Show

  • DTOO600 - Macros must be blocked from running in Office 2013 files from the Internet.

    Group
    Show

  • DTOO133-Disable all trusted locations

    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules