Skip to content
Log In

I - Mission Critical Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000279

    Group
    Show

  • Microsoft Defender AV must be configured to automatically take action on all detected tasks.

    This policy setting allows Microsoft Defender configuration to automatically take action on all detected threats. The action to be taken on a particular threat is determined by the combination of t...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured to run and scan for malware and other potentially unwanted software.

    This policy setting turns off Microsoft Defender Antivirus. If this policy setting is enabled, Microsoft Defender Antivirus does not run and computers are not scanned for malware or other potential...
    Rule High Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured to not exclude files for scanning.

    This policy setting allows disabling of scheduled and real-time scanning for files under the paths specified or for the fully qualified resources specified. Paths should be added under the Options ...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured to not exclude files opened by specified processes.

    This policy setting allows the disabling of scheduled and real-time scanning for any file opened by any of the specified processes. The process itself will not be excluded. To exclude the process, ...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured to enable the Automatic Exclusions feature.

    This setting allows an administrator to specify if Automatic Exclusions feature for Server SKUs should be turned off.
    Rule Medium Severity
    Show

  • SRG-APP-000210

    Group
    Show

  • Microsoft Defender AV must be configured to disable local setting override for reporting to Microsoft MAPS.

    This policy setting configures a local override for the configuration to join Microsoft MAPS. This setting can only be set by Group Policy. If this setting is enabled, the local preference setting ...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured to check in real time with MAPS before content is run or accessed.

    This feature ensures the device checks in real time with the Microsoft Active Protection Service (MAPS) before allowing certain content to be run or accessed. If this feature is disabled, the check...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    Group
    Show

  • Microsoft Defender AV must be configured to join Microsoft MAPS.

    This policy setting allows joining Microsoft MAPS. Microsoft MAPS is the online community that helps in choosing how to respond to potential threats. The community also helps stop the spread of new...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    Group
    Show

  • Microsoft Defender AV must be configured to only send safe samples for MAPS telemetry.

    This policy setting configures behavior of samples submission when opt-in for MAPS telemetry is set. Possible options are: (0x0) Always prompt (0x1) Send safe samples automatically (0x2) Never s...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    Group
    Show

  • Microsoft Defender AV must be configured for protocol recognition for network protection.

    This policy setting allows the configuration of protocol recognition for network protection against exploits of known vulnerabilities. If this setting is enabled or not configured, protocol recogni...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules