Skip to content

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • Event tracing for Windows (ETW) for Common Language Runtime events must be enabled.

    <VulnDiscussion>Event tracing captures information about applications utilizing the .NET CLR and the .NET CLR itself. This includes security ...
    Rule Medium Severity
  • SRG-APP-000431

    <GroupDescription></GroupDescription>
    Group
  • Software utilizing .Net 4.0 must be identified and relevant access controls configured.

    &lt;VulnDiscussion&gt;With the advent of .Net 4.0, the .Net framework no longer directly configures or enforces security policy for .Net applicatio...
    Rule Medium Severity
  • SRG-APP-000219

    <GroupDescription></GroupDescription>
    Group
  • Remoting Services TCP channels must utilize authentication and encryption.

    &lt;VulnDiscussion&gt;Note: Microsoft recommends using the Windows Communication Framework (WCF) rather than .Net remoting. New development project...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules