CIS Windows Server 2012 MS L1 v3.0.0

Audit Details

Name: CIS Windows Server 2012 MS L1 v3.0.0

Updated: 6/17/2024

Authority: CIS

Plugin: Windows

Revision: 1.2

Estimated Item Count: 283

File Details

Filename: CIS_MS_SERVER_2012_Level_1_v3.0.0.audit

Size: 821 kB

MD5: d71520bb5bd9eb1095d9578aa6ee10cd
SHA256: 3d8374b2f59905a938c321e0f085fa199239ec68389c0456daafc6adb8501e3c

Audit Changelog

 
Revision 1.2

Jun 17, 2024

Miscellaneous
  • Metadata updated.
Revision 1.1

May 7, 2024

Functional Update
  • 2.3.10.9 Configure 'Network access: Remotely accessible registry paths and sub-paths' is configured
Added
  • 18.10.24.2 Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings)
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled'
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled'
  • 18.6.14.1 Ensure 'Hardened UNC Paths' is set to 'Enabled, with 'Require Mutual Authentication' and 'Require Integrity' set for all NETLOGON and SYSVOL shares'
Removed
  • 18.10.24.2 Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings) - AntiDetours
  • 18.10.24.2 Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings) - BannedFunctions
  • 18.10.24.2 Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings) - DeepHooks
  • 18.10.24.2 Ensure 'Default Action and Mitigation Settings' is set to 'Enabled' (plus subsettings) - ExploitAction
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - *opera.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - 7z.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - 7zFM.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - 7zG.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Firefox plugin-container.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Foxit Reader.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Photoshop.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - QuickTimePlayer.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Safari.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - SkyDrive.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Skype.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - Thunderbird plugin-container.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - WLXPhotoGallery.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - WindowsLiveWriter.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - chrome.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - communicator.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - firefox.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - googletalk.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - iTunes.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - mirc.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - opera.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - pidgin.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - rar.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - realconverter.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - realplay.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - unrar.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - vlc.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - winamp.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - winrar.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - winzip32.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - winzip64.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - wlmail.exe
  • 18.10.24.4 Ensure 'Default Protections for Popular Software' is set to 'Enabled' - wmplayer.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - AcroRd32.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - Acrobat.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - EXCEL.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - INFOPATH.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - LYNC.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - MSACCESS.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - MSPUB.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - OIS.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - OUTLOOK.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - POWERPNT.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - PPTVIEW.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - VISIO.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - VPREVIEW.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - WINWORD.EXE
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - java.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - javaw.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - javaws.exe
  • 18.10.24.5 Ensure 'Default Protections for Recommended Software' is set to 'Enabled' - wordpad.exe
  • 18.6.14.1 Ensure 'Hardened UNC Paths' is set to 'Enabled, with 'Require Mutual Authentication' and 'Require Integrity' set for all NETLOGON and SYSVOL shares' - NETLOGON
  • 18.6.14.1 Ensure 'Hardened UNC Paths' is set to 'Enabled, with 'Require Mutual Authentication' and 'Require Integrity' set for all NETLOGON and SYSVOL shares' - SYSVOL
  • 2.3.10.8 Configure 'Network access: Remotely accessible registry paths' is configured - is configured