Detections
Analytics

1.1.4.42 Set 'Modify an object label' to 'No one'

Information

This privilege determines which user accounts can modify the integrity label of objects, such as files, registry keys,
or processes owned by other users.

Solution

Make sure 'Modify an object label' is set to no one.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(7)(b), CSCv6|16

Plugin: Windows

Control ID: 54abb6e039c6d9ac4f53c62ec34bd9551f8201e42ae700729925e29df670544e