Detections
Analytics
WNDF-AV-000076 - Microsoft Defender AV must scan packed executables.
Information
This policy setting manages whether Microsoft Defender Antivirus scans packed executables. Packed executables are executable files that contain compressed code.Solution
Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Microsoft Defender Antivirus >> Scan >> Scan packed executables to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Defender_Antivirus_V2R8_STIG.zip
Item Details
Audit Name: DISA Microsoft Defender Antivirus STIG v2r8
Category: SYSTEM AND INFORMATION INTEGRITY
References: 800-53|SI-3c.1., CAT|II, CCI|CCI-002624, Rule-ID|SV-278679r1190773_rule, STIG-ID|WNDF-AV-000076, Vuln-ID|V-278679
Plugin: Windows
Control ID: c97310f92a8b8330ccc674d63e88d63188b5be63c86ea6abb3b350e540b8c7f3