Detections
Analytics
WNDF-AV-000057 - Microsoft Defender AV must enable the file hash computation feature.
Information
This policy drives the ability to enforce Indicators of Compromise (IoC) by using file hash allow/block indicators.Solution
Set the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Microsoft Defender Antivirus >> MpEngine >>Enable file hash computation feature to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Defender_Antivirus_V2R9_STIG.zip
Item Details
Audit Name: DISA Microsoft Defender Antivirus STIG v2r9
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-18(4), CAT|II, CCI|CCI-001170, Rule-ID|SV-278661r1192821_rule, STIG-ID|WNDF-AV-000057, Vuln-ID|V-278661
Plugin: Windows
Control ID: 8cd786611085ef3305f3996601991ae1db186b219ff41e48d0e55b4eae2e0bea