| 1.2 Set 'Allow software to run or install even if the signature is invalid' to 'Disabled' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.1 Configure 'Prevent deleting websites that the user has visited' | CIS IE 11 v1.0.0 | Windows | ACCESS CONTROL |
| 3.5 Configure 'Prevent Deleting Temporary Internet Files' | CIS IE 11 v1.0.0 | Windows | ACCESS CONTROL |
| 3.6 Configure 'Allow deleting browsing history on exit' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 3.8 Configure 'Turn off InPrivate Browsing' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.4 Set 'Turn on certificate address mismatch warning' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 7.5 Set 'MK Protocol Security Restriction' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.14 Set 'Allow font downloads' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.17 Set 'Allow installation of desktop items' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.22 Set 'Access data sources across domains' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.24 Set 'Include local directory path when uploading files to a server' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.26 Set 'Enable dragging of content from different domains within a window' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.33 Set 'Web sites in less privileged Web content zones can navigate into this zone' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | ACCESS CONTROL |
| Dynamic Code Settings | MSCT Edge v151 v1.0.0 | Windows | |
| Enable browser legacy extension point blocking | MSCT Edge v151 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Enable computer and user accounts to be trusted for delegation | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Encryption Oracle Remediation | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Include local path when user is uploading files to a server - Internet Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Internet Explorer Processes - FEATURE_MIME_HANDLING - (Reserved) | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Explorer Processes - FEATURE_MIME_HANDLING - explorer.exe | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Explorer Processes - FEATURE_MIME_HANDLING - iexplore.exe | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Explorer Processes - FEATURE_MIME_SNIFFING - (Reserved) | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Explorer Processes - FEATURE_MIME_SNIFFING - iexplore.exe | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Internet Explorer Processes - FEATURE_SECURITYBAND - explorer.exe | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Java permissions - Trusted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Logon options - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Network access: Restrict anonymous access to Named Pipes and Shares | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Network security: Do not store LAN Manager hash value on next password change | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Prevent enabling lock screen slide show | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Prevent installation of devices using drivers that match these device setup classes - DenyDeviceClassesRetroactive | MSCT Windows 11 v1.0.0 | Windows | MEDIA PROTECTION |
| Prevent managing SmartScreen Filter | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Prevent per-user installation of ActiveX controls | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Require a password when a computer wakes (on battery) | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Require secure RPC communication | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Restrict Unauthenticated RPC clients | MSCT Windows 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| Scan all downloaded files and attachments | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Scan removable drives | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Script ActiveX controls marked safe for scripting | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Security Zones: Do not allow users to change policies | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Security Zones: Use only machine settings | MSCT Windows 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Send file samples when further analysis is required | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Set client connection encryption level | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Show security warning for potentially unsafe files - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context | MSCT Edge v151 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| Turn off Autoplay | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Turn on PowerShell Script Block Logging - EnableScriptBlockInvocationLogging | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Turn on Protected Mode - Restricted Sites Zone | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| Turn On Virtualization Based Security - HVCIMATRequired | MSCT Windows 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| User Account Control: Admin Approval Mode for the Built-in Administrator account | MSCT Windows 11 v1.0.0 | Windows | ACCESS CONTROL |
| Windows Defender Firewall: Allow logging - LogSuccessfulConnections | MSCT Windows 11 v1.0.0 | Windows | AUDIT AND ACCOUNTABILITY |
