800-53|SI-3c.2.

Title

MALICIOUS CODE PROTECTION

Description

[Selection (one or more): block malicious code; quarantine malicious code; send alert to administrator; [Assignment: organization-defined action]] in response to malicious code detection; and

Reference Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

Family: SYSTEM AND INFORMATION INTEGRITY

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4.7.2.1.1 Ensure 'Excel 2 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.1 Ensure 'Excel 2 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.2 Ensure 'Excel 3 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.2 Ensure 'Excel 3 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.3 Ensure 'Excel 95-97 Workbooks and Templates' is set to Enabled(Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.3 Ensure 'Excel 95-97 Workbooks and Templates' is set to Enabled(Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.4 Ensure 'Excel 2 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.4 Ensure 'Excel 2 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.5 Ensure 'Excel 4 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.5 Ensure 'Excel 4 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.6 Ensure 'Excel 3 Worksheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.6 Ensure 'Excel 3 Worksheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.7 Ensure 'dBase III /IV Files' is set to Enable (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.7 Ensure 'dBase III /IV Files' is set to Enable (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.8 Ensure 'Web Pages and Excel 2003 XML Spreadsheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.8 Ensure 'Web Pages and Excel 2003 XML Spreadsheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.9 Ensure 'Excel 95 Workbooks' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.9 Ensure 'Excel 95 Workbooks' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.10 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.10 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.11 Ensure 'Excel 4 Macrosheets and Add-in Files' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.11 Ensure 'Excel 4 Macrosheets and Add-in Files' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.12 Ensure 'Excel 4 Workbooks' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.12 Ensure 'Excel 4 Workbooks' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.13 Ensure 'Dif and Sylk Files' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.13 Ensure 'Dif and Sylk Files' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.6.6.2.1.1 Ensure 'Default File Block Behavior' to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office PowerPoint 2016 v1.0.1
1.6.6.2.1.1 Ensure 'Default File Block Behavior' to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office PowerPoint 2013 v1.0.1
1.8.7.2.1.1 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.1 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.2 Ensure 'Word 2 and Earlier Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.2 Ensure 'Word 2 and Earlier Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.3 Ensure 'Word 6.0 Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.3 Ensure 'Word 6.0 Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.4 Ensure 'Word 95 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.4 Ensure 'Word 95 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.5 Ensure 'Word 97 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.5 Ensure 'Word 97 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
2.22.1 Ensure 'Block Opening of Pre-Release Versions of File Formats New to PowerPoint ...' is set to EnabledWindowsCIS Microsoft Office 2016 v1.1.0
2.22.2 Ensure 'Block Opening of Pre-release Versions of File Formats New to Excel 2016 ...' is set to EnabledWindowsCIS Microsoft Office 2016 v1.1.0
2.25.11 Ensure 'Disable All Trust Bar Notifications For Security Issues' is set to DisabledWindowsCIS Microsoft Office 2016 v1.1.0
5.1.5 Set 'Disable all Trust Bar notifications for security issues' to 'Disabled'WindowsCIS MS Office Outlook 2010 v1.0.0
18.8.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
18.8.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
18.8.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2 + BL + NG
18.8.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 BL
18.8.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2 + BL
Configure Attack Surface Reduction rulesWindowsMSCT Windows 10 1803 v1.0.0
Configure Attack Surface Reduction rules - 26190899-1602-49e8-8b27-eb1d0a1ce869WindowsMSCT Windows Server 2019 MS v1.0.0
Configure Attack Surface Reduction rules - 26190899-1602-49e8-8b27-eb1d0a1ce869WindowsMSCT Windows Server 1903 MS v1.19.9