Detections
Analytics

800-53|SI-3c.2.

Title

MALICIOUS CODE PROTECTION

Description

[Selection (one or more): block malicious code; quarantine malicious code; send alert to administrator; [Assignment: organization-defined action]] in response to malicious code detection; and

Reference Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

Family: SYSTEM AND INFORMATION INTEGRITY

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.4.7.2.1.1 Ensure 'Excel 2 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.1 Ensure 'Excel 2 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.2 Ensure 'Excel 3 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.2 Ensure 'Excel 3 Macrosheets and Add-in Files' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.3 Ensure 'Excel 95-97 Workbooks and Templates' is set to Enabled(Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.3 Ensure 'Excel 95-97 Workbooks and Templates' is set to Enabled(Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.4 Ensure 'Excel 2 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.4 Ensure 'Excel 2 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.5 Ensure 'Excel 4 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.5 Ensure 'Excel 4 Worksheets' is set to Enabled(Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.6 Ensure 'Excel 3 Worksheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.6 Ensure 'Excel 3 Worksheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.7 Ensure 'dBase III /IV Files' is set to Enable (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.7 Ensure 'dBase III /IV Files' is set to Enable (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.8 Ensure 'Web Pages and Excel 2003 XML Spreadsheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.8 Ensure 'Web Pages and Excel 2003 XML Spreadsheets' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.9 Ensure 'Excel 95 Workbooks' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.9 Ensure 'Excel 95 Workbooks' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.10 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.10 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.11 Ensure 'Excel 4 Macrosheets and Add-in Files' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.11 Ensure 'Excel 4 Macrosheets and Add-in Files' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.12 Ensure 'Excel 4 Workbooks' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.12 Ensure 'Excel 4 Workbooks' is set to Enabled (Enabled: Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.4.7.2.1.13 Ensure 'Dif and Sylk Files' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2016 v1.0.1
1.4.7.2.1.13 Ensure 'Dif and Sylk Files' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Excel 2013 v1.0.1
1.6.6.2.1.1 Ensure 'Default File Block Behavior' to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office PowerPoint 2016 v1.0.1
1.6.6.2.1.1 Ensure 'Default File Block Behavior' to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office PowerPoint 2013 v1.0.1
1.8.7.2.1.1 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.1 Ensure 'Default File Block Behavior' is set to Enabled (Blocked files are not opened)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.2 Ensure 'Word 2 and Earlier Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.2 Ensure 'Word 2 and Earlier Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.3 Ensure 'Word 6.0 Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.3 Ensure 'Word 6.0 Binary Documents and Templates' is set to Enabled (Open/Save blocked, use open policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.4 Ensure 'Word 95 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.4 Ensure 'Word 95 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
1.8.7.2.1.5 Ensure 'Word 97 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2013 v1.1.0
1.8.7.2.1.5 Ensure 'Word 97 Binary Documents and Templates' is set to Enabled (Open/Save Blocked, Use Open Policy)WindowsCIS Microsoft Office Word 2016 v1.1.0
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 BL
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L2 + BitLocker
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L2 + BL + NG
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 11 Enterprise v3.0.0 L1 + BL
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL + NG
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L2 + BL
18.9.7.1.5 (BL) Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 BL
18.9.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' - IEEE 1394 device setup classesWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 BL
18.9.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' - IEEE 1394 device setup classesWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 BL
18.9.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' - IEEE 1394 device setup classesWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L2 + BL
18.9.7.1.5 Ensure 'Prevent installation of devices using drivers that match these device setup classes: Prevent installation of devices using drivers for these device setup' is set to 'IEEE 1394 device setup classes' - IEEE 1394 device setup classesWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L2 + BL