Validation Scripts Search

Results

161 matches

Autoplay: Should be disabled for all drives

NIST 800-53 Rev4 CM-7(2) CSCv7 8.5 CMMC Level 2 CM.2.062 CMMC Level 3 CM.3.068

Autorun: behavior must be configured to prevent Autorun commands

NIST 800-53 Rev4 CM-7(2) CSCv7 8.5 CMMC Level 2 CM.2.062 CMMC Level 3 CM.3.068

Domain Controller: SYSVOL directory must have proper access control permissions

NIST 800-53 IA-3(1) NIST 800-171 rev2 3.5.2 NIST 800-171 rev3 FPD 3.1.18.b NIST 800-171 rev3 FPD 3.5.2 NIST 800-171 rev3 03.05.02 CMMC v2 Level 1 IA.L1-3.5.2 CMMC v2.1 Level 1 IA.L1-b.1.v CMMC v2.1 Level 2 IA.L2-3.5.2 CMMC v2.1 Level 3 IA.L2-3.5.2 CMMC v2.1 Level 3 IA.L3-3.5.1e

Remote Management: Windows Remote Management (WinRM) service must not use Basic authentication

NIST 800-53 MA-4c. NIST 800-171 Rev 2 3.7.5 CMMC v2 L2 MA.L2-3.7.5 CMMC v2.1 L2 MA.L2-3.7.5 CAT I CCI CCI-000877

Remote Management: Unauthenticated RPC clients must be restricted from connecting to the RPC server

NIST 800-171R2 3.4.7 NIST 800-53 CM-7(1) CAT II CSA CMM v4 AIS-02 CSA CMM v4 IVS-03 CSA CMM v4 IVS-04 PCI DSS v4.0 1.2.7 CMMC V2 CM.L2-3.4.7 CMMC CM.3.068 Vuln-ID V-253383

Remote Management: Windows Remote Management (WinRM) client must not use Basic authentication

NIST 800-53 MA-4c. NIST 800-171 Rev 2 3.7.5 CMMC v2 L2 MA.L2-3.7.5 CMMC v2.1 L2 MA.L2-3.7.5 CAT I CCI CCI-000877 Vuln-ID V-220862

Passwords: Windows must be configured to prevent the storage of the LAN Manager hash of passwords

General: Machine inactivity limit must be set to 15 minutes or less, locking the system with the screen saver

NIST 800-53 AC-2(5) NIST 800-53 AC-11 NIST 800-171a 3.1.10[a] NIST 800-171a 3.1.10[b] NIST 800-171a 3.1.10[c] PCI DSS v4.0 8.2.8 Shared Assessment SIG 2022 H.9 Shared Assessment SIG 2022 I.1.20 Shared Assessment SIG 2022 M.1.23 Shared Assessment SIG 2022 U.1.4 CMMC v2 Mapping AC.2.010 CMMC v2 Level2 AC.L2-3.1.10

Network Access: Microsoft network Client: Digitally sign communications (always) must be configured to Enabled

Network Access: Microsoft network Client: Digitally sign communications (if server agrees) must be configured to Enabled

Network Access: Microsoft network Server: Digitally sign communications (always) must be configured to Enabled

Network Access: Microsoft network Server: Digitally sign communications (if client agrees) must be configured to Enabled

Security: Systems must have UEFI firmware and be configured to run in UEFI mode, not Legacy BIOS

NIST 800 CM-6b PCI DSS v4.0.1 10.7 PCI DSS v4.0.1 10.7.1 PCI DSS v4.0.1 10.7.2 PCI DSS v4.0.1 10.7.3 CMMC v2 L3 CM.L3-3.4.2E

Network Access: Windows must not have the Server Message Block (SMB) v1 protocol installed

Network Access: Must Have the Server Message Block (SMB) v1 protocol disabled on the SMB client

Network Access: Must have the Server Message Block (SMB) v1 protocol disabled on the SMB server

Auditing: System must be configured to audit Account Logon - Credential Validation failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 IA-2 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.5.1 NIST 800-171 3.5.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 IA.L2-3.5.1 CMMC v2.0 L2 IA.L2-3.5.2

Auditing: System must be configured to audit Account Logon - Credential Validation successes

Auditing: System must be configured to audit Account Management - Other Account Management Events successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1

Auditing: System must be configured to audit Account Management - Security Group Management successes

Auditing: System must be configured to audit Account Management - User Account Management failures

Auditing: System must be configured to audit Account Management - User Account Management successes

Auditing: System must be configured to audit Detailed Tracking - Plug and Play Events successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-8 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.1

Auditing: System must be configured to audit logoff successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-17 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.2

Auditing: System must be configured to audit logon failures

Auditing: System must be configured to audit logon successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-17 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.2 NIST 800-171 3.5.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.2 CMMC v2.0 L2 IA.L2-3.5.1

Auditing: System must be configured to audit Logon/Logoff - Group Membership successes

Auditing: System must be configured to audit Logon/Logoff - Special Logon successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 NIST 800-171 3.1.6 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1 CMMC v2.0 L2 AC.L2-3.1.6

Auditing: System must be configured to audit Object Access - Other Object Access Events failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-3 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.3 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.3

Auditing: System must be configured to audit Object Access - Other Object Access Events successes

Auditing: System must be configured to audit Object Access - Removable Storage failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 MP-7 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.8.7 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 MP.L2-3.8.7

Auditing: System must be configured to audit Policy Change - Audit Policy Change failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-3 NIST 800-53 CM-5 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.3 NIST 800-171 3.4.5 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.3 CMMC v2.0 L2 CM.L2-3.4.5

Auditing: System must be configured to audit Policy Change - Audit Policy Change successes

Auditing: System must be configured to audit Policy Change - Authentication Policy Change successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-3 NIST 800-53 CM-5 NIST 800-53 IA-8 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.3 NIST 800-171 3.5.3 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.3 CMMC v2.0 L2 IA.L2-3.5.3

Auditing: System must be configured to audit Policy Change - Authorization Policy Change successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-3 NIST 800-53 CM-5 NIST 800-53 AC-3 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.3 NIST 800-171 3.1.3 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.3 CMMC v2.0 L2 AC.L2-3.1.3

Auditing: System must be configured to audit Privilege Use - Sensitive Privilege Use failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-6 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.6 NIST 800-171 3.1.7 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.6 CMMC v2.0 L2 AC.L2-3.1.7

Auditing: System must be configured to audit Privilege Use - Sensitive Privilege Use successes

Auditing: System must be configured to audit System - Other System Events failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2

Auditing: System must be configured to audit System - Other System Events successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2

Auditing: System must be configured to audit System - Security State Change successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-3 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.3 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.3

Auditing: System must be configured to audit System - Security System Extension successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-3 NIST 800-53 CM-7 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.3 NIST 800-171 3.4.6 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.3 CMMC v2.0 L2 CM.L2-3.4.6

Auditing: System must be configured to audit System - System Integrity failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 SI-3 NIST 800-53 SI-4 NIST 800-53 SI-7 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.14.2 NIST 800-171 3.14.6 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 SI.L2-3.14.2 CMMC v2.0 L2 SI.L2-3.14.6

Auditing: System must be configured to audit System - System Integrity successes

Auditing: Windows must be configured to audit System - IPsec Driver failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 CMMC v2.0 L2 AU.L2-3.3.1

Auditing: Windows must be configured to audit System - IPsec Driver successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 CMMC v2.0 L2 AU.L2-3.3.1

General: Downloading print driver packages over HTTP must be turned off

Nist 800-53 CM-7(5) Nist 800-171 3.4.8[a] Nist 800-171 3.4.8[b] Nist 800-171 3.4.8[c] CSCv6 2.2 CSCv6 13.1 CMMC v2.1 CM.L2-3.4.8

General: Printing over HTTP must be turned off

Nist 800-53 CM-7(5) Nist 800-171 3.4.8[a] Nist 800-171 3.4.8[b] Nist 800-171 3.4.8[c] CSCv6 2.2 CSCv6 13.1 CMMC v2.1 CM.L2-3.4.8

General: Windows must prevent the display of slide shows on the lock screen

NIST 800-53 AC-11 NIST 800-53 AC-11(1) NIST 800-53 CM-6 NIST 800-53 CM-7 NIST 800-53 PE-3 NIST 800-171 3.1.10 NIST 800-171 3.4.2 NIST 800-171 3.4.6 CMMC v2.0 L2 AC.L2-3.1.10 CMMC v2.0 L2 CM.L2-3.4.2 CMMC v2.0 L2 CM.L2-3.4.6

Internet Browser: Basic authentication for RSS feeds over HTTP must not be used

NIST 800-53 IA-5 NIST 800-53 IA-5(1) NIST 800-53 SC-8 NIST 800-53 SC-8(1) NIST 800-53 CM-6 NIST 800-53 CM-7 NIST 800-171 3.5.10 NIST 800-171 3.4.2 NIST 800-171 3.13.8 CMMC v2.0 L2 IA.L2-3.5.10 CMMC v2.0 L2 CM.L2-3.4.2 CMMC v2.0 L2 SC.L2-3.13.8

Windows OS: Data Execution Prevention (DEP) must be configured to at least OptOut

NIST 800-53 CM-7(2) CSCv6 8.4 NIST 800-171 Rev2 3.4.7 NIST 800-171 Rev3 FPD 3.4.8.b NIST 800-171 Rev3 03.04.08.b CMMC v2.0 L2 CM.L2-3.4.7 CMMC V2.1 L2 CM.L2-3.4.7

Validation Scripts

Results

Tags

Your Privacy Choices