PingSentry   |   Blog   |   Discord   |   System32   |   GitHub   |   Free tools

Validation Scripts


Results
223 matches
Accounts: Must be configured to enable Remote host allows delegation of non-exportable credentials
NIST 800-53 IA-5h
Logon: Enable Display Last Logon Info
NIST 800-53 AC-9(1)
Network Access: Restrict remote calls to the Security Account Manager [SAM] to Administrators
Nist 800-53 AC-6(3)
Printing: Prevent users from installing printer drivers
NIST 800-53 AC-2 NIST 800-53 AC-3 NIST 800-53 AC-6 NIST 800-53 AC-6(1) NIST 800-53 AC-6(7) NIST 800-53 AU-9(4)
Accounts: User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC
NIST 800-53 rev4 CM-2(2) NIST 800-53 rev4 CM-6(1) NIST 800-53 rev5 CM-2(2) NIST 800-53 rev5 CM-6(1) MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002
Accounts: Passwords for the built-in Administrator account must be changed at least every 60 days
NIST 800-53 CM-6b. CCI CCI-000366
Domain Member: Must be running Credential Guard on domain-joined members
Nist 800-53 SI-16 CSCv7 5.1
General: The Microsoft Defender SmartScreen for Explorer must be enabled (Desktop)
Nist 800-53 SI-16 CSCv7 8.3
General: Windows Defender SmartScreen must be enabled (Server)
Nist 800-53 SI-16 CSCv7 8.3
Passwords: history must be configured to 24 passwords remembered
NIST 800-53 AC-2(3) CSCv7 16.10
Passwords: Maximum Password Age
NIST 800-53 AC-2(3) CSCv7 16.10
Passwords: must be configured to expire
NIST 800-53 AC-2(3) CSCv7 16.10
Microsoft Edge: The Windows Defender SmartScreen filter for Microsoft Edge must be enabled (Windows 10)
NIST 800-53 CM-6b. CAT II CCI CCI-000366
Microsoft Edge: Users must not be allowed to ignore SmartScreen filter warnings for unverified files (Windows 10)
NIST 800-53 CM-6b. CAT II CCI CCI-000366
Microsoft Edge: Users must not be allowed to ignore Windows Defender SmartScreen filter warnings (Windows 10)
NIST 800-53 CM-6b. CAT II CCI CCI-000366
Microsoft Edge: Windows 10 must be configured to prevent certificate error overrides in Microsoft Edge (Windows 10)
NIST 800-53 CM-6b. CAT II CCI CCI-000366
PowerShell: Script block logging must be enabled
NIST 800-53 AC-6(10) CCI CCI-000135 CSCv6 16.4
Security: Kernel (Direct Memory Access) DMA Protection must be enabled
NIST 800-53 AU-12c. CAT II CCI CCI-000172
Accounts: Block Microsoft accounts
Nist 800-53 AC-2(1) CSCv7 v16.2 CSI v8 v5.6
Accounts: Local Guest account should be disabled
NIST 800-53 IA-8 DISA CAT II CCI CCI-000804
Accounts: Reversible password encryption must be disabled
NIST 800-53 IA-5(13) CCE CCE-85419-0 CCI CCI-000366 MITRE TA0003
Accounts: User Account Control (UAC) must automatically deny standard user requests for elevation
NIST 800-53 CM-6(a) NIST 800-53 IA-11 MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002
Auditing: Command line data must be included in process creation events
NIST 800-53 AU-3(1) CAT II CCI CCI-000135 CSCv6 16.14
Auditing: Event Log size for Application log must be at least 32768 KB
CCI CCI-001849 NIST 800-53 Rev4/Rev5 AU-4
Auditing: Event Log size for Security log must be at least 196608 KB
CCI CCI-001849 NIST 800-53 rev4/rev5 AU-4
Auditing: Event Log size for System log must be at least 32768 KB
CCI CCI-001849 NIST 800-53 rev4/rev5 AU-4
Auditing: Must force audit policy subcategory settings to override audit policy category settings
NIST 800-53 Rev4/Rev5 AU-12(3). CSCv6 6.2
Domain Member: Local users on domain-joined member servers must not be enumerated
Nist 800-53 AC-6(10) Nist 800-171 3.1.7
Network Access: Must prevent NTLM from falling back to a Null session
Nist 800-53 AC-6(10) Nist 800-171A 3.1.7[a] Nist 800-171A 3.1.7[b] Nist 800-171A 3.1.7[c]
Network Access: Unencrypted passwords must not be sent to third-party Server Message Block (SMB) servers
NIST 800-53 IA-5(13) CCE CCE-85419-0 CCI CCI-000366 MITRE TA0003
Remote Desktop: Must always prompt a client for passwords upon connection
NIST 800-53 CM-6(a) NIST 800-53 IA-11 MITRE Att&ck T1021.001 MITRE Att&ck T1563.002
Remote Desktop: Must not save passwords in the Remote Desktop Client
NIST 800-53 CM-6(a) NIST 800-53 IA-11 MITRE Att&ck T1021.001
Accounts: Local accounts with blank passwords must be restricted to prevent access from the network
NIST 800-53 IA-5(1) CSI CSC v7 4.4 CMMCv2 AC.2.016
Accounts: Local Admin accounts must have their privileged token filtered to prevent elevated privileges used over the network
NIST 800-53 SC-3 CCI CCI-001084 Vuln-ID V-36439 CMMCv2 AC.2.015
Auditing: Event Log / Viewer must be protected from unauthorized modification and deletion
NIST 800-53 AU-9(3) NIST 800-53 CM-6(a) NIST 800-53 CM-6(c) NIST 800-53 CM-6(d) NIST 800-53 SI-7 NIST 800-53 SI-7(1) NIST 800-53 SI-7(6) CIS 1.8.1.4 CIS 1.8.1.5 CIS 1.8.1.6 CIS 6.1.1 CIS 6.1.2 CIS 6.1.3 CIS 6.1.4 CIS 6.1.5 CIS 6.1.6 CIS 6.1.7 CIS 6.1.8 CIS 6.1.9 MITRE Att&ck T1070.001
Domain Member: Caching of logon credentials must be limited - Desktop
NIST 800-53 CM-6b. CAT III CCI CCI-000366 Vuln-ID V-1090
Domain Member: must limit the caching of logon credentials to four or less - Server
NIST 800-53 CM-6b. CAT III CCI CCI-000366 Vuln-ID V-1090
Remote Management: Windows Remote Management (WinRM) service must not store RunAs credentials
NIST 800-53 rev4 SC-7(21) NIST 800-53 rev5 SC-7(21) PCI DSS 4.0.1 1.3.3 PCI DSS 4.0.1 SAQ A-EP 1.3.3 CSCv7 14.3 SRG SRG-OS-000373-GPOS-00156 SRG SRG-OS-000373-GPOS-00157
Autoplay: Must be turned off for non-volume devices
NIST 800-53 CM-7(2) CAT I CCI CCI-001764 CSCv6 8.3 Vuln-ID V-220827
Domain Member: Group policy objects must be reprocessed even if they have not changed
Nist 800-53 CM-2 CSCv7 5.4 Nist 800-171 R3 A.03.04.01.b[01] Nist 800-171 R3 A.03.04.01.b[02] Nist 800-171 R3 A.03.04.01.b[03] Nist 800-171 R3 A.03.04.01.b[04]
Exploit Protection: system-level mitigation, Validate exception chains (SEHOP) must be on
NIST 800-53 SI-18 CSCv7 8.3 Shared Assessments SIG 2022 P.10 Shared Assessments SIG 2022 P.10.3 Shared Assessments SIG 2022 P.10.3.1 Shared Assessments SIG 2022 P.10.3.2
Threat Intel: Attack Vector: Vulnerable Fan Driver (WinRing0x64 sys)
Mittre Att&ck T1068 Mittre Att&ck T1543 Mittre Att&ck T1055 Nist 800-53 Rev.5 SI-2 Nist 800-53 Rev.5 RA-5 Nist 800-53 Rev.5 SI-7
Auditing: System must be configured to audit Account Logon - Credential Validation failures
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 IA-2 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.5.1 NIST 800-171 3.5.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 IA.L2-3.5.1 CMMC v2.0 L2 IA.L2-3.5.2
Auditing: System must be configured to audit Account Logon - Credential Validation successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 IA-2 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.5.1 NIST 800-171 3.5.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 IA.L2-3.5.1 CMMC v2.0 L2 IA.L2-3.5.2
Auditing: System must be configured to audit Account Management - Other Account Management Events successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1
Auditing: System must be configured to audit Account Management - Security Group Management successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1
Auditing: System must be configured to audit Account Management - User Account Management failures
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1
Auditing: System must be configured to audit Account Management - User Account Management successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1
Auditing: System must be configured to audit Detailed Tracking - Plug and Play Events successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 CM-8 NIST 800-53 SI-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.4.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 CM.L2-3.4.1
Auditing: System must be configured to audit logoff successes
NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-17 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.2
Tags

Your Privacy Choices

Manage your cookie preferences below:

Helps us improve website performance and understand how visitors use our site.

Allows us to collect feedback about our products and improve them based on your input.

To learn more about our use of cookies, please see our
Privacy Policy.