Internet Browser: Check digital signature of executables

f09f451c-2ec0-4a03-b578-637db9c8ffbf

It's best practice that Internet Explorer is configured to verify the signature of downloaded executables. This identifies the publisher of signed software and verifies it hasn't been modified or tampered with.

Remediation

To fix this set the policy value for
Computer Configuration
|_ Administrative Templates
|_ Windows Components
|_ Internet Explorer
|_ Internet Control Panel
|_ Advanced Page
|_Set 'Check for signatures on downloaded programs' to 'Enabled'.

STIG
IE11: https://stigviewer.com/stigs/microsoft_internet_explorer_11/2023-12-01/finding/V-223079