Validation Scripts Search

Results

293 matches

Accounts: Administrator accounts must not be enumerated during elevation

Nist 800-53 CM-1 Nist 800-53 CM-2 Nist 800-53 CM-6 Nist 800-53 CM-7 Nist 800-53 CM-7(1) Nist 800-53 CM-9 Nist 800-53 SA-3 Nist 800-53 SA-8 Nist 800-53 SA-10 Nist 800-171 3.1.12.a Nist 800-171 3.1.16.a Nist 800-171 3.1.18.a Nist 800-171 3.1.18.c Nist 800-171 3.4.1.a Nist 800-171 3.4.2.a Nist 800-171 3.4.6.a Nist 800-171 3.4.6.b Nist 800-171 3.4.6.d Nist 800-171 3.5.7.e Nist 800-171 3.5.7.f Nist 800-171 3.5.12.d CSCv7 5.1 PCI-DSS v3.2 1.1 PCI-DSS v3.2 1.1.1 PCI-DSS v3.2 2.2 PCI-DSS v3.2 2.2.1 PCI-DSS v3.2 2.2.2 PCI-DSS v3.2 2.2.3 PCI-DSS v3.2 2.2.4 PCI-DSS v4 1.1 PCI-DSS v4 1.2.1 PCI-DSS v4 1.2.6 PCI-DSS v4 2.2.1 PCI-DSS v4 8.3.2 PCI-DSS v4 8.5 PCI-DSS v4 10.2 PCI-DSS v4 10.2.1 PCI-DSS v4 10.2.1.1 PCI-DSS v4 10.2.1.2 PCI-DSS v4 10.2.1.3 PCI-DSS v4 10.2.1.4 PCI-DSS v4 10.2.1.5 PCI-DSS v4 10.2.1.6 PCI-DSS v4 10.2.1.7 PCI-DSS v4 10.2.2 PCI-DSS v4 10.6 PCI-DSS v4 10.6.1 PCI-DSS v4 10.6.2 PCI-DSS v4 10.6.3 PCI-DSS v4 11.2 CMMC v2.1 CM.L2-3.4.1 CMMC v2.1 CM.L2-3.4.2 CMMC v2.1 CM.L3-3.4.1e CMMC v2.1 CM.L3-3.4.2e CMMC v2.1 SI.L3-3.14.3e HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(1)

Accounts: Automatic logons must be disabled

NIST 800-53 IA-5(13) CCE CCE-85419-0 CCI CCI-000366 HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(2)(i) HIPAA Security Rule / NIST SP 800-66 R2 164.312(d)

Accounts: Block Microsoft accounts

Nist 800-53 AC-2(1) CSCv7 v16.2 CSI v8 v5.6

Accounts: Built-in Administrator account must be renamed

NIST 800-53 CM-6b. CCI CCI-000366 HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(2)(i) HIPAA Security Rule / NIST SP 800-66 R2 164.312(d)

Accounts: Built-in Guest account must be renamed

NIST 800-53 IA-8 NIST 800-53 AC-02 NIST 800-53 AC-03 NIST 800-53 AC-06 DISA CAT II CCI CCI-000804 HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(1) HIPAA Security Rule / NIST SP 800-66 R2 164.308(a)(3)(i)

Accounts: Deny log on locally user right must be configured to prevent access from highly privileged domain accounts

NIST 800-53 AC-6(7)(b) DISA CAT II CCI CCI-000213 HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(4) HIPAA Security Rule / NIST SP 800-66 R2 164.308(a)(3) HIPAA Security Rule / NIST SP 800-66 R2 164.312(a)(1)

Accounts: Enable computer and user accounts delegation user right not be assigned to any groups or accounts

Accounts: Enable computer and user accounts to be trusted user right must only be assigned to the Admins group on DCs

Accounts: Local accounts with blank passwords must be restricted to prevent access from the network

NIST 800-53 IA-5(1) CSI CSC v7 4.4 CMMCv2 AC.2.016

Accounts: Local Admin accounts must have their privileged token filtered to prevent elevated privileges used over the network

NIST 800-53 SC-3 CCI CCI-001084 Vuln-ID V-36439 CMMCv2 AC.2.015

Accounts: Local Administrator account should be disabled

CIS CSC v6 5.1 CIS CSC v6 16 CIS CSC v6 16.8 NIST 800-53 IA-2 DISA CAT II CCI CCI-000764 Vuln-ID V-63619 Vuln-ID V-220908

Accounts: Local Guest account should be disabled

NIST 800-53 IA-8 DISA CAT II CCI CCI-000804

Accounts: Lockout duration must be configured to 15 minutes or greater

Nist 800-53 AC-7 Nist 800-53 AC-19 Nist 800-171a 3.1.8[a] Nist 800-171a 3.1.8[b] Nist 800-171AR3 A.03.01.08 CMMC v2.1 AC.L2-3.1.8 PCI DSS v3.2 8.1.6 PCI DSS v3.2 8.1.7 PCI DSS v4.0 8.3.4 CSCv7 16.2 CSCv7 16.11

Accounts: Must be configured to enable Remote host allows delegation of non-exportable credentials

NIST 800-53 IA-5h

Accounts: Must disable automatically signing in the last interactive user after a system-initiated restart

NIST 800-53 IA-5(13) NIST 800-171 Rev 3 FPD 3.5.5.a NIST 800-171 A rec3 IPD A.03.01.01.c[02] NIST 800-171 A rec3 IPD A.03.01.01.c[03] NIST 800-171 A rec3 IPD A.03.01.01.d[01] NIST 800-171 A rec3 IPD A.03.01.01.d[02] NIST 800-53 AC-11 CIS CSCv7 16.11

Accounts: Must have the built-in Windows password complexity policy enabled

NIST 800-171 Rev2 3.5.1 NIST 800-171 Rev2 3.5.2 NIST 800-171A 3.5.1[c] CMMC V2.0 Level 1 / 2 / 3 IA.L1-3.5.1 CMMC V2.0 Level 1 / 2 / 3 IA.L1-3.5.2 CMMC v1 IA.1.077 AICPA TSC 2017 CC6.1 CIS CSC v8 5.5 CIS CSC v8 5.6 CIS CSC v8 6.7 CIS CSC v8 12.5 COBIT DSS05.04 ISO 27002 5.15 ISO 27018 A.10.10 NIST 800-53 IA-2 NIST 800-82 IA-2 NIST 800-161 IA-2 NIST CSF v1.1 PRAC-6 PCIDSS v3.2 8.1.1 PCIDSS v3.2 8.2 PCIDSS v4.0 7.1 PCIDSS v4.0 7.2 PCIDSS v4.0 7.2.1 PCIDSS v4.0 7.3 PCIDSS v4.0 7.3.1 PCIDSS v4.0 7.3.2 PCIDSS v4.0 7.3.3 PCIDSS v4.0 8.1 PCIDSS v4.0 8.2 PCIDSS v4.0 8.3 PCIDSS v4.0 8.3.3 PCIDSS v4.0 8.3.9 Shared Assessments SIG 2022 H.3 Tisax ISA v5.1.0 4.1.1 US FAR 52.204-21 52.204-21(b)(1)(i) US FAR 52.204-21 52.204-21(b)(1)(v) US FAR 52.204-21 52.204-21(b)(1)(vi) US HIPAA 164.312(a)(2)(i) US IRS 1075 9.3.7.2

Accounts: Must have the period of time before the bad logon counter is reset configured to 15 minutes or greater

Nist 800-53 AC-7 Nist 800-53 AC-19 Nist 800-171a 3.1.8[a] Nist 800-171a 3.1.8[b] Nist 800-171AR3 A.03.01.08 CMMC v2.1 AC.L2-3.1.8 PCI 3.2 8.1.6 PCI 3.2 8.1.7 PCI 4.0 8.3.4 CSCv7 16.2 CSCv7 16.11

Accounts: Must only allow adminis responsible for the member srv, standalone, nondomain system to have Admin rights on system

NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-53 CM-6 NIST 800-171 3.1.1 NIST 800-171 3.1.5 NIST 800-171 3.1.6 NIST 800-171 3.4.6 CMMC v2.0 L2 AC.L2-3.1.1 CMMC v2.0 L2 AC.L2-3.1.5 CMMC v2.0 L2 AC.L2-3.1.6 CMMC v2.0 L2 CM.L2-3.4.6 PCI-DSS v4.0 2.2.1 PCI-DSS v4.0 7.2.1 PCI-DSS v4.0 7.2.5

Accounts: Must require passwords

Accounts: Passwords for the built-in Administrator account must be changed at least every 60 days

NIST 800-53 CM-6b. CCI CCI-000366

Accounts: Reversible password encryption must be disabled

NIST 800-53 IA-5(13) CCE CCE-85419-0 CCI CCI-000366 MITRE TA0003

Accounts: The computer account password must not be prevented from being reset

NIST 800-53 CM-6b. CAT III CCI CCI-000366 PCI-DSS v4 10.7 PCI-DSS v4 10.7.1 PCI-DSS v4 10.7.2 PCI-DSS v4 10.7.3 MITRE Att&ck T1098

Accounts: The number of allowed bad logon attempts must be configured to three or less

Nist 800-53 AC-7 Nist 800-53 AC-19 Nist 800-171a 3.1.8[a] Nist 800-171a 3.1.8[b] Nist 800-171AR3 A.03.01.08 CMMC v2.1 AC.L2-3.1.8 PCI 3.2 8.1.6 PCI 3.2 8.1.7 PCI 4.0 8.3.4 CSCv7 16.2 CSCv7 16.11

Accounts: UIAccess applications must not be allowed to prompt for elevation without using the secure desktop

NIST 800-53 AC-6(8) CAT II CCI CCI-001084 Vuln-ID V-254483 Vuln-ID V-V-93521 Vuln-ID V-205716 Vuln-ID V-73709 Vuln-ID V-225062 CMMC v2.1 L3 SI.L3-3.14.3e MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) approval mode for the built-in Administrator must be enabled

NIST 800-53 CM-6(a) NIST 800-53 IA-11 PCI v3.2 8.1.8 PCI v4 8.2.8 SIG H.7.10 SIG H.7.10.1 SIG H.20.1 MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) must automatically deny standard user requests for elevation

NIST 800-53 CM-6(a) NIST 800-53 IA-11 MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) must be configured to detect application installations and prompt for elevation

NIST 800-53B/Rev4 AC-6 NIST 800-171 Rev2 3.1.5 NIST 800-171 Rev3 FPD 3.1.1.d NIST 800-171 Rev3 FPD 3.1.4.b NIST 800-171 Rev3 FPD 3.1.5.a NIST 800-171 Rev3 FPD 3.1.6.a NIST 800-171 Rev3 FPD 3.1.7.a NIST 800-171 Rev3 FPD 3.4.5 NIST 800-171 Rev3 03.01.01.c.03 NIST 800-171 Rev3 03.01.01.d.01 NIST 800-171 Rev3 03.01.01.d.02 NIST 800-171 Rev3 03.01.04.b NIST 800-171 Rev3 03.01.05.a NIST 800-171 Rev3 03.01.05.b NIST 800-171 Rev3 03.01.06.a NIST 800-171 Rev3 03.01.07.a NIST 800-171 Rev3 03.03.08.a NIST 800-171 Rev3 03.03.08.b NIST 800-171 Rev3 03.04.05 NIST 800-171A 3.1.5[a] NIST 800-171A 3.1.5[b] NIST 800-171A 3.1.5[c] NIST 800-171A 3.1.5[d] NIST 800-171A Rev3 A.03.01.02[02] NIST 800-171A Rev3 A.03.01.05.a PCI-DSS v4.0 1.3 PCI-DSS v4.0 7.1 PCI-DSS v4.0 7.2 PCI-DSS v4.0 7.2.1 PCI-DSS v4.0 7.2.2 PCI-DSS v4.0 7.3 PCI-DSS v4.0 7.3.1 PCI-DSS v4.0 7.3.2 PCI-DSS v4.0 7.3.3 CSCv6 5.1 CMMC v2 L2 AC.L2-3.1.5 CMMC v2.1 L1 AC.L1-b.1.i MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) must run all administrators in Admin Approval Mode, enabling UAC

NIST 800-53 rev4 CM-2(2) NIST 800-53 rev4 CM-6(1) NIST 800-53 rev5 CM-2(2) NIST 800-53 rev5 CM-6(1) MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) must virtualize file and registry write failures to per-user locations

NIST 800-53 SC-3 CAT II CCI CCI-001084 CMMC v2.1 L3 SI.L3-3.14.3e MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control (UAC) must, at a minimum, prompt administrators for consent on the secure desktop

NIST 800-53 AC-6(8) CAT II CCI CCI-001084 CSCv6 5.1 CMMC v2.1 L3 SI.L3-3.14.3e MITRE Att&k T1087 MITRE Att&k T1087.001 MITRE Att&k T1087.002 MITRE Att&k T1546.011 MITRE Att&k T1548 MITRE Att&k T1548.002

Accounts: User Account Control must only elevate UIAccess applications that are installed in secure locations

Accounts: Users must be prompted to authenticate when the system wakes from sleep (on battery)

Accounts: Users must be prompted to authenticate when the system wakes from sleep (plugged in)

Accounts: Users must be required to enter a password to access private keys stored on the computer

NIST 800-171 3.2.12 MITRE Att&ck T1552.004 MITRE Att&ck T1555 MITRE Att&ck T1110 MITRE Att&ck T1552 MITRE Att&ck T1528 MITRE Att&ck M1030 MITRE Att&ck M1041 MITRE Att&ck M1027

Auditing: generate security audits user right must only be assigned to Local Service and Network Service

NIST 800-53 AU-9 NIST 800-53 AC-6 NIST 800-53 CM-6 NIST 800-171 3.3.8 NIST 800-171 3.1.1 NIST 800-171 3.4.6 CMMC v2.0 L2 AU.L2-3.3.8 CMMC v2.0 L2 AC.L2-3.1.1 CMMC v2.0 L2 CM.L2-3.4.6 PCI-DSS v4.0 2.2.1 PCI-DSS v4.0 7.2.1 PCI-DSS v4.0 10.3.4

Auditing: Command line data must be included in process creation events

NIST 800-53 AU-3(1) CAT II CCI CCI-000135 CSCv6 16.14

Auditing: Event Log / Viewer must be protected from unauthorized modification and deletion

Auditing: Event Log size for Application log must be at least 32768 KB

CCI CCI-001849 NIST 800-53 Rev4/Rev5 AU-4

Auditing: Event Log size for Security log must be at least 196608 KB

CCI CCI-001849 NIST 800-53 rev4/rev5 AU-4

Auditing: Event Log size for System log must be at least 32768 KB

CCI CCI-001849 NIST 800-53 rev4/rev5 AU-4

Auditing: Manage auditing and security log user right must only be assigned to the Administrators group

NIST 800-53 AU-9 NIST 800-53 AU-12 NIST 800-53 AC-3 NIST 800-53 AC-6 NIST 800-53 CM-6 NIST 800-171 3.3.8 NIST 800-171 3.3.9 NIST 800-171 3.1.1 NIST 800-171 3.1.2 NIST 800-171 3.4.6 CMMC v2.0 L2 AU.L2-3.3.8 CMMC v2.0 L2 AU.L2-3.3.9 CMMC v2.0 L2 AC.L2-3.1.1 CMMC v2.0 L2 AC.L2-3.1.2 CMMC v2.0 L2 CM.L2-3.4.6 PCI-DSS v4.0 2.2.1 PCI-DSS v4.0 7.2.1 PCI-DSS v4.0 10.3.4

Auditing: Must force audit policy subcategory settings to override audit policy category settings

NIST 800-53 Rev4/Rev5 AU-12(3). CSCv6 6.2

Auditing: Permissions for the Security event log must prevent access by non-privileged accounts

Auditing: Permissions for the System event log must prevent access by non-privileged accounts

Auditing: System must be configured to audit Account Logon - Credential Validation failures

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 IA-2 NIST 800-53 IA-4 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.5.1 NIST 800-171 3.5.2 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 IA.L2-3.5.1 CMMC v2.0 L2 IA.L2-3.5.2

Auditing: System must be configured to audit Account Logon - Credential Validation successes

Auditing: System must be configured to audit Account Management - Computer Account Management successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 CM-8 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1 PCI-DSS v4.0 10.2.1 PCI-DSS v4.0 10.2.1.2 PCI-DSS v4.0 10.2.1.5

Auditing: System must be configured to audit Account Management - Other Account Management Events successes

NIST 800-53 AU-2 NIST 800-53 AU-3 NIST 800-53 AU-12 NIST 800-53 AC-2 NIST 800-53 AC-6 NIST 800-171 3.3.1 NIST 800-171 3.3.2 NIST 800-171 3.1.1 CMMC v2.0 L2 AU.L2-3.3.1 CMMC v2.0 L2 AU.L2-3.3.2 CMMC v2.0 L2 AC.L2-3.1.1

Auditing: System must be configured to audit Account Management - Security Group Management successes

Auditing: System must be configured to audit Account Management - User Account Management failures

Validation Scripts

Results

Tags

Your Privacy Choices