Accounts: Local accounts with blank passwords must be restricted to prevent access from the network
3ef29cdc-8018-48a9-b210-13e18cf14d07
Accounts: Must have the built-in Windows password complexity policy enabled
be6a2756-21d7-452c-b0a1-e6032f14f422
Accounts: Must require passwords
00279417-0255-4ff4-8b5c-dbb7866085e2
Auditing: Command line data must be included in process creation events
c787dcd2-355b-4ff5-8265-3eb860f11670
Auditing: Must force audit policy subcategory settings to override audit policy category settings
9929dbd2-a4fb-40ea-9a2d-8a1db39a5729
Auditing: System must be configured to audit Policy Change - Audit Policy Change failures
d7a89b74-da6a-4b5b-a3f7-1ead34cbc837
Auditing: System must be configured to audit Policy Change - Audit Policy Change successes
23e1491c-ff4e-45b1-be08-fe8c2a6209da
Auditing: System must be configured to audit Privilege Use - Sensitive Privilege Use failures
9345b515-8295-47a6-a353-fcdc72ff45ea
Auditing: System must be configured to audit Privilege Use - Sensitive Privilege Use successes
cc84129b-345b-4e6d-91d4-39bc1e8ee328
Auditing: System must be configured to audit System - Other System Events failures
501bae98-8af9-4dd4-b71e-30fc202958d5
Auditing: System must be configured to audit System - Other System Events successes
ffcd14a5-06ae-44e3-846b-c0661de732a6
Auditing: System must be configured to audit System - Security State Change successes
38e08d5e-0bc4-41e9-aec3-d30e8b243af6
Auditing: System must be configured to audit System - Security System Extension successes
cac02598-d29e-489c-afe0-8349bd676bf6
Autoplay: Must be turned off for non-volume devices
d2ac90ea-b1de-49bb-aa59-fe8b271c7c2b
Autoplay: Should be disabled for all drives
2cb75d59-8ef3-4fa3-90e1-8bec9e51c703
Autorun: behavior must be configured to prevent Autorun commands
746184bf-3f96-4365-8bb4-c7abf8a772ac
File System: Local volumes must be formatted with NTFS
b6493fb9-ad83-494c-93e3-3dbfaeb9b303
File System: Windows must prevent Indexing of encrypted files
138956a4-8987-4f7f-b830-bf58e4ca7778
General: AntiVirus/Antimalware Status
6d48a68a-3e44-4a00-8d42-670e41c9942c
General: Windows Defender SmartScreen must be enabled (Server)
4595ee72-d404-4b45-aae4-102fefd1a165
General: Windows firewall status
1f229f09-4c15-4bfe-b9f7-ed63d03cd70e
Network Access: Do not allow anonymous enumeration of Security Account Manager (SAM) accounts
752e0588-decf-451b-9fef-cc3235765d54
Network Access: Do not allow anonymous enumeration of shares
0d97c353-2198-4a09-a41b-9df3498067dc
Network Access: LAN Manager authentication level must be configured to send NTLMv2 response only and refuse LM and NTLM
2718ea3f-5f25-4e6d-a693-3c426f14357f
Network Access: System must be configured to require a strong session key
4332cad0-613a-47fb-ba71-a0ad576651b5
PowerShell: Script block logging must be enabled
ab3e18c8-5f9b-4a08-8474-ff10619965bd
Privacy: The location feature must be turned off
b5e9fae5-f161-4c39-a915-7282a3896dd9
Privacy: Windows Telemetry must not be set to Full
0001b667-c79a-4486-802c-32d860cae99e
Shutdown: Clear virtual memory pagefile
bbf7d8e7-9ffe-4643-8910-55c5a6f9f824
Threat Intel: Attack Vector: Disable WinRM (Windows Remote Management)
1c1e3c39-98a3-41cb-8bf1-1a5f36a6c950
Virtualization: Hyper-V: Virtual Disks Folder Free Space Under 2GB
58be460d-237f-404f-a74c-14defec187f3
Windows OS: Build Version Check (End Of Life)
07b6c273-cdb3-4a4d-889d-d1d54dc0eb5f
Windows OS: Build Version Check (OS Updated)
c7b058ab-6360-4b5d-9cd2-45eafef8c489
Windows OS: Windows Activation Status
de96957d-bcf1-4d41-be46-aa14b00135f3