TMAegis
Weitere Regeln für sharepoint

TMA-SHAREPOINT-2.1

Ensure 'Blocked File Types' is configured to match the enterprise blacklist

MittelStufe 1Manuelle Prüfungsharepoint

Beschreibung

A common tactic of malware is to identify the type of malicious code protection software running on the system and deactivate it. Malicious code includes viruses, worms, Trojan horses, and Spyware. Manual review.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Central Administration > Security > Define blocked file types. For each web application (Change Web Application), compare the blocked list with the enterprise file-type blacklist; every blacklisted extension must be present. ($wa.BlockedFileExtensions lists them in PowerShell.)

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Central Administration > Security > Define blocked file types > select the web application > add each blacklisted extension (one per line) > OK. Repeat for every web application.

Eigenschaften

Betriebssysteme
Beliebig
Tags
sharepointmalware
Referenz
CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.1 Ensure 'Blocked File Types' is configured to match the enterprise blacklist