Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
2,626 rules foundof 11,219Page 1 of 106
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-WIN-SMB1 | Ensure SMBv1 server is disabledwindows · Level 1 | windows | Critical | 1 | Automated |
| TMA-WIN-FIREWALL | Ensure Windows Firewall is enabled for all profileswindows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN-LMCOMPAT | Ensure LAN Manager authentication level is NTLMv2 only (refuse LM and NTLM)windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN-RDP-NLA | Ensure Network Level Authentication is required for RDPwindows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.1 | Ensure 'Enforce password history' is set to '24 or more password(s)'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.2 | Ensure 'Maximum password age' is set to '365 or fewer days, but not 0'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.3 | Ensure 'Minimum password age' is set to '1 or more day(s)'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.4 | Ensure 'Minimum password length' is set to '14 or more character(s)'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.5 | Ensure 'Password must meet complexity requirements' is set to 'Enabled'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.6 | Ensure 'Relax minimum password length limits' is set to 'Enabled'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.1.7 | Ensure 'Store passwords using reversible encryption' is set to 'Disabled'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.2.1 | Ensure 'Account lockout duration' is set to '15 or more minute(s)'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.2.2 | Ensure 'Account lockout threshold' is set to '5 or fewer invalid logon attempt(s), but not 0'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-1.2.4 | Ensure 'Reset account lockout counter after' is set to '15 or more minute(s)'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.1 | Ensure 'Access Credential Manager as a trusted caller' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.2 | Ensure 'Access this computer from the network' is set to 'Administrators, Remote Desktop Users'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.3 | Ensure 'Act as part of the operating system' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.4 | Ensure 'Adjust memory quotas for a process' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.5 | Ensure 'Allow log on locally' is set to 'Administrators, Users'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.6 | Ensure 'Allow log on through Remote Desktop Services' is set to 'Administrators, Remote Desktop Users'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.7 | Ensure 'Back up files and directories' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.8 | Ensure 'Change the system time' is set to 'Administrators, LOCAL SERVICE'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.9 | Ensure 'Change the time zone' is set to 'Administrators, LOCAL SERVICE, Users'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.10 | Ensure 'Create a pagefile' is set to 'Administrators'windows · Level 1 | windows | High | 1 | Automated |
| TMA-WIN10-2.2.11 | Ensure 'Create a token object' is set to 'No One'windows · Level 1 | windows | High | 1 | Automated |