TMA-CHROME-1.2.1

Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'

ÉlevéeNiveau 1Automatiséechrome

Description

The setting determines the functionality of Safe Browsing. - Disabled (0): Safe Browsing protection applies to all resources - Enabled (1), with a list of 1 or more sites: Means Safe Browsing will trust the domains you designate. It won't check them for dangerous resources such as phishing, malware, or unwanted software. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or download dangerous files. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains is missing or empty, otherwise the configured entries.

Méthode de vérification

Méthode d'audit: Registre Windows

registry

$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }

Sortie attendue: absent

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Configure the list of domains on which Safe Browsing will not trigger warnings. = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Google\Chrome\SafeBrowsingAllowlistDomains after reviewing them.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: chromebrowsercis-l1
Référence: CIS Google Chrome Benchmark v3.0.0 - 1.2.1 Ensure 'Configure the list of domains on which Safe Browsing will not trigger warnings' is set to 'Disabled'

Vérifier cet hôte

Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.

shell

tmaegis scan --target chrome