Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
55 règles trouvéessur 16 927Page 1 sur 3
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-INTUNE-DEFENDER-2.27 | Ensure 'Check For Signatures Before Running Scan' is set to 'Enabled'intune-defender · Niveau 1 | intune-defender | Élevée | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.32 | Ensure 'Enable Dynamic Signature Dropped Event Reporting' is set to 'Dynamic Security intelligence update events will be reported.'intune-defender · Niveau 1 | intune-defender | Élevée | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.40 | Ensure 'Remote Encryption Protection Aggressiveness' is set to 'Medium' or higherintune-defender · Niveau 2 | intune-defender | Élevée | 2 | Automatisée |
| TMA-INTUNE-DEFENDER-2.41 | Ensure 'Remote Encryption Protection Configured State' is set to 'Audit: Generate EDR detections without blocking' or higherintune-defender · Niveau 1 | intune-defender | Élevée | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.46 | Ensure 'Signature Update Interval' is set to '4' or fewer, but not '0'intune-defender · Niveau 1 | intune-defender | Élevée | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-1.3.1 | Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-1.3.2 | Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-1.8.1 | Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-1.14 | Ensure 'Turn off routine remediation' is set to 'Disabled'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.1 | Ensure 'Allow Archive Scanning' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.2 | Ensure 'Allow Behavior Monitoring' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.3 | Ensure 'Allow Cloud Protection' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.4 | Ensure 'Allow Email Scanning' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.5 | Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.6 | Ensure 'Allow On Access Protection' is set to 'Allow'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.7 | Ensure 'Allow Realtime Monitoring' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.8 | Ensure 'Allow scanning of all downloaded files and attachments' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.9 | Ensure 'Allow Script Scanning' is set to 'Allowed'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.10 | Ensure 'ASR: Block abuse of exploited vulnerable signed drivers' is set to 'Block'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.11 | Ensure 'ASR: Block Adobe Reader from creating child processes' is set to 'Block'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.12 | Ensure 'ASR: Block all Office applications from creating child processes' is set to 'Audit' or higherintune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.13 | Ensure 'ASR: Block credential stealing from the Windows local security authority subsystem' is set to 'Block'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.14 | Ensure 'ASR: Block executable content from email client and webmail' is set to 'Block'intune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.15 | Ensure 'ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion' is set to 'Audit' or higherintune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |
| TMA-INTUNE-DEFENDER-2.16 | Ensure 'ASR: Block execution of potentially obfuscated scripts' is set to 'Audit' or higherintune-defender · Niveau 1 | intune-defender | Moyenne | 1 | Automatisée |