Ensure 'Blocked File Types' is configured to match the enterprise blacklist

SedangLevel 1Tinjauan manualsharepoint

Deskripsi

A common tactic of malware is to identify the type of malicious code protection software running on the system and deactivate it. Malicious code includes viruses, worms, Trojan horses, and Spyware. Manual review.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Central Administration > Security > Define blocked file types. For each web application (Change Web Application), compare the blocked list with the enterprise file-type blacklist; every blacklisted extension must be present. ($wa.BlockedFileExtensions lists them in PowerShell.)

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Central Administration > Security > Define blocked file types > select the web application > add each blacklisted extension (one per line) > OK. Repeat for every web application.

Properti

Sistem operasi: Apa saja
Tag: sharepointmalware
Referensi: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 2.1 Ensure 'Blocked File Types' is configured to match the enterprise blacklist