TMAegisBeta

Trình khám phá quy tắc

Duyệt mọi quy tắc tăng cường bảo mật trong danh mục. Lọc theo nền tảng, mức độ nghiêm trọng, cấp hồ sơ và khả năng kiểm tra tự động.

Tìm thấy 55 quy tắctrên 16.927Trang 1 / 3

IDTiêu đềMức độ nghiêm trọng
TMA-INTUNE-DEFENDER-2.27Ensure 'Check For Signatures Before Running Scan' is set to 'Enabled'intune-defender · Cấp 1Cao
TMA-INTUNE-DEFENDER-2.32Ensure 'Enable Dynamic Signature Dropped Event Reporting' is set to 'Dynamic Security intelligence update events will be reported.'intune-defender · Cấp 1Cao
TMA-INTUNE-DEFENDER-2.40Ensure 'Remote Encryption Protection Aggressiveness' is set to 'Medium' or higherintune-defender · Cấp 2Cao
TMA-INTUNE-DEFENDER-2.41Ensure 'Remote Encryption Protection Configured State' is set to 'Audit: Generate EDR detections without blocking' or higherintune-defender · Cấp 1Cao
TMA-INTUNE-DEFENDER-2.46Ensure 'Signature Update Interval' is set to '4' or fewer, but not '0'intune-defender · Cấp 1Cao
TMA-INTUNE-DEFENDER-1.3.1Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-1.3.2Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-1.8.1Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-1.14Ensure 'Turn off routine remediation' is set to 'Disabled'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.1Ensure 'Allow Archive Scanning' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.2Ensure 'Allow Behavior Monitoring' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.3Ensure 'Allow Cloud Protection' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.4Ensure 'Allow Email Scanning' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.5Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.6Ensure 'Allow On Access Protection' is set to 'Allow'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.7Ensure 'Allow Realtime Monitoring' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.8Ensure 'Allow scanning of all downloaded files and attachments' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.9Ensure 'Allow Script Scanning' is set to 'Allowed'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.10Ensure 'ASR: Block abuse of exploited vulnerable signed drivers' is set to 'Block'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.11Ensure 'ASR: Block Adobe Reader from creating child processes' is set to 'Block'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.12Ensure 'ASR: Block all Office applications from creating child processes' is set to 'Audit' or higherintune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.13Ensure 'ASR: Block credential stealing from the Windows local security authority subsystem' is set to 'Block'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.14Ensure 'ASR: Block executable content from email client and webmail' is set to 'Block'intune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.15Ensure 'ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion' is set to 'Audit' or higherintune-defender · Cấp 1Trung bình
TMA-INTUNE-DEFENDER-2.16Ensure 'ASR: Block execution of potentially obfuscated scripts' is set to 'Audit' or higherintune-defender · Cấp 1Trung bình