规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 55 条规则共 11,219 条第 1 / 3 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-INTUNE-DEFENDER-2.27 | Ensure 'Check For Signatures Before Running Scan' is set to 'Enabled'intune-defender · 级别 1 | intune-defender | 高 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.32 | Ensure 'Enable Dynamic Signature Dropped Event Reporting' is set to 'Dynamic Security intelligence update events will be reported.'intune-defender · 级别 1 | intune-defender | 高 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.40 | Ensure 'Remote Encryption Protection Aggressiveness' is set to 'Medium' or higherintune-defender · 级别 2 | intune-defender | 高 | 2 | 自动化 |
| TMA-INTUNE-DEFENDER-2.41 | Ensure 'Remote Encryption Protection Configured State' is set to 'Audit: Generate EDR detections without blocking' or higherintune-defender · 级别 1 | intune-defender | 高 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.46 | Ensure 'Signature Update Interval' is set to '4' or fewer, but not '0'intune-defender · 级别 1 | intune-defender | 高 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-1.3.1 | Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-1.3.2 | Ensure 'Configure the 'Block at First Sight' feature' is set to 'Enabled'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-1.8.1 | Ensure 'Turn on process scanning whenever real-time protection is enabled' is set to 'Enabled'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-1.14 | Ensure 'Turn off routine remediation' is set to 'Disabled'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.1 | Ensure 'Allow Archive Scanning' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.2 | Ensure 'Allow Behavior Monitoring' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.3 | Ensure 'Allow Cloud Protection' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.4 | Ensure 'Allow Email Scanning' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.5 | Ensure 'Allow Full Scan Removable Drive Scanning' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.6 | Ensure 'Allow On Access Protection' is set to 'Allow'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.7 | Ensure 'Allow Realtime Monitoring' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.8 | Ensure 'Allow scanning of all downloaded files and attachments' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.9 | Ensure 'Allow Script Scanning' is set to 'Allowed'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.10 | Ensure 'ASR: Block abuse of exploited vulnerable signed drivers' is set to 'Block'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.11 | Ensure 'ASR: Block Adobe Reader from creating child processes' is set to 'Block'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.12 | Ensure 'ASR: Block all Office applications from creating child processes' is set to 'Audit' or higherintune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.13 | Ensure 'ASR: Block credential stealing from the Windows local security authority subsystem' is set to 'Block'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.14 | Ensure 'ASR: Block executable content from email client and webmail' is set to 'Block'intune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.15 | Ensure 'ASR: Block executable files from running unless they meet a prevalence, age, or trusted list criterion' is set to 'Audit' or higherintune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |
| TMA-INTUNE-DEFENDER-2.16 | Ensure 'ASR: Block execution of potentially obfuscated scripts' is set to 'Audit' or higherintune-defender · 级别 1 | intune-defender | 中 | 1 | 自动化 |