Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-253385 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-220826 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-254351 Low Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting...
V-205691 Low Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting...
V-254372 Medium Windows Server 2022 must prevent Indexing of encrypted files
V-205694 Medium Windows Server 2019 must prevent Indexing of encrypted files
V-253409 Medium Indexing of encrypted files must be turned off
V-220855 Medium Indexing of encrypted files must be turned off
V-254334 Medium Windows Server 2022 must have WDigest Authentication disabled
V-205687 Medium Windows Server 2019 must have WDigest Authentication disabled
V-253358 Medium WDigest Authentication must be disabled
V-220800 Medium WDigest Authentication must be disabled
V-254430 Medium Windows Server 2022 local users on domain-joined member servers must not be enumerated
V-205696 Medium Windows Server 2019 local users on domain-joined member servers must not be enumerated
V-253379 Medium Local users on domain-joined computers must not be enumerated
V-220820 Medium Local users on domain-joined computers must not be enumerated
V-254346 Medium Windows Server 2022 downloading print driver packages over HTTP must be turned off
V-205688 Medium Windows Server 2019 downloading print driver packages over HTTP must be turned off
V-253374 Medium Downloading print driver packages over HTTP must be prevented
V-220815 Medium Downloading print driver packages over HTTP must be prevented
V-253275 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-220718 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-254347 Medium Windows Server 2022 printing over HTTP must be turned off
V-205689 Medium Windows Server 2019 printing over HTTP must be turned off
V-253376 Medium Printing over HTTP must be prevented
V-220817 Medium Printing over HTTP must be prevented
V-253395 Medium The Microsoft Defender SmartScreen for Explorer must be enabled
V-220836 Medium The Windows Defender SmartScreen for Explorer must be enabled
V-254361 Medium Windows Server 2022 Microsoft Defender antivirus SmartScreen must be enabled
V-205692 Medium Windows Server 2019 Windows Defender SmartScreen must be enabled
V-254333 Medium Windows Server 2022 must prevent the display of slide shows on the lock screen
V-205686 Medium Windows Server 2019 must prevent the display of slide shows on the lock screen
V-254371 Medium Windows Server 2022 must disable Basic authentication for RSS feeds over HTTP
V-205693 Medium Windows Server 2019 must disable Basic authentication for RSS feeds over HTTP
V-253408 Medium Basic authentication for RSS feeds over HTTP must not be used
V-220854 Medium Basic authentication for RSS feeds over HTTP must not be used
V-254348 Medium Windows Server 2022 network selection user interface (UI) must not be displayed on the logon screen
V-205690 Medium Windows Server 2019 network selection user interface (UI) must not be displayed on the logon screen
V-253378 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-220819 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-254277 Medium Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client
V-205684 Medium Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client
V-253288 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-220731 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-254276 Medium Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server
V-205683 Medium Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server
V-253287 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-220730 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-254275 Medium Windows Server 2022 must not the Server Message Block (SMB) v1 protocol installed
V-205682 Medium Windows Server 2019 must not have the Server Message Block (SMB) v1 protocol installed
V-254272 Medium Windows Server 2022 must not have Simple TCP/IP Services installed
V-205680 Medium Windows Server 2019 must not have Simple TCP/IP Services installed
V-253277 Medium Simple TCP/IP Services must not be installed on the system
V-220720 Medium Simple TCP/IP Services must not be installed on the system
V-254278 Medium Windows Server 2022 must not have Windows PowerShell 2.0 installed
V-205685 Medium Windows Server 2019 must not have Windows PowerShell 2.0 installed
V-253285 Medium The Windows PowerShell 2.0 feature must be disabled on the system
V-220728 Medium The Windows PowerShell 2.0 feature must be disabled on the system
V-260482 High Ubuntu 22.04 LTS must not have the "rsh-server" package installed
V-224845 Medium The roles and features required by the system must be documented
V-224850 Medium The Fax Server role must not be installed
V-224852 Medium The Peer Name Resolution Protocol must not be installed
V-224853 Medium Simple TCP/IP Services must not be installed
V-224855 Medium The TFTP Client must not be installed
V-224856 Medium The Server Message Block (SMB) v1 protocol must be uninstalled
V-224857 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-224858 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-224859 Medium Windows PowerShell 2.0 must not be installed
V-224914 Medium The display of slide shows on the lock screen must be disabled
V-224915 Medium WDigest Authentication must be disabled on Windows Server 2016
V-224926 Medium Downloading print driver packages over HTTP must be prevented
V-224927 Medium Printing over HTTP must be prevented
V-224928 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-224931 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-224940 Medium Windows Server 2016 Windows SmartScreen must be enabled
V-224951 Medium Basic authentication for RSS feeds over HTTP must not be used
V-224952 Medium Indexing of encrypted files must be turned off
V-224976 Medium Domain controllers must run on a machine dedicated to that function
V-254269 Medium Windows Server 2022 must not have the Fax Server role installed
V-205678 Medium Windows Server 2019 must not have the Fax Server role installed
V-254271 Medium Windows Server 2022 must not have the Peer Name Resolution Protocol installed
V-205679 Medium Windows Server 2019 must not have the Peer Name Resolution Protocol installed
V-254274 Medium Windows Server 2022 must not have the TFTP Client installed
V-205681 Medium Windows Server 2019 must not have the TFTP Client installed
V-225009 Medium Local users on domain-joined computers must not be enumerated
V-218792 Medium The IIS 10.0 web server must not perform user management for hosted applications
V-218793 Medium The IIS 10.0 web server must only contain functions necessary for operation
V-218794 Medium The IIS 10.0 web server must not be both a website server and a proxy server
V-218795 High All IIS 10.0 web server sample code, example applications, and tutorials must be removed from a p...
V-218796 Medium The accounts created by uninstalled features (i.e., tools, utilities, specific, etc.) must be del...
V-218797 Medium The IIS 10.0 web server must be reviewed on a regular basis to remove any Operating System featur...
V-218798 Medium The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS she...
V-218799 Medium The IIS 10.0 web server must have Web Distributed Authoring and Versioning (WebDAV) disabled
V-228572 Medium An IIS Server configured to be a SMTP relay must require authentication
V-268325 Medium The Request Smuggling filter must be enabled
V-268480 Medium The macOS system must disable Location Services
V-268481 Medium The macOS system must disable Bonjour multicast
V-268483 Medium The macOS system must disable Internet Sharing
V-268486 Medium The macOS system must disable FaceTime.app
V-268487 Medium The macOS system must disable the iCloud Calendar services
V-268488 Medium The macOS system must disable iCloud Reminders
V-268489 Medium The macOS system must disable iCloud Address Book
V-268490 Medium The macOS system must disable iCloud Mail
V-268491 Medium The macOS system must disable iCloud Notes
V-268492 Medium The macOS system must disable the camera
V-268493 Medium The macOS system must disable Siri
V-269096 Medium The macOS system must disable sending audio recordings and transcripts to Apple
V-269566 Medium The macOS system must disable sending search data from Spotlight to Apple
V-268496 Medium The macOS system must disable Apple ID setup during Setup Assistant
V-268497 Medium The macOS system must disable Privacy Setup services during Setup Assistant
V-268498 Medium The macOS system must disable iCloud storage setup during Setup Assistant
V-268500 Medium The macOS system must disable Siri Setup during Setup Assistant
V-268501 Medium The macOS system must disable iCloud Keychain Sync
V-268502 Medium The macOS system must disable iCloud Document Sync
V-268503 Medium The macOS system must disable iCloud Bookmarks
V-268504 Medium The macOS system must disable iCloud Photo Library
V-268506 Medium The macOS system must disable the System Settings pane for Wallet and Apple Pay
V-268507 Medium The macOS system must disable the system settings pane for Siri
V-268519 Medium The macOS system must disable AppleID and internet Account Modification
V-268521 Medium The macOS system must disable Content Caching service
V-268522 Medium The macOS system must disable iCloud Desktop and Document folder sync
V-268523 Medium The macOS system must disable iCloud Game Center
V-268524 Medium The macOS system must disable iCloud Private Relay
V-268525 Medium The macOS system must disable Find My service
V-268526 Medium The macOS system must disable Personalized Advertising
V-268527 Medium The macOS system must disable sending Siri and Dictation information to Apple
V-268528 Medium The macOS system must enforce On Device Dictation
V-268529 Medium The macOS system must disable Dictation
V-268530 Medium The macOS system must disable Printer Sharing
V-268531 Medium The macOS system must disable Remote Management
V-268532 Medium The macOS system must disable the Bluetooth System Settings pane
V-268533 Medium The macOS system must disable the iCloud Freeform services
V-268559 Medium The macOS system must disable the TouchID prompt during Setup Assistant
V-268560 Medium The macOS system must disable the Screen Time prompt during Setup Assistant
V-268561 Medium The macOS system must disable Unlock with Apple Watch during Setup Assistant
V-268563 Medium The macOS system must disable proximity-based password sharing requests
V-268564 Medium The macOS system must disable Erase Content and Settings
V-268572 Medium The macOS system must disable Genmoji
V-268573 Medium The macOS system must disable Apple Intelligence Image Generation
V-268574 Medium The macOS system must disable Apple Intelligence Writing Tools
V-278011 Medium Windows Server 2025 must have the roles and features required by the system documented
V-278015 Medium Windows Server 2025 must not have the Fax Server role installed
V-278019 Medium Windows Server 2025 must not have the Peer Name Resolution Protocol installed
V-278020 Medium Windows Server 2025 must not have Simple TCP/IP Services installed
V-278022 Medium Windows Server 2025 must not have the TFTP Client installed
V-278023 Medium Windows Server 2025 must not have the Server Message Block (SMB) v1 protocol installed
V-278024 Medium Windows Server 2025 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server
V-278025 Medium Windows Server 2025 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client
V-278026 Medium Windows Server 2025 must not have Windows PowerShell 2.0 installed
V-278080 Medium Windows Server 2025 must prevent the display of slide shows on the lock screen
V-278093 Medium Windows Server 2025 downloading print driver packages over HTTP must be turned off
V-278094 Medium Windows Server 2025 printing over HTTP must be turned off
V-278095 Medium Windows Server 2025 network selection user interface (UI) must not be displayed on the logon screen
V-278098 Low Windows Server 2025 Application Compatibility Program Inventory must be prevented from collecting...
V-278108 Medium Windows Server 2025 Microsoft Defender antivirus SmartScreen must be enabled
V-278118 Medium Windows Server 2025 must disable Basic authentication for RSS feeds over HTTP
V-278119 Medium Windows Server 2025 must prevent Indexing of encrypted files
V-278144 Medium Windows Server 2025 domain controllers must run on a machine dedicated to that function
V-278179 Medium Windows Server 2025 local users on domain-joined member servers must not be enumerated
V-277087 Medium The macOS system must disable Location Services
V-277088 Medium The macOS system must disable Bonjour multicast
V-277090 Medium The macOS system must disable Internet Sharing
V-277093 Medium The macOS system must disable FaceTime.app
V-277094 Medium The macOS system must disable the iCloud Calendar services
V-277095 Medium The macOS system must disable iCloud Reminders
V-277096 Medium The macOS system must disable iCloud Address Book
V-277097 Medium The macOS system must disable iCloud Mail
V-277098 Medium The macOS system must disable iCloud Notes
V-277099 Medium The macOS system must disable the camera
V-277100 Medium The macOS system must disable Siri
V-277103 Medium The macOS system must disable sending audio recordings and transcripts to Apple
V-277104 Medium The macOS system must disable sending search data from Spotlight to Apple
V-277105 Medium The macOS system must disable Apple ID setup during Setup Assistant
V-277106 Medium The macOS system must disable Privacy Setup services during Setup Assistant
V-277107 Medium The macOS system must disable iCloud storage setup during Setup Assistant
V-277109 Medium The macOS system must disable Siri Setup during Setup Assistant
V-277110 Medium The macOS system must disable iCloud Keychain Sync
V-277111 Medium The macOS system must disable iCloud Document Sync
V-277112 Medium The macOS system must disable iCloud Bookmarks
V-277113 Medium The macOS system must disable iCloud Photo Library
V-277115 Medium The macOS system must disable the System Settings pane for Wallet and Apple Pay
V-277116 Medium The macOS system must disable the system settings pane for Siri
V-277124 Medium The macOS system must disable Airplay Receiver
V-277128 Medium The macOS system must disable AppleID and internet Account Modification
V-277129 Medium The macOS system must disable Content Caching service
V-277130 Medium The macOS system must disable iCloud Desktop and Document folder sync
V-277131 Medium The macOS system must disable iCloud Game Center
V-277132 Medium The macOS system must disable iCloud Private Relay
V-277133 Medium The macOS system must disable Find My service
V-277134 Medium The macOS system must disable Personalized Advertising
V-277135 Medium The macOS system must disable sending Siri and Dictation information to Apple
V-277136 Medium The macOS system must enforce On Device Dictation
V-277137 Medium The macOS system must disable Dictation
V-277138 Medium The macOS system must disable Printer Sharing
V-277139 Medium The macOS system must disable Remote Management
V-277140 Medium The macOS system must disable the Bluetooth System Settings pane
V-277141 Medium The macOS system must disable the iCloud Freeform services
V-277169 Medium The macOS system must disable the TouchID prompt during Setup Assistant
V-277170 Medium The macOS system must disable the Screen Time prompt during Setup Assistant
V-277171 Medium The macOS system must disable Unlock with Apple Watch during Setup Assistant
V-277173 Medium The macOS system must disable proximity-based password sharing requests
V-277174 Medium The macOS system must disable Erase Content and Settings
V-277182 Medium The macOS system must disable Genmoji AI Creation
V-277183 Medium The macOS system must disable Apple Intelligence Image Playground
V-277184 Medium The macOS system must disable Apple Intelligence Writing Tools
V-279329 Medium The macOS system must disable Apple Intelligence during Setup Assistant