Security Technical Implementation Guides (STIGs)


Product
Severity
SRG
CCIs
STIG IDs
Rule IDs
Tags
AppLocker
EventSentry
Security
stig
Vulnerability ID Severity Description
V-253385 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-220826 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-254351 Low Windows Server 2022 Application Compatibility Program Inventory must be prevented from collecting...
V-205691 Low Windows Server 2019 Application Compatibility Program Inventory must be prevented from collecting...
V-254372 Medium Windows Server 2022 must prevent Indexing of encrypted files
V-205694 Medium Windows Server 2019 must prevent Indexing of encrypted files
V-253409 Medium Indexing of encrypted files must be turned off
V-220855 Medium Indexing of encrypted files must be turned off
V-254334 Medium Windows Server 2022 must have WDigest Authentication disabled
V-205687 Medium Windows Server 2019 must have WDigest Authentication disabled
V-253358 Medium WDigest Authentication must be disabled
V-220800 Medium WDigest Authentication must be disabled
V-254430 Medium Windows Server 2022 local users on domain-joined member servers must not be enumerated
V-205696 Medium Windows Server 2019 local users on domain-joined member servers must not be enumerated
V-253379 Medium Local users on domain-joined computers must not be enumerated
V-220820 Medium Local users on domain-joined computers must not be enumerated
V-254346 Medium Windows Server 2022 downloading print driver packages over HTTP must be turned off
V-205688 Medium Windows Server 2019 downloading print driver packages over HTTP must be turned off
V-253374 Medium Downloading print driver packages over HTTP must be prevented
V-220815 Medium Downloading print driver packages over HTTP must be prevented
V-253275 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-220718 High Internet Information System (IIS) or its subcomponents must not be installed on a workstation
V-254347 Medium Windows Server 2022 printing over HTTP must be turned off
V-205689 Medium Windows Server 2019 printing over HTTP must be turned off
V-253376 Medium Printing over HTTP must be prevented
V-220817 Medium Printing over HTTP must be prevented
V-253395 Medium The Microsoft Defender SmartScreen for Explorer must be enabled
V-220836 Medium The Windows Defender SmartScreen for Explorer must be enabled
V-254361 Medium Windows Server 2022 Microsoft Defender antivirus SmartScreen must be enabled
V-205692 Medium Windows Server 2019 Windows Defender SmartScreen must be enabled
V-254333 Medium Windows Server 2022 must prevent the display of slide shows on the lock screen
V-205686 Medium Windows Server 2019 must prevent the display of slide shows on the lock screen
V-254371 Medium Windows Server 2022 must disable Basic authentication for RSS feeds over HTTP
V-205693 Medium Windows Server 2019 must disable Basic authentication for RSS feeds over HTTP
V-253408 Medium Basic authentication for RSS feeds over HTTP must not be used
V-220854 Medium Basic authentication for RSS feeds over HTTP must not be used
V-254348 Medium Windows Server 2022 network selection user interface (UI) must not be displayed on the logon screen
V-205690 Medium Windows Server 2019 network selection user interface (UI) must not be displayed on the logon screen
V-253378 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-220819 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-254277 Medium Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client
V-205684 Medium Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client
V-253288 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-220731 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-254276 Medium Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server
V-205683 Medium Windows Server 2019 must have the Server Message Block (SMB) v1 protocol disabled on the SMB server
V-253287 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-220730 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-254275 Medium Windows Server 2022 must not the Server Message Block (SMB) v1 protocol installed
V-205682 Medium Windows Server 2019 must not have the Server Message Block (SMB) v1 protocol installed
V-254272 Medium Windows Server 2022 must not have Simple TCP/IP Services installed
V-205680 Medium Windows Server 2019 must not have Simple TCP/IP Services installed
V-253277 Medium Simple TCP/IP Services must not be installed on the system
V-220720 Medium Simple TCP/IP Services must not be installed on the system
V-254278 Medium Windows Server 2022 must not have Windows PowerShell 2.0 installed
V-205685 Medium Windows Server 2019 must not have Windows PowerShell 2.0 installed
V-253285 Medium The Windows PowerShell 2.0 feature must be disabled on the system
V-220728 Medium The Windows PowerShell 2.0 feature must be disabled on the system
V-260482 High Ubuntu 22.04 LTS must not have the "rsh-server" package installed
V-224845 Medium The roles and features required by the system must be documented
V-224850 Medium The Fax Server role must not be installed
V-224852 Medium The Peer Name Resolution Protocol must not be installed
V-224853 Medium Simple TCP/IP Services must not be installed
V-224855 Medium The TFTP Client must not be installed
V-224856 Medium The Server Message Block (SMB) v1 protocol must be uninstalled
V-224857 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB server
V-224858 Medium The Server Message Block (SMB) v1 protocol must be disabled on the SMB client
V-224859 Medium Windows PowerShell 2.0 must not be installed
V-224914 Medium The display of slide shows on the lock screen must be disabled
V-224915 Medium WDigest Authentication must be disabled on Windows Server 2016
V-224926 Medium Downloading print driver packages over HTTP must be prevented
V-224927 Medium Printing over HTTP must be prevented
V-224928 Medium The network selection user interface (UI) must not be displayed on the logon screen
V-224931 Low The Application Compatibility Program Inventory must be prevented from collecting data and sendin...
V-224940 Medium Windows Server 2016 Windows SmartScreen must be enabled
V-236000 Medium The Windows Explorer Preview pane must be disabled for Windows Server 2016
V-224951 Medium Basic authentication for RSS feeds over HTTP must not be used
V-224952 Medium Indexing of encrypted files must be turned off
V-224976 Medium Domain controllers must run on a machine dedicated to that function
V-254269 Medium Windows Server 2022 must not have the Fax Server role installed
V-205678 Medium Windows Server 2019 must not have the Fax Server role installed
V-254271 Medium Windows Server 2022 must not have the Peer Name Resolution Protocol installed
V-205679 Medium Windows Server 2019 must not have the Peer Name Resolution Protocol installed
V-254274 Medium Windows Server 2022 must not have the TFTP Client installed
V-205681 Medium Windows Server 2019 must not have the TFTP Client installed
V-225009 Medium Local users on domain-joined computers must not be enumerated