CIS Microsoft Windows 10 Enterprise (Release 1803) v1.5.0 Level 1 Bitlocker Next Generation

This audit file has been deprecated and will be removed in a future update.

Name: CIS Microsoft Windows 10 Enterprise (Release 1803) v1.5.0 Level 1 Bitlocker Next Generation

Updated: 8/3/2022

Authority: Operating Systems and Applications

Plugin: Windows

Revision: 1.6

Estimated Item Count: 11

Description	Categories
18.8.5.1 (NG) Ensure 'Turn On Virtualization Based Security' is set to 'Enabled'
18.8.5.2 (NG) Ensure 'Turn On Virtualization Based Security: Select Platform Security Level' is set to 'Secure Boot and DMA Protection'
18.8.5.3 (NG) Ensure 'Turn On Virtualization Based Security: Virtualization Based Protection of Code Integrity' is set to 'Enabled with UEFI lock'
18.8.5.4 (NG) Ensure 'Turn On Virtualization Based Security: Require UEFI Memory Attributes Table' is set to 'True (checked)'
18.8.5.5 (NG) Ensure 'Turn On Virtualization Based Security: Credential Guard Configuration' is set to 'Enabled with UEFI lock'
18.9.77.1 (NG) Ensure 'Allow auditing events in Windows Defender Application Guard' is set to 'Enabled'
18.9.77.2 (NG) Ensure 'Allow data persistence for Windows Defender Application Guard' is set to 'Disabled'
18.9.77.3 (NG) Ensure 'Allow files to download and save to the host operating system from Windows Defender Application Guard' is set to 'Disabled'
18.9.77.4 (NG) Ensure 'Configure Windows Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'
18.9.77.5 (NG) Ensure 'Turn on Windows Defender Application Guard in Enterprise Mode' is set to 'Enabled'
CIS_MS_Windows_10_Enterprise_Level_1_Bitlocker_Next_Generation_v1.5.0.audit from CIS Microsoft Windows 10 Enterprise Benchmark v1.5.0