Detections
Analytics

CCI|CCI-001242

Title

The organization configures malicious code protection mechanisms to perform real-time scans of files from external sources at endpoints as the files are downloaded, opened, or executed in accordance with organizational security policy.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
DTAM001 - McAfee VirusScan On-Access General Policies must be configured to enable on-access scanning at system startup.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM001 - McAfee VirusScan On-Access Scanner General Settings must be configured to enable on-access scanning at system startup.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM002 - McAfee VirusScan On-Access General Policies must be configured to scan boot sectors.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM002 - McAfee VirusScan On-Access Scanner General Settings must be configured to scan boot sectors.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM003 - McAfee VirusScan On-Access General Policies must be configured to scan floppy during shutdown.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM003 - McAfee VirusScan On-Access Scanner General Settings must be configured to scan floppy during shutdown.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM005 - McAfee VirusScan On-Access General Policies must be configured to prevent users from removing messages from the list.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM005 - McAfee VirusScan On-Access Scanner General Settings must be configured to prevent users from removing messages from the list.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM009 - McAfee VirusScan On-Access General Policies must be configured to log the scan sessions.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM009 - McAfee VirusScan On-Access Scanner General Settings must be configured to log the scan sessions.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB - bLimitSizeWindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM010 - McAfee VirusScan On-Access General Policies log file size must be restricted and be configured to at least 10MB - dwMaxLogSizeMBWindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM010 - McAfee VirusScan On-Access Scanner General Settings log file size must be restricted and be configured to at least 10MB - bLimitSizeWindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM010 - McAfee VirusScan On-Access Scanner General Settings log file size must be restricted and be configured to at least 10MB - dwMaxLogSizeMBWindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM012 - McAfee VirusScan On-Access General Policies must be configured to log the session summary.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM012 - McAfee VirusScan On-Access Scanner General Settings must be configured to log the session summary.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM013 - McAfee VirusScan On-Access General Policies must be configured to log any failure to scan encrypted files.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM013 - McAfee VirusScan On-Access Scanner General Settings must be configured to log any failure to scan encrypted files.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM090 - McAfee VirusScan On-Access General Policies must be configured to enable scanning of scripts.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM090 - McAfee VirusScan On-Access Scanner General Settings must be configured to enable scanning of scripts.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM091 - McAfee VirusScan On-Access General Policies must be configured to block the connection when a threatened file is detected in a shared folder.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM091 - McAfee VirusScan On-Access Scanner General Settings must be configured to block the connection when a threatened file is detected in a shared folder.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM092 - McAfee VirusScan On-Access General Policies must be configured to unblock connections after a minimum of 30 minutes.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM092 - McAfee VirusScan On-Access Scanner General Settings must be configured to unblock connections after a minimum of 30 minutes.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM093 - McAfee VirusScan On-Access General Policies must be configured to block the connection when a file with a potentially unwanted program is detected in a shared folder.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM093 - McAfee VirusScan On-Access Scanner General Settings must be configured to block the connection when a file with a potentially unwanted program is detected in a shared folder.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM100 - McAfee VirusScan On-Access Default Processes Policies must be configured to use only one scanning policy for all processes, unless the use of Low-Risk Processes/High-Risk Processes has been documented with, and approved by, the IAO/IAM.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM100 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to use only one scanning policy for all processes, unless the use of Low-Risk Processes/High-Risk Processes has been documented with, and approved by, the IAO/IAM.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM101 - McAfee VirusScan On-Access Default Processes Policies must be configured to scan when writing to disk.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM101 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan when writing to disk.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM102 - McAfee VirusScan On-Access Default Processes Policies must be configured to scan when reading from disk.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM102 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan when reading from disk.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM103 - McAfee VirusScan On-Access Default Processes Policies must be configured to scan all files.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM103 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan all files.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM104 - McAfee VirusScan On-Access Default Processes Policies must be configured to find unknown unwanted programs and trojans.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM104 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to find unknown unwanted programs and trojans.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM105 - McAfee VirusScan On-Access Default Processes Policies must be configured to find unknown macro viruses.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM105 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to find unknown macro viruses.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM106 - McAfee VirusScan On-Access Default Processes Policies must be configured to scan inside archives.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM106 - McAfee VirusScan On-Access Scanner All Processes settings must be configured to scan inside archive files.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM110 - McAfee VirusScan On-Access Default Processes Policies Actions for When a threat is found must be configured to clean files automatically as first action.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM110 - McAfee VirusScan On-Access Scanner All Processes settings actions, When a threat is found must be configured to clean files automatically as first action.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM111 - McAfee VirusScan On-Access Default Processes Policies actions for When a threat is found must be configured delete files automatically if first action fails.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM111 - McAfee VirusScan On-Access Scanner All Processes settings actions, When a threat is found must be configured to delete files automatically if first action fails.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM130 - McAfee VirusScan Buffer Overflow Protection Buffer Overflow Settings must be configured to enable Buffer Overflow Protection.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM130 - McAfee VirusScan Buffer Overflow Protection Policies must be configured to enable Buffer Overflow Protection.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM131 - McAfee VirusScan Buffer Overflow Protection Buffer Overflow Settings must be configured for Protection mode.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM131 - McAfee VirusScan Buffer Overflow Protection Policies must be configured for Protection mode.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1
DTAM132 - McAfee VirusScan Buffer Overflow Protection Buffer Overflow Settings must be configured to display a dialog box when a buffer overflow is detected.WindowsDISA McAfee VirusScan 8.8 Local Client STIG v6r1
DTAM132 - McAfee VirusScan Buffer Overflow Protection Policies must be configured to display a dialog box when a buffer overflow is detected.WindowsDISA McAfee VirusScan 8.8 Managed Client STIG v6r1