CSCv7|8.1

Title

Utilize Centrally Managed Anti-malware Software

Description

Utilize centrally managed anti-malware software to continuously monitor and defend each of the organization's workstations and servers.

Reference Item Details

Category: Malware Defenses

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.11 Ensure anti-virus is installed and runningUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.11 Ensure anti-virus is installed and runningUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
1.12 Ensure host-based intrusion detection tool is usedUnixCIS Amazon Linux 2 STIG v2.0.0 STIG
1.12 Ensure host-based intrusion detection tool is used - mcafeetp packageUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
1.12 Ensure host-based intrusion detection tool is used - mfetpd processUnixCIS Red Hat Enterprise Linux 7 STIG v2.0.0 STIG
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 DC
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 NG
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 DC
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.10.42.10.1 (L1) Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Member Server
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Domain Controller
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 DC
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 MS
18.10.42.10.1 Ensure 'Scan all downloaded files and attachments' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MS
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 DC
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 NG
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 DC
18.10.42.10.2 (L1) Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Domain Controller
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Member Server
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MS
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 DC
18.10.42.10.2 Ensure 'Turn off real-time protection' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 MS
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 DC
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 DC
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 NG
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.10.42.10.3 (L1) Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.42.10.3 Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Domain Controller
18.10.42.10.3 Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller
18.10.42.10.3 Ensure 'Turn on behavior monitoring' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 MS