Details

Malicious software can establish a base on individual desktops and servers. Employing an automated mechanism to detect this type of software will aid in elimination of the software from the operating system.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

If no anti-virus software is in use, install Windows Defender or third-party anti-virus.

Open ‘PowerShell’.

Enter ‘Install-WindowsFeature -Name Windows-Defender’

For third-party anti-virus, install per anti-virus instructions and disable Windows Defender.

Open ‘PowerShell’.

Enter ‘Uninstall-WindowsFeature -Name Windows-Defender’.

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2016_V2R3_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-6b.
• CAT|I
• CCI|CCI-000366
• Rule-ID|SV-224829r569237_rule
• STIG-ID|WN16-00-000120
• STIG-Legacy|SV-87893
• STIG-Legacy|V-73241
• Vuln-ID|V-224829

Source

• Tenable.com/audits