Home
Security Hardening
DISA STIG Windows Defender Antivirus V2R3

DISA STIG Windows Defender Antivirus V2R3

WNDF-AV-000001 – Windows Defender AV must be configured to block the Potentially Unwanted Application (PUA) feature – PUA feature.
Details After enabling this feature, PUA protection blocking takes effect on endpoint clients after the next signature update or computer...
WNDF-AV-000003 – Windows Defender AV must be configured to automatically take action on all detected tasks.
Details This policy setting allows you to configure whether Windows Defender automatically takes action on all detected threats. The action...
WNDF-AV-000004 – Windows Defender AV must be configured to run and scan for malware and other potentially unwanted software.
Details This policy setting turns off Windows Defender Antivirus. If you enable this policy setting Windows Defender Antivirus does not...
WNDF-AV-000017 – Windows Defender AV Group Policy settings must take priority over the local preference settings.
Details This policy setting configures a local override for the configuration to turn on real-time protection. This setting can only...
WNDF-AV-000018 – Windows Defender AV must monitor for incoming and outgoing files.
Details This policy setting allows you to configure monitoring for incoming and outgoing files without having to turn off monitoring...
WNDF-AV-000019 – Windows Defender AV must be configured to monitor for file and program activity.
Details This policy setting allows you to configure monitoring for file and program activity. If you enable or do not...
WNDF-AV-000020 – Windows Defender AV must be configured to scan all downloaded files and attachments.
Details This policy setting allows you to configure scanning for all downloaded files and attachments. If you enable or do...
WNDF-AV-000005 – Windows Defender AV must be configured to not exclude files for scanning.
Details This policy setting allows you to disable scheduled and real-time scanning for files under the paths specified or for...
WNDF-AV-000021 – Windows Defender AV must be configured to always enable real-time protection.
Details This policy setting turns off real-time protection prompts for known malware detection. Windows Defender Antivirus alerts you when malware...
WNDF-AV-000006 – Windows Defender AV must be configured to not exclude files opened by specified processes.
Details This policy setting allows you to disable scheduled and real-time scanning for any file opened by any of the...

DISA STIG Windows Defender Antivirus V2R3

WNDF-AV-000001 – Windows Defender AV must be configured to block the Potentially Unwanted Application (PUA) feature – PUA feature.

WNDF-AV-000003 – Windows Defender AV must be configured to automatically take action on all detected tasks.

WNDF-AV-000004 – Windows Defender AV must be configured to run and scan for malware and other potentially unwanted software.

WNDF-AV-000017 – Windows Defender AV Group Policy settings must take priority over the local preference settings.

WNDF-AV-000018 – Windows Defender AV must monitor for incoming and outgoing files.

WNDF-AV-000019 – Windows Defender AV must be configured to monitor for file and program activity.

WNDF-AV-000020 – Windows Defender AV must be configured to scan all downloaded files and attachments.

WNDF-AV-000005 – Windows Defender AV must be configured to not exclude files for scanning.

WNDF-AV-000021 – Windows Defender AV must be configured to always enable real-time protection.

WNDF-AV-000006 – Windows Defender AV must be configured to not exclude files opened by specified processes.