Home
Security Hardening
DISA STIG Windows Defender Antivirus V2R3

DISA STIG Windows Defender Antivirus V2R3

WNDF-AV-000039 – Windows Defender AV must be configured to prevent user and apps from accessing dangerous websites.
Details Enable Windows Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that...
WNDF-AV-000025 – Windows Defender AV must be configured to scan removable drives.
Details This policy setting allows you to manage whether or not to scan for malicious software and unwanted software in...
WNDF-AV-000040 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level High – 4>2
Details This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level....
WNDF-AV-000026 – Windows Defender AV must be configured to perform a weekly scheduled scan.
Details This policy setting allows you to specify the day of the week on which to perform a scheduled scan....
WNDF-AV-000040 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level High – Enabled
Details This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level....
WNDF-AV-000027 – Windows Defender AV must be configured to turn on e-mail scanning.
Details This policy setting allows you to configure e-mail scanning. When e-mail scanning is enabled the engine will parse the...
WNDF-AV-000041 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium – 2>2
Details This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level....
WNDF-AV-000028 – Windows Defender AV spyware definition age must not exceed 7 days.
Details This policy setting allows you to define the number of days that must pass before spyware definitions are considered...
WNDF-AV-000041 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium – Enabled
Details This policy setting allows you to customize which automatic remediation action will be taken for each threat alert level....
WNDF-AV-000029 – Windows Defender AV virus definition age must not exceed 7 days.
Details This policy setting allows you to define the number of days that must pass before virus definitions are considered...

Prev Next

DISA STIG Windows Defender Antivirus V2R3

WNDF-AV-000039 – Windows Defender AV must be configured to prevent user and apps from accessing dangerous websites.

WNDF-AV-000025 – Windows Defender AV must be configured to scan removable drives.

WNDF-AV-000040 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level High – 4>2

WNDF-AV-000026 – Windows Defender AV must be configured to perform a weekly scheduled scan.

WNDF-AV-000040 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level High – Enabled

WNDF-AV-000027 – Windows Defender AV must be configured to turn on e-mail scanning.

WNDF-AV-000041 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium – 2>2

WNDF-AV-000028 – Windows Defender AV spyware definition age must not exceed 7 days.

WNDF-AV-000041 – Windows Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium – Enabled

WNDF-AV-000029 – Windows Defender AV virus definition age must not exceed 7 days.