McAfee Policy Auditor Content Update Summary. New Checks

Transcription

1 2016-May-12 McAfee Policy Auditor Content Update Summary Product / Version Content Version McAfee Policy Auditor 6.x 1185 New Checks Oval ID oval:com.mcafee.oval.common:def: oval:com.mcafee.oval.common:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: Adobe Acrobat Security Update for APSB16-14 Vulnerability Adobe Reader Security Update for APSB16-14 Vulnerability MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows 8.1 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows 8.1 and Windows Server 2012 R2 for x64 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows 7 and Windows Server 2008 R2 SP1 for x64 (KB ) MS Security Update for Microsoft.NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows 7 SP1 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows Vista, Windows 7, Server 2008 (KB ) MS Security Update for Microsoft.NET Framework 4.6 and for Windows Server 2012 for x64 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows 7, Vista, Server 2008, and Server 2008 R2 for x64 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework 4.6 on Windows 7, Windows Vista, Server 2008, Server 2008 R2 for x64 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows Server 2012 for x64 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework 3.5 on Windows 8.1 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework 4.6 and for Windows 8.1 (KB ) MS Security Update for Microsoft.NET Framework 3.5 on Windows Server 2012 for x64 (KB )

2 oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework 4.6 on Windows 7, Windows Vista and Windows Server 2008 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework 3.5 on Windows 8.1 and Windows Server 2012 R2 for x64 (KB ) MS Security Update for Microsoft.NET Framework 4.6 and for Windows 8.1 and Server 2012 R2 for x64 (KB ) MS Security Update for Microsoft.NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 for x64 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Microsoft.NET Framework on Windows 8.1 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows Server 2012 R2 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows 10 Version 1511 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows 10 (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows 10 Version 1511 for x64-based Systems (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows 8.1 (KB ) MS Security Update for Adobe Flash Player for Windows 10 for x64-based Systems (KB ) MS Security Update for Adobe Flash Player for Windows 8.1 for x64-based Systems (KB ) oval:com.mcafee.oval.gen:def: MS Security Update for Adobe Flash Player for Windows Server 2012 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Embedded Standard 7 (KB )

3 oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows 7 (KB )

4 oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Vista for x64-based Systems (KB )

5 oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Embedded Standard 7 for x64-based Systems (KB ) MS Security Update for Windows 8.1 (KB ) MS Security Update for Windows Server 2012 (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Security Update for Windows 8.1 for x64-based Systems (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows 7 (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2012 R2 (KB ) MS Security Update for Windows Embedded Standard 7 (KB ) MS Security Update for Windows Vista (KB ) MS Security Update for Windows Server 2008 R2 x64 Edition (KB ) MS Security Update for Windows 7 for x64-based Systems (KB ) MS Security Update for Windows Server 2008 (KB ) MS Security Update for Windows Vista (KB )

6 oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Security Update for Windows Vista for x64-based Systems (KB ) MS Security Update for Windows Server 2008 x64 Edition (KB ) MS Cumulative Security Update for Internet Explorer 11 for Windows Embedded Standard 7 for x64-based Systems (KB ) oval:com.mcafee.oval.gen:def: MS Cumulative Security Update for Internet Explorer 11 for Windows 7 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: MS Cumulative Security Update for Internet Explorer 11 for Windows Embedded Standard 7 (KB ) MS Cumulative Security Update for Internet Explorer 9 for Windows Vista (KB ) MS Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 x64 Edition (KB ) oval:com.mcafee.oval.gen:def: MS Cumulative Security Update for Internet Explorer 11 for Windows 8.1 (KB ) oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval.gen:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: MS Cumulative Update for Windows 10 Version 1511 (KB ) MS Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB ) MS Cumulative Security Update for Internet Explorer 9 for Windows Vista for x64-based Systems (KB ) MS Cumulative Security Update for Internet Explorer 11 for Windows Server 2012 R2 (KB ) MS Cumulative Security Update for Internet Explorer 10 for Windows Server 2012 (KB ) MS Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB ) MS Cumulative Security Update for Internet Explorer 11 for Windows 7 for x64-based Systems (KB ) MS Cumulative Update for Windows 10 for x64-based Systems (KB ) MS Cumulative Update for Windows 10 Version 1511 for x64-based Systems (KB ) MS Cumulative Security Update for Internet Explorer 11 for Windows 8.1 for x64-based Systems (KB ) MS Cumulative Update for Windows 10 (KB ) MS Security Update for Microsoft Office 2016 (KB ) MS Security Update for Microsoft Office Word 2016 (KB ) MS Security Update for Microsoft Office 2007 Service Pack 3 (KB ) MS Security Update for Microsoft Office 2007 Service Pack 3 (KB ) MS Security Update for Microsoft Office 2010 SP2 (KB ) MS Security Update for Microsoft Office Sharepoint Server 2010 SP2 Word Automation Services (KB )

7 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:mil.disa.fso.windows:def:3928 oval:mil.disa.fso.windows:def:3929 oval:mil.disa.fso.windows:def:4296 oval:mil.disa.fso.windows:def:4297 oval:mil.disa.fso.windows:def:4298 oval:mil.disa.fso.windows:def:4299 oval:mil.disa.fso.windows:def:4300 oval:mil.disa.fso.windows:def:4301 oval:mil.disa.fso.windows:def:4302 oval:mil.disa.fso.windows:def:4334 oval:mil.disa.fso.windows:def:4335 oval:mil.disa.fso.windows:def:4336 oval:mil.disa.fso.windows:def:4337 oval:mil.disa.fso.windows:def:4338 oval:mil.disa.fso.windows:def:4339 oval:mil.disa.fso.windows:def:4340 oval:mil.disa.fso.windows:def:4397 MS Security Update for Microsoft Office Web Apps 2010 SP2 (KB ) MS Security Update for Microsoft Office Word Viewer 2003 (KB ) MS Security Update for Microsoft Office Word 2010 SP2 (KB ) MS Security Update for Microsoft Office Word 2013 SP1 (KB ) MS Security Update for Microsoft Office Word 2007 SP3 (KB ) Adobe Acrobat Security Update for APSB16-14 Vulnerability Adobe Reader Security Update for vulnerability APSB16-14 for Mac OS Adobe Reader Security Update for APSB16-14 Vulnerability MS Security Update for Microsoft Office 2013 SP1 (KB ) MS Security Update for Microsoft Office Compatibility Pack SP3 (KB ) Test if the system logon banner is set correctly - /etc/gdm3/greeter.gsettings Service - xinetd - running state Service - isc-dhcp-server - running state Service - squid3 - running state Service - iptables-persistent - running state Configure Network Time Protocol (NTP) in /etc/init.d/ntp Legal Notice Display Legal Banner Dialog Box WINGE WINCC WINCC WINCC WINCC WINCC WINCC UR: Deny log on as a batch job - Non-Domain Systems UR: Deny log on as a batch job - Domain Systems UR: Deny log on as a service - Non-Domain Systems UR: Deny log on as a service - Domain Systems UR: Deny log on locally - Non-Domain Systems UR: Deny log on locally - Domain Systems Local admin accounts filtered token policy enabled on domain systems Software Certificate Installation Files

8 oval:mil.disa.fso.windows:def:4399 oval:mil.disa.fso.windows:def:4400 oval:mil.disa.fso.windows:def:4401 oval:mil.disa.fso.windows:def:4402 oval:mil.disa.fso.windows:def:4403 oval:mil.disa.fso.windows:def:4404 oval:mil.disa.fso.windows:def:4405 oval:mil.disa.fso.windows:def:4406 oval:mil.disa.fso.windows:def:4407 oval:mil.disa.fso.windows:def:4408 oval:mil.disa.fso.windows:def:4409 oval:mil.disa.fso.windows:def:4410 oval:mil.disa.fso.windows:def:4411 oval:mil.disa.fso.windows:def:4412 oval:mil.disa.fso.windows:def:4413 oval:mil.disa.fso.windows:def:4414 oval:mil.disa.fso.windows:def:4415 oval:mil.disa.fso.windows:def:4416 oval:mil.disa.fso.windows:def:4417 oval:mil.disa.fso.windows:def:4418 oval:mil.disa.fso.windows:def:4419 oval:mil.disa.fso.windows:def:4420 oval:mil.disa.fso.windows:def:4421 oval:mil.disa.fso.windows:def:4742 oval:mil.disa.fso.windows:def:4743 oval:mil.disa.fso.windows:def:4744 oval:mil.disa.fso.windows:def:4745 oval:mil.disa.fso.windows:def:4746 oval:mil.disa.fso.windows:def:4747 oval:mil.disa.fso.windows:def:4794 oval:mil.disa.fso.windows:def:4843 oval:mil.disa.fso.windows:def:4844 oval:mil.disa.fso.windows:def:4845 oval:mil.disa.fso.windows:def:4846 UR: Access this computer from the network UR: Adjust memory quotas for a process UR: Allow log on locally UR: Back up files and directories UR: Bypass traverse checking UR: Change the system time UR: Change the time zone UR: Create a pagefile UR: Create global objects UR: Create symbolic links UR: Force shutdown from a remote system UR: Impersonate a client after authentication UR: Increase a process working set UR: Increase scheduling priority UR: Load and unload device drivers UR: Modify firmware environment values UR: Perform volume maintenance tasks UR: Profile single process UR: Profile system performance UR: Remove computer from docking station UR: Restore files and directories UR: Shut down the system UR: Take ownership of files or other objects UR: Deny access to this computer from the network - Non-Domain Systems UR: Deny access to this computer from the network - Domain Systems UR: Deny log on through Remote Desktop Services UR: Deny log on through Remote Desktop Services - Non-Domain Systems UR: Deny log on through Remote Desktop Services - Domain Systems WINGE Always Install with Elevated Privileges Disabled WINPK DoD Root Certificate WINPK External CA Root Certificate WINPK DoD Interoperability Root CA 1 to DoD Root CA 2 cross certificate WINPK

9 oval:mil.disa.fso.windows:def:4865 oval:mil.disa.fso.windows:def:4905 oval:mil.disa.fso.windows:def:4911 oval:mil.disa.fso.windows:def:4917 oval:mil.disa.fso.windows:def:4923 oval:mil.disa.fso.windows:def:4929 oval:mil.disa.fso.windows:def:4935 oval:mil.disa.fso.windows:def:4940 oval:mil.disa.fso.windows:def:4946 oval:mil.disa.fso.windows:def:4952 oval:mil.disa.fso.windows:def:4958 oval:mil.disa.fso.windows:def:4966 oval:mil.disa.fso.windows:def:4974 oval:mil.disa.fso.windows:def:4983 UR: Manage auditing and security log WINER WINER WINER WINER WINER WINER WINER WINER WINER WINER The Windows Error Reporting Service must be running and configured to start automatically. NTFS Requirement Passwords must be required for user accounts Updated Checks Oval ID oval:com.mcafee.oval:def:8119 oval:com.mcafee.oval:def:7203 oval:com.mcafee.oval:def:7199 oval:com.mcafee.oval:def:6946 oval:com.mcafee.oval:def:6922 oval:com.mcafee.oval:def:6898 oval:com.mcafee.oval:def:6894 oval:com.mcafee.oval:def:6890 oval:com.mcafee.oval:def:6886 oval:com.mcafee.oval:def:6882 oval:com.mcafee.oval:def:6878 oval:com.mcafee.oval:def:6874 oval:com.mcafee.oval:def:7833 oval:com.mcafee.oval:def:7807 oval:com.mcafee.oval:def:7768 oval:com.mcafee.oval:def:7755 Service - vsftpd - running state Password policy, Minimum password age - PASS_MIN_DAYS Password policy, Maximum password age - PASS_MAX_DAYS Test the permissions of the file - /etc/shadow Test the permissions of the file - /etc/passwd Test the permissions of the file- /etc/group Test the permissions of the file - /etc/crontab Test the permissions of the directory - /etc/cron.weekly Test the permissions of the directory - /etc/cron.monthly Test the permissions of the directory - /etc/cron.hourly Test the permissions of the directory - /etc/cron.daily Test the permissions of the directory - /etc/cron.d Service - dovecot - running state Service - cups - running state Service - avahi-daemon - running state Service - autofs - running state

10 oval:com.mcafee.oval:def:7742 oval:com.mcafee.oval:def:6835 oval:com.mcafee.oval:def:7276 oval:com.mcafee.oval:def:7245 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:78712 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:8665 oval:com.mcafee.oval:def:8666 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:50114 oval:com.mcafee.oval:def:79005 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: Service - auditd - running state Root is the only account with uid zero. Test the group ower of the file - /etc/cron.allow Test the group owner of the file - /etc/at.allow Test if the system login banner text is set correctly - /etc/issue Password policy, Password warning age - PASS_WARN_AGE Test the owner of the file - /etc/shadow Test the group owner of the file - /etc/shadow Test the owner of the file - /etc/passwd Test the group owner of the file - /etc/passwd Test the owner of the file - /etc/group Test the group owner of the file - /etc/group Test the owner of the file - /etc/crontab Test the group owner of the file - /etc/crontab Test the owner of the directory - /etc/cron.weekly Test the group owner of the directory - /etc/cron.weekly Test the owner of the directory - /etc/cron.monthly Test the group owner of the directory - /etc/cron.monthly Test the owner of the directory - /etc/cron.hourly Test the permissions of the file - /etc/issue Test the group owner of the directory - /etc/cron.hourly Test the owner of directory - /etc/cron.daily Test the group owner of directory - /etc/cron.daily Test the owner of the directory - /etc/cron.d Test the enable or disable status for - SSH X11 forwarding Test the enable / disable status for - SSH integration with.rhosts Test the enable / disable status for - SSH host-based authentication Service - snmpd - running state Test the enable / disable status for - Root login via SSH Limit access to the root account from su Test the enable / disable status for - net.ipv4.conf.all.accept_source_route Test the enable / disable status for - net.ipv4.icmp_echo_ignore_broadcasts Test the enable / disable status for - net.ipv4.conf.all.send_redirects Service - crond - running state

11 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:78877 oval:com.mcafee.oval:def:99165 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:50620 oval:com.mcafee.oval:def:50617 oval:com.mcafee.oval:def:50614 oval:com.mcafee.oval:def:50583 oval:com.mcafee.oval:def:50638 oval:com.mcafee.oval:def:50586 oval:com.mcafee.oval:def:50612 oval:com.mcafee.oval:def:50580 oval:com.mcafee.oval:def:50610 oval:com.mcafee.oval:def:50671 oval:com.mcafee.oval:def:50674 oval:com.mcafee.oval:def:50676 oval:com.mcafee.oval:def: oval:mil.disa.fso.windows:def:3651 oval:mil.disa.fso.windows:def:3650 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def:78873 oval:com.mcafee.oval:def:78697 oval:com.mcafee.oval:def:78708 oval:com.mcafee.oval:def:77441 Service - anacron - running state Test the enable / disable status for - net.ipv4.conf.all.secure_redirects Test the owner of the file - /etc/motd Inetd based service - ntalk - running state Inetd based service - discard (udp) - running state Inetd based service - tftp - running state Inetd based service - telnet - running state Inetd based service - exec - running state Inetd based service - echo (tcp) - running state Inetd based service - discard (tcp) - running state Inetd based service - daytime (tcp) - running state Inetd based service - chargen (tcp) - running state Inetd based service - time - running status Test the enable / disable status for - net.ipv4.ip_forward Test the enable / disable status for - net.ipv4.conf.default.secure_redirects Test the enable / disable status for - net.ipv4.conf.default.accept_redirects Test the enable or disable status for - net.ipv4.conf.all.accept_redirects Test the enable / disable status for - net.ipv4.tcp_syncookies Test the enable / disable status for - net.ipv4.conf.default.rp_filter Test the enable / disable status for - net.ipv4.conf.default.accept_source_route Test the enable / disable status for - net.ipv4.conf.all.rp_filter Test the enable / disable status for - net.ipv4.conf.all.log_martians Test if the Access control files contain a plus sign - /etc/shadow Test if the Access control files contain a plus sign - /etc/passwd Test if the Access control files contain a plus sign - /etc/group Inetd based service - login - running state Bad Logon Attempts Lockout Duration Inetd based service - daytime (udp) - running state Inetd based service - echo (udp) - running state Test the owner of the file - /etc/issue Test the permissions of the file - /etc/at.allow Test the permissions of the file - /etc/hosts.allow Service - rpcbind - running state

12 oval:com.mcafee.oval:def:78787 oval:com.mcafee.oval:def:78813 oval:com.mcafee.oval:def:78791 oval:com.mcafee.oval:def:78733 oval:com.mcafee.oval:def:78795 oval:com.mcafee.oval:def:78870 oval:com.mcafee.oval:def:78859 oval:com.mcafee.oval:def:78869 oval:com.mcafee.oval:def:79006 oval:com.mcafee.oval:def:78792 oval:com.mcafee.oval:def:78861 oval:com.mcafee.oval:def:78874 oval:com.mcafee.oval:def:97902 oval:com.mcafee.oval:def:78713 oval:com.mcafee.oval:def:77324 oval:com.mcafee.oval:def:78699 oval:com.mcafee.oval:def:78707 oval:com.mcafee.oval:def:78840 oval:com.mcafee.oval:def:78786 oval:com.mcafee.oval:def:78890 oval:com.mcafee.oval:def:78716 oval:mil.disa.fso.windows:def:3652 oval:mil.disa.fso.windows:def:3653 oval:mil.disa.fso.windows:def:3654 oval:mil.disa.fso.windows:def:3655 oval:mil.disa.fso.windows:def:3656 oval:mil.disa.fso.windows:def:3657 oval:mil.disa.fso.windows:def:3864 oval:mil.disa.fso.windows:def:3659 oval:mil.disa.fso.windows:def:3872 oval:mil.disa.fso.windows:def:3869 oval:mil.disa.fso.windows:def:3870 oval:mil.disa.fso.windows:def:3873 oval:mil.disa.fso.windows:def:3874 Test the group owner of the file - /etc/hosts.deny Test the group owner of the file - /etc/ssh/sshd_config Test the group owner of the file - /etc/issue Test the permissions of the file - /etc/ssh/sshd_config Test the group owner of the file - /etc/motd Test the owner of the file - /etc/hosts.deny Test the owner of the file - /etc/at.allow Test the owner of the file - /etc/hosts.allow Test the enable / disable status for - net.ipv4.conf.default.send_redirects Test the group owner of the file - /etc/issue.net Test the owner of the file - /etc/cron.allow Test the owner of the file - /etc/issue.net Test the enable / disable status for - SSH Permit Empty Passwords Test the permissions of the file - /etc/issue.net Service - apache2 - running state Test the permissions of the file - /etc/cron.allow Test the permissions of the file - /etc/hosts.deny Test the group owner of the directory - /etc/cron.d Test the group owner of the file - /etc/hosts.allow Test the owner of the file - /etc/ssh/sshd_config Test the permissions of the file - /etc/motd Bad Logon Counter Reset Maximum Password Age Minimum Password Age Minimum Password Length Microsoft Strong Password Filtering Reversible Password Encryption Internet Information System (IIS) UR: Act as part of the operating system IPSec Exemptions TS/RDS - Time Limit for Disc. Session TS/RDS - Time Limit for Idle Session TS/RDS - Remote User Connections TS/RDS - Drive Redirection

13 oval:mil.disa.fso.windows:def:3871 oval:mil.disa.fso.windows:def:3862 oval:mil.disa.fso.windows:def:3673 oval:mil.disa.fso.windows:def:3674 oval:mil.disa.fso.windows:def:3880 oval:mil.disa.fso.windows:def:3876 oval:mil.disa.fso.windows:def:3877 oval:mil.disa.fso.windows:def:3878 oval:mil.disa.fso.windows:def:3882 oval:mil.disa.fso.windows:def:3879 oval:mil.disa.fso.windows:def:3658 oval:mil.disa.fso.windows:def:3675 oval:mil.disa.fso.windows:def:3676 oval:mil.disa.fso.windows:def:3677 oval:mil.disa.fso.windows:def:3678 oval:mil.disa.fso.windows:def:3679 oval:mil.disa.fso.windows:def:3680 oval:mil.disa.fso.windows:def:3681 oval:mil.disa.fso.windows:def:3884 oval:mil.disa.fso.windows:def:3682 oval:mil.disa.fso.windows:def:3683 oval:mil.disa.fso.windows:def:3736 oval:mil.disa.fso.windows:def:3684 oval:mil.disa.fso.windows:def:3685 oval:mil.disa.fso.windows:def:3686 oval:mil.disa.fso.windows:def:3687 oval:mil.disa.fso.windows:def:3688 oval:mil.disa.fso.windows:def:3689 oval:mil.disa.fso.windows:def:3690 oval:mil.disa.fso.windows:def:3691 oval:mil.disa.fso.windows:def:3692 oval:mil.disa.fso.windows:def:3693 oval:mil.disa.fso.windows:def:3694 oval:mil.disa.fso.windows:def:3695 Name-Release Attacks Unsupported Service Packs UR: Debug Programs UR: Deny access to this computer from the network Unnecessary Features Installed Network Mapper I/O Driver Network Responder Driver Network - WCN Wireless Configuration Windows Customer Experience Improvement Program Driver Install - Device Driver Search Prompt Password Uniqueness Disable Guest Account Limit Blank Passwords Rename Built-in Administrator Account Rename Built-in Guest Account Audit Access to Global System Objects Audit Backup and Restore Privileges Audit Policy Subcategory Setting Format and Eject Removable Media Secure Print Driver Installation Secure Removable Media - CD-ROM Removable media devices - Floppies Encrypting and Signing of Secure Channel Traffic Encryption of Secure Channel Traffic Signing of Secure Channel Traffic Computer Account Password Reset Maximum Machine Account Password Age Strong Session Key Display of Last User Name Ctrl+Alt+Del Security Attention Sequence Caching of logon credentials Password Expiration Warning Domain Controller authentication for unlock Smart Card Removal Option

14 oval:mil.disa.fso.windows:def:3696 oval:mil.disa.fso.windows:def:3697 oval:mil.disa.fso.windows:def:3698 oval:mil.disa.fso.windows:def:3699 oval:mil.disa.fso.windows:def:3700 oval:mil.disa.fso.windows:def:3701 oval:mil.disa.fso.windows:def:3702 oval:mil.disa.fso.windows:def:3703 oval:mil.disa.fso.windows:def:3704 oval:mil.disa.fso.windows:def:3705 oval:mil.disa.fso.windows:def:3706 oval:mil.disa.fso.windows:def:3707 oval:mil.disa.fso.windows:def:3708 oval:mil.disa.fso.windows:def:3709 oval:mil.disa.fso.windows:def:3710 oval:mil.disa.fso.windows:def:3711 oval:mil.disa.fso.windows:def:3712 oval:mil.disa.fso.windows:def:3713 oval:mil.disa.fso.windows:def:3714 oval:mil.disa.fso.windows:def:3715 oval:mil.disa.fso.windows:def:3716 oval:mil.disa.fso.windows:def:3719 oval:mil.disa.fso.windows:def:3720 oval:mil.disa.fso.windows:def:3721 oval:mil.disa.fso.windows:def:3722 oval:mil.disa.fso.windows:def:3723 oval:mil.disa.fso.windows:def:3724 oval:mil.disa.fso.windows:def:3725 oval:mil.disa.fso.windows:def:3726 oval:mil.disa.fso.windows:def:3727 oval:mil.disa.fso.windows:def:3728 oval:mil.disa.fso.windows:def:3729 oval:mil.disa.fso.windows:def:3730 oval:mil.disa.fso.windows:def:3731 SMB Client Packet Signing (Always) SMB Client Packet Signing (if server agrees) Unencrypted Password is Sent to SMB Server Idle Time Before Suspending a Session. SMB Server Packet Signing (Always) SMB Server Packet Signing (if client agrees) Forcibly Disconnect when Logon Hours Expire Restrict Anonymous SAM Enumeration Restrict Anonymous Network Shares Storage of Passwords and Credentials Everyone Anonymous Rights Anonymous Access to Named Pipes Remotely Accessible Registry Paths Remotely Accessible Registry Paths and Sub-Paths Anonymous Access to Named Pipes and Shares Anonymous Access to Network Shares Sharing and Security Model for Local Accounts LAN Manager Hash Value Stored Force Logoff When Logon Hours Expire LanMan Authentication Level LDAP Client Signing Recovery Console - Automatic Logon Recovery Console - SET Command Display Shutdown Button Clear System Pagefile FIPS Compliant Algorithms Case Insensitivity for Non-Windows Global System Objects Permission Strength UAC - Admin Approval Mode UAC - Admin Elevation Prompt UAC - User Elevation Prompt UAC - Application Installations UAC - Application Elevations UAC - UIAccess Application Elevation

15 oval:mil.disa.fso.windows:def:3732 oval:mil.disa.fso.windows:def:3733 oval:mil.disa.fso.windows:def:3734 oval:mil.disa.fso.windows:def:3737 oval:mil.disa.fso.windows:def:3738 oval:mil.disa.fso.windows:def:3739 oval:mil.disa.fso.windows:def:3740 oval:mil.disa.fso.windows:def:3865 oval:mil.disa.fso.windows:def:3866 oval:mil.disa.fso.windows:def:3867 oval:mil.disa.fso.windows:def:3868 oval:mil.disa.fso.windows:def:3741 oval:mil.disa.fso.windows:def:3742 oval:mil.disa.fso.windows:def:3743 oval:mil.disa.fso.windows:def:3744 oval:mil.disa.fso.windows:def:3745 oval:mil.disa.fso.windows:def:3717 oval:mil.disa.fso.windows:def:3718 oval:mil.disa.fso.windows:def:3784 oval:mil.disa.fso.windows:def:3785 oval:mil.disa.fso.windows:def:3786 oval:mil.disa.fso.windows:def:3787 oval:mil.disa.fso.windows:def:3789 oval:mil.disa.fso.windows:def:3790 oval:mil.disa.fso.windows:def:3791 oval:mil.disa.fso.windows:def:3792 oval:mil.disa.fso.windows:def:3788 oval:mil.disa.fso.windows:def:3793 oval:mil.disa.fso.windows:def:3794 oval:mil.disa.fso.windows:def:3795 oval:mil.disa.fso.windows:def:3796 oval:mil.disa.fso.windows:def:3797 oval:mil.disa.fso.windows:def:3798 oval:mil.disa.fso.windows:def:3799 UAC - All Admin Approval Mode UAC - Secure Desktop Mode UAC - Non UAC Compliant Application Virtualization Disable Automatic Logon Disable IP Source Routing Disable ICMP Redirect TCP Connection Keep-Alive Time TS/RDS - Password Prompting TS/RDS - Set Encryption Level TS/RDS - Do Not Use Temp Folders TS/RDS - Delete Temp Folders Disable Router Discovery Safe DLL Search Mode Screen Saver Grace Period TCP Data Retransmissions Audit Log Warning Level Session Security for NTLM SSP Based Servers Session Security for NTLM SSP Based Clients Windows Peer to Peer Networking Prohibit Network Bridge Elevate when setting a network s location Direct Access - Route Through Internal Network 6to4 State ISATAP State Teredo State IP-HTTPS State IPv6 Transition Network - Windows Connect Now Wizards Windows Update Point and Print Driver Search Device Install - PnP Interface Remote Access Device Install - Generic Driver Error Report Device Install - Drivers System Restore Point Prevent device metadata retrieval from Internet Prevent Windows Update for device driver search

16 oval:mil.disa.fso.windows:def:3800 oval:mil.disa.fso.windows:def:3801 oval:mil.disa.fso.windows:def:3802 oval:mil.disa.fso.windows:def:3803 oval:mil.disa.fso.windows:def:3804 oval:mil.disa.fso.windows:def:3806 oval:mil.disa.fso.windows:def:3807 oval:mil.disa.fso.windows:def:3808 oval:mil.disa.fso.windows:def:3811 oval:mil.disa.fso.windows:def:3885 oval:mil.disa.fso.windows:def:3815 oval:mil.disa.fso.windows:def:3816 oval:mil.disa.fso.windows:def:3817 oval:mil.disa.fso.windows:def:3818 oval:mil.disa.fso.windows:def:3819 oval:mil.disa.fso.windows:def:3820 oval:mil.disa.fso.windows:def:3821 oval:mil.disa.fso.windows:def:3822 oval:mil.disa.fso.windows:def:3823 oval:mil.disa.fso.windows:def:3824 oval:mil.disa.fso.windows:def:3825 oval:mil.disa.fso.windows:def:3826 oval:mil.disa.fso.windows:def:3827 oval:mil.disa.fso.windows:def:3828 oval:mil.disa.fso.windows:def:3829 oval:mil.disa.fso.windows:def:3830 oval:mil.disa.fso.windows:def:3831 oval:mil.disa.fso.windows:def:3832 oval:mil.disa.fso.windows:def:3833 oval:mil.disa.fso.windows:def:3834 oval:mil.disa.fso.windows:def:3835 oval:mil.disa.fso.windows:def:3836 oval:mil.disa.fso.windows:def:3837 oval:mil.disa.fso.windows:def:3838 Group Policy - Registry Policy Processing HTTP Printer Drivers Event Viewer Events.asp Links Handwriting personalization data sharing Handwriting Recognition Error Reporting Internet Download / Online Ordering Internet File Association Service Printing Over HTTP Order Prints Online Windows Update Device Drive Searching Classic Logon Power Mgmt - Password Wake on Battery Power Mgmt - Password Wake When Plugged In Remote Assistance - Offer Remote Assistance Remote Assistance - Solicit Remote Assistance Remote Assistance - Session Logging RPC - Unauthenticated RPC Clients RPC - Endpoint Mapper Authentication MSDT Interactive Communication Windows Online Troubleshooting Service Disable PerfTrack Application Compatibility Program Inventory Default Autorun Behavior Disable Media Autoplay Autoplay for non-volume devices Enumerate Administrator Accounts on Elevation Gadgets - More Gadgets Link Gadgets - Unsigned Gadgets Gadgets - User Installed Gadgets Maximum Log Size - Application Maximum Log Size - Security Maximum Log Size - Setup Maximum Log Size - System Game Explorer Information Downloads

17 oval:mil.disa.fso.windows:def:3839 oval:mil.disa.fso.windows:def:3840 oval:mil.disa.fso.windows:def:3841 oval:mil.disa.fso.windows:def:3842 oval:mil.disa.fso.windows:def:3843 oval:mil.disa.fso.windows:def:3844 oval:mil.disa.fso.windows:def:3845 oval:mil.disa.fso.windows:def:3846 oval:mil.disa.fso.windows:def:3847 oval:mil.disa.fso.windows:def:3848 oval:mil.disa.fso.windows:def:3849 oval:mil.disa.fso.windows:def:3850 oval:mil.disa.fso.windows:def:3851 oval:mil.disa.fso.windows:def:3852 oval:mil.disa.fso.windows:def:3853 oval:mil.disa.fso.windows:def:3854 oval:mil.disa.fso.windows:def:3855 oval:mil.disa.fso.windows:def:3856 oval:mil.disa.fso.windows:def:3857 oval:mil.disa.fso.windows:def:3858 oval:mil.disa.fso.windows:def:3859 oval:mil.disa.fso.windows:def:3754 oval:mil.disa.fso.windows:def:3778 oval:mil.disa.fso.windows:def:3755 oval:mil.disa.fso.windows:def:3756 oval:mil.disa.fso.windows:def:3757 oval:mil.disa.fso.windows:def:3758 oval:mil.disa.fso.windows:def:3780 oval:mil.disa.fso.windows:def:3759 oval:mil.disa.fso.windows:def:3760 oval:mil.disa.fso.windows:def:3761 oval:mil.disa.fso.windows:def:3781 oval:mil.disa.fso.windows:def:3762 oval:mil.disa.fso.windows:def:3763 Turn Off Game Updates Prevent Joining Homegroup TS/RDS - Prevent Password Saving RSS Attachment Downloads Search - Encrypted Files Indexing Search - Exchange Folder Indexing Windows Anytime Upgrade Defender - SpyNet Reporting WINER WINER WINER Explorer Data Execution Prevention Windows Explorer - Heap Termination Windows Explorer - Shell Protocol Protected Mode Windows Installer - IE Security Prompt Windows Installer - User Control Windows Installer - Vendor Signed Updates Logon - Report Logon Server Media DRM - Internet Access Media Player - First Use Dialog Boxes Media Player - Disable Automatic Updates Audit - Other Account Management Events - Success Audit - Process Creation - Success Audit - Security Group Management - Success Audit - Security State Change - Success Audit - Security System Extension - Success Audit - Sensitive Privilege Use - Success Audit - Special Logon - Success Audit - System Integrity - Success Audit - User Account Management - Success Audit - Audit Policy Change - Success Audit - Authentication Policy Change - Success Audit - Computer Account Management - Success Audit - Credential Validation - Success

18 oval:mil.disa.fso.windows:def:3764 oval:mil.disa.fso.windows:def:3779 oval:mil.disa.fso.windows:def:3765 oval:mil.disa.fso.windows:def:3766 oval:mil.disa.fso.windows:def:3767 oval:mil.disa.fso.windows:def:3768 oval:mil.disa.fso.windows:def:3769 oval:mil.disa.fso.windows:def:3770 oval:mil.disa.fso.windows:def:3771 oval:mil.disa.fso.windows:def:3772 oval:mil.disa.fso.windows:def:3773 oval:mil.disa.fso.windows:def:3774 oval:mil.disa.fso.windows:def:3775 oval:mil.disa.fso.windows:def:3776 oval:mil.disa.fso.windows:def:3777 oval:mil.disa.fso.windows:def:3735 oval:mil.disa.fso.windows:def:3746 oval:mil.disa.fso.windows:def:3747 oval:mil.disa.fso.windows:def:3748 oval:mil.disa.fso.windows:def:3749 oval:mil.disa.fso.windows:def:3750 oval:mil.disa.fso.windows:def:3751 oval:mil.disa.fso.windows:def:3752 oval:mil.disa.fso.windows:def:3753 oval:mil.disa.fso.windows:def:3660 oval:mil.disa.fso.windows:def:3668 oval:mil.disa.fso.windows:def:3667 oval:mil.disa.fso.windows:def:3666 oval:mil.disa.fso.windows:def:3665 oval:mil.disa.fso.windows:def:3664 oval:mil.disa.fso.windows:def:3663 oval:mil.disa.fso.windows:def:3662 oval:mil.disa.fso.windows:def:3661 oval:mil.disa.fso.windows:def:3669 Audit - IPSec Driver - Success Audit - Logoff - Success Audit - Logon - Success Audit - Other Account Management Events - Failure Audit - Security Group Management - Failure Audit - Security State Change - Failure Audit - Security System Extension - Failure Audit - Sensitive Privilege Use - Failure Audit - System Integrity - Failure Audit - User Account Management - Failure Audit - Audit Policy Change - Failure Audit - Computer Account Management - Failure Audit - Credential Validation - Failure Audit - IPSec Driver - Failure Audit - Logon - Failure Built-in Admin Account Status SPN Target Name Validation Level IPv6 Source Routing Hide Computer IPv6 TCP Data Retransmissions Computer Identity Authentication for NTLM NTLM NULL Session Fallback PKU2U Online Identities Authentication Kerberos Encryption Types UR: Create permanent shared objects UR: Allow log on through Remote Desktop Services UR: Create a token object UR: Deny log on as a service UR: Enable computer and user accounts to be trusted for delegation UR: Lock pages in memory UR: Log on as a batch job UR: Log on as a service UR: Modify an object label UR: Deny log on as a batch job

19 oval:mil.disa.fso.windows:def:3670 oval:mil.disa.fso.windows:def:3671 oval:mil.disa.fso.windows:def:3672 oval:mil.disa.fso.windows:def:3886 oval:mil.disa.fso.windows:def:3887 oval:mil.disa.fso.windows:def:3888 oval:mil.disa.fso.windows:def:3889 oval:mil.disa.fso.windows:def:3890 oval:mil.disa.fso.windows:def:3891 oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: oval:com.mcafee.oval:def: UR: Deny log on locally UR: Generate security audits UR: Replace a process level token Unnecessary Features Installed - Windows Media Center Unnecessary Features Installed - TFTP Client Unnecessary Features Installed - Telnet Server Unnecessary Features Installed - Telnet Client Unnecessary Features Installed - Simple TCPIP Services Unnecessary Features Installed - Games Inetd based service - talk - running status Test If file exists - /etc/hosts.allow Test the enable / disable status for - SSH Banner Test the configuration status for - SSH Protocol Test the group owner of the account - root Test If file exists - /etc/hosts.deny All GIDs referenced in the /etc/passwd file must be defined in the /etc/group file. No accounts with empty password fields Test if the file - /etc/at.allow exists Boot service - bind9 - status Boot service - samba - status Test if the file - /etc/cron.allow exists Boot service - nfs-kernel-server - status Test the existence of the file - /etc/at.deny Test the existence of the file - /etc/cron.deny Inetd based service - shell - running status Accept Remote rsyslog Messages Only on Designated Log Hosts Check That Users Are Assigned Valid Home Directories Make the Audit Configuration Immutable Test the configuration status for - SSH PermitUserEnvironment Test the status of - SSH LogLevel Filesystem Configuration - Create Separate Partition for /home Configure rsyslog to Send Logs to a Remote Log Host Disable IPv6 Redirect Acceptance - net.ipv6.conf.all.accept_redirects Collect Session Initiation Information