API → UI component mappings · 90,813 documents
| ID | Document | Source |
|---|---|---|
| dcf54eec865034f9 | SCA Check 27228: Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0… | wazuh-sca |
| a449eef706df52e7 | SCA Check 27229: Ensure 'Allow Custom SSPs and APs to be loaded into LSASS' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595',… | wazuh-sca |
| e82e3e5a34b12070 | SCA Check 27230: Ensure 'Configures LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI Lock'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007']… | wazuh-sca |
| 25ea280bf6a8111b | SCA Check 27231: Ensure 'Disallow copying of user input methods to the system account for sign-in' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007']… | wazuh-sca |
| e4defa4a7f1c8cdc | SCA Check 27232: Ensure 'Block user from showing account details on sign-in' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036',… | wazuh-sca |
| df43c38e0c3631df | SCA Check 27233: Ensure 'Do not display network selection UI' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046',… | wazuh-sca |
| 821ea9e29a3916d7 | SCA Check 27234: Ensure 'Do not enumerate connected users on domain-joined computers' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques:… | wazuh-sca |
| ab55bce36b574b2c | SCA Check 27235: Ensure 'Enumerate local users on domain-joined computers' is set to 'Disabled' (MS only). Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques:… | wazuh-sca |
| c972dfd82c7f5fbc | SCA Check 27236: Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595',… | wazuh-sca |
| 7776d7f3ce31e757 | SCA Check 27237: Ensure 'Turn off picture password sign-in' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087']… | wazuh-sca |
| 668a4701c12833e0 | SCA Check 27238: Ensure 'Turn on convenience PIN sign-in' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087']… | wazuh-sca |
| 404e65a44207db32 | SCA Check 27239: Ensure 'Allow Clipboard synchronization across devices' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595',… | wazuh-sca |
| 5a75b8c80556ac49 | SCA Check 27240: Ensure 'Allow upload of User Activities' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This… | wazuh-sca |
| 9aa1b707f9752882 | SCA Check 27241: Ensure 'Allow network connectivity during connected-standby (on battery)' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0001',… | wazuh-sca |
| 3ea0985e86b3302c | SCA Check 27242: Ensure 'Allow network connectivity during connected-standby (plugged in)' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0001',… | wazuh-sca |
| 1cd4c54ca08438ac | SCA Check 27243: Ensure 'Require a password when a computer wakes (on battery)' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003']… | wazuh-sca |
| de4ae931a60ab287 | SCA Check 27244: Ensure 'Require a password when a computer wakes (plugged in)' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003']… | wazuh-sca |
| 7740d1afa8f554c0 | SCA Check 27245: Ensure 'Configure Offer Remote Assistance' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This… | wazuh-sca |
| 243cb6d6d6dc9190 | SCA Check 27246: Ensure 'Configure Solicited Remote Assistance' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564']… | wazuh-sca |
| 4f1fb823b84cad09 | SCA Check 27247: Ensure 'Enable RPC Endpoint Mapper Client Authentication' is set to 'Enabled' (MS only). Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques:… | wazuh-sca |
| 45ebefdbb5f24dd6 | SCA Check 27248: Ensure 'Restrict Unauthenticated RPC clients' is set to 'Enabled: Authenticated' (MS only). Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques:… | wazuh-sca |
| f46b8a55c5400de7 | SCA Check 27249: Ensure 'Configure validation of ROCA-vulnerable WHfB keys during authentication' is set to 'Enabled: Audit' or higher (DC only). Policy: CIS Microsoft Windows Server 2022 Benchmark… | wazuh-sca |
| e74d64c80a951f79 | SCA Check 27250: Ensure 'Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with support provider' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark… | wazuh-sca |
| c056c8f251d259a6 | SCA Check 27251: Ensure 'Enable/Disable PerfTrack' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This policy… | wazuh-sca |
| 86b79a5de6f3f748 | SCA Check 27252: Ensure 'Turn off the advertising ID' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0001', 'TA0011'] Techniques: ['T1133', 'T1200',… | wazuh-sca |
| 91183b403ed8c47f | SCA Check 27253: Ensure 'Enable Windows NTP Client' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques: ['T1562',… | wazuh-sca |
| 4f28987f942c7380 | SCA Check 27254: Ensure 'Enable Windows NTP Server' is set to 'Disabled' (MS only). Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005', 'TA0006', 'TA0007'] Techniques:… | wazuh-sca |
| feefb5334d6cb9ab | SCA Check 27255: Ensure 'Allow a Windows app to share application data between users' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0009', 'TA0010']… | wazuh-sca |
| 6d66e940b72d1060 | SCA Check 27256: Ensure 'Allow Microsoft accounts to be optional' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0006', 'TA0003'] Techniques: ['T1078',… | wazuh-sca |
| 39d7bab199ce089c | SCA Check 27257: Ensure 'Disallow Autoplay for non-volume devices' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0002', 'TA0005'] Techniques: ['T1562',… | wazuh-sca |
| ed78d0a9ca008791 | SCA Check 27258: Ensure 'Set the default behavior for AutoRun' is set to 'Enabled: Do not execute any autorun commands'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0002',… | wazuh-sca |
| 2e80a9ee95ec4684 | SCA Check 27259: Ensure 'Turn off Autoplay' is set to 'Enabled: All drives'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0002', 'TA0005'] Techniques: ['T1562', 'T1070',… | wazuh-sca |
| d181963f93b1d99e | SCA Check 27260: Ensure 'Configure enhanced anti-spoofing' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0002', 'TA0005'] Techniques: ['T1562', 'T1070',… | wazuh-sca |
| 3d7d091885c64d69 | SCA Check 27261: Ensure 'Allow Use of Camera' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] This policy… | wazuh-sca |
| 7f1821f33df13d30 | SCA Check 27262: Ensure 'Turn off cloud consumer account state content' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595',… | wazuh-sca |
| b50c50d557898bf5 | SCA Check 27263: Ensure 'Turn off cloud optimized content' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This… | wazuh-sca |
| 049a9951b0ade818 | SCA Check 27264: Ensure 'Turn off Microsoft consumer experiences' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564']… | wazuh-sca |
| b73a2e88df90f0c8 | SCA Check 27265: Ensure 'Require pin for pairing' is set to 'Enabled: First Time' OR 'Enabled: Always'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques:… | wazuh-sca |
| a13a62ec90f6be6a | SCA Check 27266: Ensure 'Do not display the password reveal button' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046',… | wazuh-sca |
| 937edd4bdab318dd | SCA Check 27267: Ensure 'Enumerate administrator accounts on elevation' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595',… | wazuh-sca |
| 1b8e545750caa455 | SCA Check 27268: Ensure 'Allow Diagnostic Data' is set to 'Enabled: Diagnostic data off (not recommended)' or 'Enabled: Send required diagnostic data'. Policy: CIS Microsoft Windows Server 2022… | wazuh-sca |
| 2726b3eebdd48cf7 | SCA Check 27269: Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'. Policy: CIS Microsoft… | wazuh-sca |
| 232ae53b23fc814b | SCA Check 27270: Ensure 'Disable OneSettings Downloads' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087']… | wazuh-sca |
| 2f883f20e51e7812 | SCA Check 27271: Ensure 'Do not show feedback notifications' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This… | wazuh-sca |
| 5b89a791c47f04a5 | SCA Check 27272: Ensure 'Enable OneSettings Auditing' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0006'] Techniques: ['T1110', 'T1078', 'T1556',… | wazuh-sca |
| 689c121701843f3b | SCA Check 27273: Ensure 'Limit Diagnostic Log Collection' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087']… | wazuh-sca |
| 5d1bb63a7b5bf24b | SCA Check 27274: Ensure 'Limit Dump Collection' is set to 'Enabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0007'] Techniques: ['T1595', 'T1046', 'T1087'] This policy… | wazuh-sca |
| 76a5fad3b1650abc | SCA Check 27275: Ensure 'Toggle user control over Insider builds' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564']… | wazuh-sca |
| 705d641d49f22251 | SCA Check 27276: Ensure 'Enable App Installer' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036', 'T1564'] This policy setting… | wazuh-sca |
| 412e40933a05caf7 | SCA Check 27277: Ensure 'Enable App Installer Experimental Features' is set to 'Disabled'. Policy: CIS Microsoft Windows Server 2022 Benchmark v2.0.0 Tactics: ['TA0005'] Techniques: ['T1036',… | wazuh-sca |