SV-213449r569189_rule
V-213449
SRG-APP-000073
WNDF-AV-000025
CAT II
10
Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Defender Antivirus -> Scan -> "Scan removable drives" to "Enabled".
Verify the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Defender Antivirus -> Scan -> "Scan removable drives" is set to "Enabled".
Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Windows Defender\Scan
Criteria: If the value "DisableRemovableDriveScanning" is REG_DWORD = 0, this is not a finding.
V-213449
False
WNDF-AV-000025
Verify the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Defender Antivirus -> Scan -> "Scan removable drives" is set to "Enabled".
Procedure: Use the Windows Registry Editor to navigate to the following key:
HKLM\Software\Policies\Microsoft\Windows Defender\Scan
Criteria: If the value "DisableRemovableDriveScanning" is REG_DWORD = 0, this is not a finding.
M
3985