CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

17.5.6 (L1) Ensure 'Audit Special Logon' is set to include 'Success' (Scored)....... 460 17.6 Object Access ........................................................................................................................................ 462 17.6.1 (L1) Ensure 'Audit Detailed File Share' is set to include 'Failure' (Scored) ...................................................................................................................................................................... 462 17.6.2 (L1) Ensure 'Audit File Share' is set to 'Success and Failure' (Scored) ...... 464 17.6.3 (L1) Ensure 'Audit Other Object Access Events' is set to 'Success and Failure' (Scored) .................................................................................................................................. 466 17.6.4 (L1) Ensure 'Audit Removable Storage' is set to 'Success and Failure' (Scored) ................................................................................................................................................... 469 17.7 Policy Change ....................................................................................................................................... 472 17.7.1 (L1) Ensure 'Audit Audit Policy Change' is set to include 'Success' (Scored) ...................................................................................................................................................................... 472 17.7.2 (L1) Ensure 'Audit Authentication Policy Change' is set to include 'Success' (Scored) ................................................................................................................................................... 475 17.7.3 (L1) Ensure 'Audit Authorization Policy Change' is set to include 'Success' (Scored) ................................................................................................................................................... 478 17.7.4 (L1) Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure' (Scored) .................................................................................................................................. 481 17.7.5 (L1) Ensure 'Audit Other Policy Change Events' is set to include 'Failure' (Scored) ................................................................................................................................................... 484 17.8 Privilege Use ......................................................................................................................................... 486 17.8.1 (L1) Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure' (Scored) ................................................................................................................................................... 486 17.9 System...................................................................................................................................................... 489 17.9.1 (L1) Ensure 'Audit IPsec Driver' is set to 'Success and Failure' (Scored) . 489 17.9.2 (L1) Ensure 'Audit Other System Events' is set to 'Success and Failure' (Scored) ................................................................................................................................................... 492 17.9.3 (L1) Ensure 'Audit Security State Change' is set to include 'Success' (Scored) ................................................................................................................................................... 495 17.9.4 (L1) Ensure 'Audit Security System Extension' is set to include 'Success' (Scored) ................................................................................................................................................... 497 17.9.5 (L1) Ensure 'Audit System Integrity' is set to 'Success and Failure' (Scored) ...................................................................................................................................................................... 499 18 Administrative Templates (Computer) ............................................................................................ 501

15 | P a g e