Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Microsoft Defender AV must block untrusted and unsigned processes that run from USB.
Description
Discussion Text
This policy setting helps prevents unsigned or untrusted executable files from running from USB removable drives, including SD cards. Blocked file types include executable files (such as .exe, .dll, or .scr).
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.