Windows 2008 Member Server Security Technical Implementation Guide

The Windows 2008 Member Server Security Technical Implementation Guide (V6 R46) has 215 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

215STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R46

CurrentPublished Wed Jun 17 2020

System files are not checked for unauthorized changes.

Windows 2008 Member Server Security Technical Implementation Guide

Assessment Title

Rule Text

System files are not checked for unauthorized changes.

Description

Discussion Text

Comparing system files against a baseline on a regular basis will detect the possibility of introduction of malicious code on the system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-2907

Rule

SV-29692r1_rule

Severity

medium

Rule Version

1.024

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Interview the SA to determine if the site uses a tool to compare system files (*.exe, *.bat, *.com, *.cmd and *.dll) on servers against a baseline, on a weekly basis.

Note: A properly configured HBSS Policy Auditor 5.2 or later, File Integrity Monitor (FIM) module will meet the requirement for file integrity checking.  The Asset module within HBSS does not meet this requirement.

Implementation Procedure

Fix Text

The site should use a tool to compare system files (*.exe, *.bat, *.com, *.cmd and *.dll) on servers against a baseline, on a weekly basis.

STIG check 146 of 215 in the Windows 2008 Member Server STIG checklist

← Previous · V-26606The Telnet service must be disabled if installed.Next · V-2908 →Unencrypted remote access is permitted to system services.