ComplianceCIS Safeguard v8.1

CIS-10.4 Configure Automatic Anti-Malware Scanning of Removable Media

Official page ↗
Framework
CIS Controls v8.1
Control
CIS-10 Malware Defenses
ATT&CK techniques mitigated
2

ATT&CK mappings (CTID)

• T1091 Replication Through Removable Media — Malware commonly uses removable media to move between systems. Automatic scanning can identify and quarantine malicious files when the media is connected, directly reducing the effectiveness of removable-media propagation. • T1204.002 Malicious File — Automatic scanning can detect and quarantine a malicious file on removable media before a user opens or executes it. This creates a direct preventive relationship when blocking or quarantine is enforced.

Related

Mitigates · MITRE ATT&CK (2)

  • T1204.002 Malicious File sub-technique
  • T1091 Replication Through Removable Media technique

Referenced by Compliance · has member (1)

  • CIS-10 Malware Defenses CIS Control v8.1

References