Report DetailsReport created on Aug 8, 2026 10:38 AMDESKTOP-NM6VC29
DESKTOP-NM6VC29
Hostname
System identity
Microsoft Windows 11 Pro
Operating System
Installed Windows edition
G3 3590
System Model
Hardware platform
25H2
Windows Version
Installed feature release
POWERSTRUX WINDOWS AUDITOR REPORT
Report created on Aug 8, 2026 10:38 AM
Report: 08-08-2026
System Time Information
System Time Information
SourceLast Sync TimeLast Sync In Minutes
time.windows.com,0x9 8/8/2026 9:43:55 AM34
System Information
System Identity
NameManufacturerModelArchitectureWindows EditionWindows Version
DESKTOP-NM6VC29Dell Inc.G3 3590x64-based PCMicrosoft Windows 11 Pro25H2
Network Adapter Information
NameMACDescriptionStateIP Prefix
EthernetE4-54-E8-31-1F-C4Realtek PCIe GbE Family ControllerDisconnected169.254.193.59/16
Wi-FiB0-68-E6-77-3A-B5Qualcomm QCA9377 802.11ac Wireless AdapterUp192.168.4.36/22
VMware Network Adapter VMnet800-50-56-C0-00-08VMware Virtual Ethernet Adapter for VMnet8Up192.168.195.1/24
VMware Network Adapter VMnet100-50-56-C0-00-01VMware Virtual Ethernet Adapter for VMnet1Not Present
Bluetooth Network ConnectionB0-68-E6-77-3A-B6Bluetooth Device (Personal Area Network)Not Present
BIOS Information
ManufacturerSerial NumberVersionRelease Date
Dell Inc.CDVKNT21.19.09/5/2022 8:00:00 PM
Disk Information
NameSerial NumberHealth StatusOperational StatusSize (GB)Partition Style
KBG40ZNS512G NVMe TOSHIBA 512GB0100_0000_0000_0000_8CE3_8E04_001A_9A0F.HealthyOnline477GPT
Volume Information
NameDrive LetterHealth StatusOperational StatusSize (GB)Size Remaining (GB)Percent Remaining
OSCHealthyOK458.9227.4950%
ESPHealthyOK0.630.5486%
ImageHealthyOK16.059.0957%
DELLSUPPORTHealthyOK1.210.3428%
System Security Information
Microsoft Defender Threat Detection
Detection TimeRemediation TimeAction SuccessThreat IDResources
8/7/2026 2:25:44 PM8/7/2026 2:26:02 PMTrue2147519003file:_C:\Users\powerstrux-user\OneDrive\Desktop\eicar.txt
Microsoft Defender Protection Status
Antivirus EnabledReal Time Protection EnabledBehavior Monitor EnabledIoav Protection EnabledOn Access Protection EnabledIs Tamper Protected
TrueTrueTrueTrueTrueTrue
Microsoft Defender Signature/Definition Information
Antivirus Signature VersionAntivirus Signature AgeAntivirus Signature Last Updated
1.457.58.008/7/2026 6:03:23 PM
Microsoft Defender Scan Information
Full Scan Start TimeFull Scan End TimeFull Scan AgeQuick Scan Start TimeQuick Scan End TimeQuick Scan Age
9/17/2025 1:05:21 PM9/17/2025 1:43:01 PM3248/8/2026 9:50:55 AM8/8/2026 9:52:13 AM0
BitLocker Volume Information
Mount PointEncryption MethodVolume StatusProtection StatusLock StatusEncryption PercentageKey Protector
C:NoneFullyDecryptedOffUnlocked0

Report: 08-08-2026
User Management Events
Local User Accounts
NameEnabledLast LogonPassword RequiredDays Since Last Logon
BadActorTrue7/14/2026 9:43:26 AMTrue25
powerstrux-userTrue8/8/2026 10:13:01 AMTrue0
Account Management Events
TimeIDAudit TypeActionSubject AccountTarget Account
8/8/2026 10:13:01 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/8/2026 10:13:01 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/8/2026 9:43:23 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/8/2026 9:43:23 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/8/2026 2:32:36 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/8/2026 2:32:36 AM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:16:31 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:16:31 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:14:01 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:14:01 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:06:43 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:06:43 PM4738Audit SuccessA user account was changedDESKTOP-NM6VC29$powerstrux-user
8/7/2026 8:04:33 PM4738Audit SuccessA user account was changedpowerstrux-userBadActor
8/7/2026 7:57:57 PM4738Audit SuccessA user account was changedpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4738Audit SuccessA user account was changedpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4738Audit SuccessA user account was changedpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4724Audit SuccessAn attempt was made to reset an account's passwordpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4738Audit SuccessA user account was changedpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4722Audit SuccessA user account was enabledpowerstrux-userGoodActor
8/7/2026 7:57:48 PM4720Audit SuccessA user account was createdpowerstrux-userGoodActor
Account Name Change Events
TimeIDActionSubject AccountOld Target AccountNew Target Account
8/7/2026 8:04:33 PM4781The name of an account was changedpowerstrux-userGoodActorBadActor
Group Management Events
Local Group Membership
MemberGroup
powerstrux-userdocker-users
X_AdminAdministrators
powerstrux-userAdministrators
S-1-5-21-1645087665-3375922359-1671035281-1034Administrators
BadActorAdministrators
powerstrux-userEvent Log Readers
VisitorGuests
IUSRIIS_IUSRS
DefaultAccountSystem Managed Accounts Group
INTERACTIVEUsers
Authenticated UsersUsers
powerstrux-userUsers
WsiAccountUsers
BadActorUsers
Security Group Membership Events
TimeIDActionSubject AccountMember SIDMember NameGroup Name
8/7/2026 7:58:04 PM4732Member Addedpowerstrux-userS-1-5-21-1645087665-3375922359-1671035281-1039BadActorAdministrators
8/7/2026 7:57:48 PM4732Member Addedpowerstrux-userS-1-5-21-1645087665-3375922359-1671035281-1039BadActorUsers
Security Group Management Events
TimeIDActionUserGroup
8/7/2026 8:04:59 PM4735A security-enabled local group was changedpowerstrux-userPrivileged Users
8/7/2026 8:04:59 PM4731A security-enabled local group was createdpowerstrux-userPrivileged Users

Report: 08-08-2026
Authentication Events
Logon Events
TimeIDUserLogon IDLogon TypeIs Elevated?
8/8/2026 10:13:01 AM4624powerstrux-user42415117UnlockNo
8/8/2026 10:13:01 AM4624powerstrux-user42414622UnlockYes
8/8/2026 10:13:01 AM4801powerstrux-user3564214Unlock
8/8/2026 10:13:01 AM4624powerstrux-user42406889CachedInteractiveNo
8/8/2026 10:13:01 AM4624powerstrux-user42406815CachedInteractiveYes
8/8/2026 9:43:23 AM4624powerstrux-user39751226UnlockNo
8/8/2026 9:43:23 AM4624powerstrux-user39750441UnlockYes
8/8/2026 9:43:23 AM4801powerstrux-user3564214Unlock
8/8/2026 9:43:23 AM4624powerstrux-user39742978CachedInteractiveNo
8/8/2026 9:43:23 AM4624powerstrux-user39742904CachedInteractiveYes
8/8/2026 2:32:37 AM4624powerstrux-user35417555UnlockNo
8/8/2026 2:32:37 AM4624powerstrux-user35416788UnlockYes
8/8/2026 2:32:36 AM4801powerstrux-user3564214Unlock
8/8/2026 2:32:36 AM4624powerstrux-user35409889CachedInteractiveNo
8/8/2026 2:32:36 AM4624powerstrux-user35409815CachedInteractiveYes
8/7/2026 8:16:31 PM4624powerstrux-user3566124UnlockNo
8/7/2026 8:16:31 PM4624powerstrux-user3566046UnlockYes
8/7/2026 8:16:31 PM4624powerstrux-user3564214CachedInteractiveNo
8/7/2026 8:16:31 PM4624powerstrux-user3564139CachedInteractiveYes
8/7/2026 8:14:01 PM4624powerstrux-user764210UnlockNo
8/7/2026 8:14:01 PM4624powerstrux-user763838UnlockYes
8/7/2026 8:14:01 PM4624powerstrux-user755308CachedInteractiveNo
8/7/2026 8:14:01 PM4624powerstrux-user754935CachedInteractiveYes
8/7/2026 8:13:56 PM4624F12EDE33-F83F-47FA-9A63-BEEBE2149A62513840ServiceYes
8/7/2026 8:06:43 PM4624powerstrux-user1326623UnlockNo
8/7/2026 8:06:43 PM4624powerstrux-user1326564UnlockYes
8/7/2026 8:06:43 PM4624powerstrux-user1324939CachedInteractiveNo
8/7/2026 8:06:43 PM4624powerstrux-user1324880CachedInteractiveYes
8/7/2026 8:06:07 PM4624A76E571F-E2AE-49F5-A50A-996D02ED01CA453205ServiceYes
Logoff Events
TimeIDUserLogon ID
8/8/2026 10:00:07 AM4800powerstrux-user3564214
8/8/2026 2:48:15 AM4800powerstrux-user3564214
8/7/2026 9:15:06 PM4800powerstrux-user3564214
8/7/2026 8:16:24 PM4647powerstrux-user755308
8/7/2026 8:13:19 PM4647powerstrux-user1324939
8/7/2026 8:05:20 PM4647powerstrux-user2093529
Failed Logon Events
TimeIDAccountWorkstationAddress
8/7/2026 7:59:28 PM4625administratorDESKTOP-NM6VC29::1
8/7/2026 7:59:21 PM4625powerstrux-userDESKTOP-NM6VC29::1
8/7/2026 7:59:14 PM4625powerstruxDESKTOP-NM6VC29::1
8/7/2026 7:59:06 PM4625goodactorDESKTOP-NM6VC29::1
8/7/2026 7:58:55 PM4625badActorDESKTOP-NM6VC29::1
Special Privileges Assigned to New Logon Events
TimeIDUserLogon IDPrivileges
8/8/2026 10:13:01 AM4672powerstrux-user42414622SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/8/2026 10:13:01 AM4672powerstrux-user42406815SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/8/2026 9:43:23 AM4672powerstrux-user39750441SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/8/2026 9:43:23 AM4672powerstrux-user39742904SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/8/2026 2:32:37 AM4672powerstrux-user35416788SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/8/2026 2:32:36 AM4672powerstrux-user35409815SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:16:31 PM4672powerstrux-user3566046SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:16:31 PM4672powerstrux-user3564139SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:14:01 PM4672powerstrux-user763838SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:14:01 PM4672powerstrux-user754935SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:13:56 PM4672F12EDE33-F83F-47FA-9A63-BEEBE2149A62513840SeImpersonatePrivilege
8/7/2026 8:06:43 PM4672powerstrux-user1326564SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:06:43 PM4672powerstrux-user1324880SeSecurityPrivilege, SeTakeOwnershipPrivilege, SeLoadDriverPrivilege, SeBackupPrivilege, SeRestorePrivilege, SeDebugPrivilege, SeSystemEnvironmentPrivilege, SeImpersonatePrivilege, SeDelegateSessionUserImpersonatePrivilege
8/7/2026 8:06:07 PM4672A76E571F-E2AE-49F5-A50A-996D02ED01CA453205SeImpersonatePrivilege

Report: 08-08-2026
Security Relevant File and Object Events
Export/Writes/Downloads to Removable Media Events
TimeIDActionUserVolume LabelVolume SerialMessageTotal Transfer Size (KB)Log LocationFileFile Size (KB)
8/7/2026 9:47:15 AM1021WriteToUsbDESKTOP-NM6VC29\powerstrux-webinarFortress3456186785Project includes 1 folder(s) and 4 file(s).17621 KBC:\Report Files\DESKTOP-NM6VC29.powerstrux-webinar_20251019094710.txt C:\Users\powerstrux-webinar\OneDrive\Desktop\Sysmon\Eula.txt7 KB
8/7/2026 9:47:15 AM1021WriteToUsbDESKTOP-NM6VC29\powerstrux-webinarFortress3456186785Project includes 1 folder(s) and 4 file(s).17621 KBC:\Report Files\DESKTOP-NM6VC29.powerstrux-webinar_20251019094710.txt C:\Users\powerstrux-webinar\OneDrive\Desktop\Sysmon\Sysmon.exe8282 KB
8/7/2026 9:47:15 AM1021WriteToUsbDESKTOP-NM6VC29\powerstrux-webinarFortress3456186785Project includes 1 folder(s) and 4 file(s).17621 KBC:\Report Files\DESKTOP-NM6VC29.powerstrux-webinar_20251019094710.txt C:\Users\powerstrux-webinar\OneDrive\Desktop\Sysmon\Sysmon64.exe4456 KB
8/7/2026 9:47:15 AM1021WriteToUsbDESKTOP-NM6VC29\powerstrux-webinarFortress3456186785Project includes 1 folder(s) and 4 file(s).17621 KBC:\Report Files\DESKTOP-NM6VC29.powerstrux-webinar_20251019094710.txt C:\Users\powerstrux-webinar\OneDrive\Desktop\Sysmon\Sysmon64a.exe4876 KB
8/7/2026 9:39:29 AM1004WriteToDiskDESKTOP-NM6VC29\powerstrux-webinar\??\Volume{4c7a68e4-a85a-11ef-9555-b068e6773ab6}0Project includes 0 folder(s) and 1 file(s).1683 KBC:\Report Files\DESKTOP-NM6VC29.powerstrux-webinar_20251019093742.txt C:\Users\powerstrux-webinar\OneDrive\Desktop\2025, June 9, Smarter, Not Harder Using PowerShell for Security and Automation.pptx1684 KB
Print to a Device Events
TimeIDDetailsAction
8/7/2026 2:21:41 PM307Document 2, SecretFile.txt - Notepad owned by justi on \\DESKTOP-NM6VC29 was printed on Microsoft Print to PDF through port C:\Users\powerstrux-user\OneDrive\Desktop\secret.pdf. Size in bytes: 36031. Pages printed: 1. No user action is required.Printing a document
A New External Device was Recognized by the System Events
TimeIDDevice NameClass Name
8/7/2026 8:37:50 PM6416FortressWPD
8/7/2026 8:37:50 PM6416Apricorn Fortress USB DeviceDiskDrive
A Registry Value was Modified Events
TimeIDUserOperationObject NameObject Value NameOld Object ValueNew Object Value
NoneNoneNoneNoneNoneNoneNoneNone
Owner/Permission Modification Events
TimeIDUserObject TypeObject NameOld SDDLNew SDDL
NoneNoneNoneNoneNoneNoneNone
Access (Create, Access, Delete, Modify) Events
TimeIDUserObject TypeObject NameOperation
8/7/2026 8:38:12 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001\$IXSPY71ReadData
8/7/2026 8:38:12 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:12 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001\$IF3DIOBReadData
8/7/2026 8:38:12 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001ReadData
8/7/2026 8:38:12 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\secret.pdfDELETE
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001\$IHV5A98.pdfDELETE
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\secret.pdfDELETE
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BINReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\$RECYCLE.BIN\S-1-5-21-1645087665-3375922359-1671035281-1001ReadData
8/7/2026 8:38:11 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:07 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\Jackies FilesReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\Jackies FilesReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStrux FilesReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStrux FilesReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStruxWASourceCode-mainReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStruxWASourceCode-mainReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\WinZip SafeMedia FolderReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\WinZip SafeMedia FolderReadData
8/7/2026 8:38:05 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:58 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:58 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\WinZip SafeMedia FolderReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\WinZip SafeMedia FolderReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\WinZip SafeMedia FolderReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStruxWASourceCode-mainReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStrux FilesReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStruxWASourceCode-mainReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStruxWASourceCode-mainReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\Jackies FilesReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStrux FilesReadData
8/7/2026 8:37:55 PM4663powerstrux-userFile\Device\HarddiskVolume8\PowerStrux FilesReadData
8/7/2026 8:37:54 PM4663powerstrux-userFile\Device\HarddiskVolume8\Jackies FilesReadData
8/7/2026 8:37:54 PM4663powerstrux-userFile\Device\HarddiskVolume8\Jackies FilesReadData
8/7/2026 8:37:54 PM4663powerstrux-userFile\Device\HarddiskVolume8\DESKTOP-NM6VC29\Desktop.iniReadData
8/7/2026 8:37:54 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:52 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:37:52 PM4663powerstrux-userFile\Device\HarddiskVolume8\ReadData
8/7/2026 8:36:43 PM4663powerstrux-userFile\Device\HarddiskVolume7\ReadData
8/7/2026 8:36:43 PM4663powerstrux-userFile\Device\HarddiskVolume7\ReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\Documents\desktop.iniReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\DocumentsReadData
8/7/2026 8:36:20 PM4663powerstrux-userFile\Device\HarddiskVolume6\ReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\ReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\ReadData
8/7/2026 8:36:16 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.icoReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:36:14 PM4663powerstrux-userFile\Device\HarddiskVolume6\autorun.infReadData
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:36 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:35 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadData
8/7/2026 8:00:35 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:35 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:34 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:34 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:32 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadData
8/7/2026 8:00:32 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:31 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:31 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtReadAttributes
8/7/2026 8:00:31 PM4663powerstrux-userFileC:\Users\powerstrux-user\OneDrive\Desktop\SecretFile.txtREAD_CONTROL

Report: 08-08-2026
Use of Privilege Events
Privilege/Role Escalation (Admin Access) Events
TimeIDCreator AccountProcess NameToken TypeProcess Commandline
8/8/2026 10:18:31 AM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/8/2026 10:18:30 AM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/8/2026 10:18:30 AM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/8/2026 10:18:22 AM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/8/2026 10:18:17 AM4688powerstrux-userC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeType 2C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe
8/8/2026 10:18:17 AM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0x92c --server 0x6d8
8/8/2026 10:18:01 AM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/8/2026 10:15:03 AM4688powerstrux-userC:\Program Files\PowerShell\7\pwsh.exeType 2"C:\Program Files\PowerShell\7\pwsh.exe"
8/8/2026 10:15:03 AM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0x8c0 --server 0x8b4
8/8/2026 10:15:02 AM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\WindowsTerminal.exeType 2wt.exe
8/8/2026 10:15:02 AM4688DESKTOP-NM6VC29$C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exe"
8/8/2026 10:00:01 AM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/8/2026 9:51:35 AM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/8/2026 9:48:23 AM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/8/2026 9:45:56 AM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/8/2026 9:43:38 AM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2fc,0x7ffa73d465f0,0x7ffa73d46600,0x7ffa73d46610
8/8/2026 9:43:38 AM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/8/2026 9:43:05 AM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/8/2026 3:12:07 AM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/7/2026 9:35:56 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f0,0x7ffa332665f0,0x7ffa33266600,0x7ffa33266610
8/7/2026 9:35:56 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 9:35:34 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:35:34 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\Evaluate-STIG_UserHive
8/7/2026 9:35:11 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:11 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:11 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:11 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:10 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:10 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:10 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:10 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:09 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:35:09 PM4688powerstrux-userC:\Windows\System32\netsh.exeType 2"C:\WINDOWS\system32\netsh.exe" interface portproxy show all
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:55 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:53 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:52 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:34:51 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /configuration
8/7/2026 9:34:49 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {F4B7AC90-0806-4E30-A92C-3ACD1646F6A1}
8/7/2026 9:34:48 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {97B1A79C-0F5F-438D-A0F9-877EF796381D}
8/7/2026 9:34:48 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {4FD78ECE-6AFF-4B97-A0F4-2E0913263529}
8/7/2026 9:34:46 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {7A77166F-1415-43B1-9D26-AD9A4048515B}
8/7/2026 9:34:45 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {8FB85279-8646-4995-8C4D-54129842847D}
8/7/2026 9:34:45 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {F5E94379-71CC-42CD-81F5-5A5206831F22}
8/7/2026 9:34:45 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {8EEE540E-2EAB-4866-908A-FF946FEFF635}
8/7/2026 9:34:44 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {C63EDED8-64E7-4957-ADAC-BEF2CDC88962}
8/7/2026 9:34:44 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {704BEF63-1E49-496C-B6A2-1F642F64B440}
8/7/2026 9:34:41 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe" /enum
8/7/2026 9:34:40 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe"
8/7/2026 9:34:40 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe"
8/7/2026 9:32:27 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:27 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1011
8/7/2026 9:32:25 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:25 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1011 "C:\Users\securestrux\NTUSER.DAT"
8/7/2026 9:32:23 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:23 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1018
8/7/2026 9:32:21 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:21 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1018 "C:\Users\sly15980\NTUSER.DAT"
8/7/2026 9:32:20 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:20 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1019
8/7/2026 9:32:18 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:18 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1019 "C:\Users\tasktest\NTUSER.DAT"
8/7/2026 9:32:17 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:17 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1026
8/7/2026 9:32:15 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:15 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1026 "C:\Users\premote\NTUSER.DAT"
8/7/2026 9:32:14 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:14 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1032
8/7/2026 9:32:12 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:12 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1032 "C:\Users\powerstrux.DESKTOP-NM6VC29\NTUSER.DAT"
8/7/2026 9:32:11 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:11 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1007
8/7/2026 9:32:08 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:08 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1007 "C:\Users\powerstrux\NTUSER.DAT"
8/7/2026 9:32:07 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:07 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1037
8/7/2026 9:32:05 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:32:05 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1037 "C:\Users\WsiAccount\NTUSER.DAT"
8/7/2026 9:19:29 PM4688powerstrux-userC:\Windows\System32\Robocopy.exeType 2"robocopy.exe" C:\ C:\WINDOWS\Temp\null "*.exe.config" "*.p12" "*.pfx" /S /L /FP /XJ /NDL /NJH /NJS /NC /NP /NS /R:0 /W:0 /XD "C:\WINDOWS\CSC" "C:\WINDOWS\WinSxS" "C:\WINDOWS\servicing"
8/7/2026 9:19:28 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:19:28 PM4688powerstrux-userC:\Windows\System32\SecEdit.exeType 2"C:\WINDOWS\system32\SecEdit.exe" /export /cfg C:\WINDOWS\Temp\Evaluate-STIG\Evaluate-STIG_SecPol.ini
8/7/2026 9:19:27 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:19:27 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\Evaluate-STIG_UserHive C:\WINDOWS\Temp\Evaluate-STIG\Eval-STIG_UserHive.dat
8/7/2026 9:19:26 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:19:26 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" SAVE HKU\S-1-5-21-1645087665-3375922359-1671035281-1001 C:\WINDOWS\Temp\Evaluate-STIG\Eval-STIG_UserHive.dat /y /c
8/7/2026 9:19:19 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {4E6BE15E-E97C-48EE-95C7-63AE5D5CCA65}
8/7/2026 9:18:55 PM4688powerstrux-userC:\Windows\System32\wbem\WMIC.exeType 2C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid
8/7/2026 9:18:55 PM4688powerstrux-userC:\Windows\System32\cmd.exeType 2C:\WINDOWS\system32\cmd.exe /x/d/c "call C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid 2>&1"
8/7/2026 9:18:54 PM4688powerstrux-userC:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exeType 2"C:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exe"
8/7/2026 9:18:16 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 9:18:15 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 9:15:12 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 9:15:04 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 9:14:54 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 9:14:04 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2fc,0x7ffaa7be65f0,0x7ffaa7be6600,0x7ffaa7be6610
8/7/2026 9:14:04 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 9:13:29 PM4688powerstrux-userC:\Windows\System32\wbem\WMIC.exeType 2C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid
8/7/2026 9:13:29 PM4688powerstrux-userC:\Windows\System32\cmd.exeType 2C:\WINDOWS\system32\cmd.exe /x/d/c "call C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid 2>&1"
8/7/2026 9:13:28 PM4688powerstrux-userC:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exeType 2"C:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exe"
8/7/2026 9:12:51 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 9:12:51 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 9:09:47 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 9:09:40 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 9:09:36 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 9:09:30 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 9:09:14 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 9:08:40 PM4688powerstrux-userC:\Windows\System32\wbem\WMIC.exeType 2C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid
8/7/2026 9:08:40 PM4688powerstrux-userC:\Windows\System32\cmd.exeType 2C:\WINDOWS\system32\cmd.exe /x/d/c "call C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid 2>&1"
8/7/2026 9:08:37 PM4688powerstrux-userC:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exeType 2"C:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exe"
8/7/2026 9:07:54 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 9:07:54 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 9:04:50 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 9:04:43 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 9:04:34 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe" /SESSION:KCKxzKvj1kiMQLZ5irh7CgFMQwA6AFwAUAByAG8AZwByAGEAbQAgAEYAaQBsAGUAcwBcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAE0AbwBkAHUAbABlAHMAXABSAGUAcABvAHIAdABIAFQATQBMAFwAUABvAHcAZQByAFMAdAByAHUAeABXAEEAQwBvAG4AZgBpAGcALgB0AHgAdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQAATQ5AACCAQAASAMAAAAAAAA=
8/7/2026 9:04:33 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 9:04:21 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 9:04:10 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 9:03:53 PM4688DESKTOP-NM6VC29$C:\Windows\System32\dllhost.exeType 2C:\WINDOWS\system32\DllHost.exe /Processid:{1F2E5C40-9550-11CE-99D2-00AA006E086C}
8/7/2026 11:03:20 PM4688DESKTOP-NM6VC29$C:\Windows\System32\SystemSettingsAdminFlows.exeType 2"C:\WINDOWS\system32\SystemSettingsAdminFlows.exe" SetInternetTime 1
8/7/2026 9:03:03 PM4688DESKTOP-NM6VC29$C:\Windows\System32\SystemSettingsAdminFlows.exeType 2"C:\WINDOWS\system32\SystemSettingsAdminFlows.exe" SetDateTime
8/7/2026 9:02:58 PM4688DESKTOP-NM6VC29$C:\Windows\System32\SystemSettingsAdminFlows.exeType 2"C:\WINDOWS\system32\SystemSettingsAdminFlows.exe" SetInternetTime 0
8/7/2026 9:01:55 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2e4,0x2e8,0x2ec,0x2e0,0x2f4,0x7ffa72f165f0,0x7ffa72f16600,0x7ffa72f16610
8/7/2026 9:01:54 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 9:01:30 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 9:01:30 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\Evaluate-STIG_UserHive
8/7/2026 9:01:07 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:07 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:07 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:06 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:06 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:06 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:06 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:06 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:05 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:01:05 PM4688powerstrux-userC:\Windows\System32\netsh.exeType 2"C:\WINDOWS\system32\netsh.exe" interface portproxy show all
8/7/2026 9:00:47 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:47 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:47 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:47 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:47 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:46 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:45 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:44 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:43 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:43 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:43 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:43 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:43 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /Get /Category:* /r
8/7/2026 9:00:42 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /configuration
8/7/2026 9:00:40 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {B4087A6D-54BA-4A0B-8B8B-B7A1A2345B73}
8/7/2026 9:00:39 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {7BEE67F7-7E7F-4C9F-A070-4B55F18F5E9C}
8/7/2026 9:00:39 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {DE145322-79D9-4929-A6B8-93C006A15604}
8/7/2026 9:00:36 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {F1BDBF5A-944E-4472-8838-6136558E999B}
8/7/2026 9:00:35 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {9A6B3834-835A-4114-AFCB-F4EADDA58EED}
8/7/2026 9:00:35 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {6C0D5FD2-1435-459F-B396-5101475CE13E}
8/7/2026 9:00:34 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {8F7F8BFE-F955-4902-88B0-3F8EAA9799D5}
8/7/2026 9:00:34 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {4350F450-3259-4D78-BAD0-A5919F63AE96}
8/7/2026 9:00:33 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {DAFE30C9-4512-49A8-9E22-DD787FECC4A1}
8/7/2026 9:00:30 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe" /enum
8/7/2026 9:00:29 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe"
8/7/2026 9:00:29 PM4688powerstrux-userC:\Windows\System32\bcdedit.exeType 2"C:\WINDOWS\system32\bcdedit.exe"
8/7/2026 8:57:58 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:58 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1011
8/7/2026 8:57:56 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:56 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1011 "C:\Users\securestrux\NTUSER.DAT"
8/7/2026 8:57:55 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:55 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1018
8/7/2026 8:57:53 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:53 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1018 "C:\Users\sly15980\NTUSER.DAT"
8/7/2026 8:57:52 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:52 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1019
8/7/2026 8:57:50 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:50 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1019 "C:\Users\tasktest\NTUSER.DAT"
8/7/2026 8:57:49 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:49 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1026
8/7/2026 8:57:46 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:46 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1026 "C:\Users\premote\NTUSER.DAT"
8/7/2026 8:57:45 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:45 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1032
8/7/2026 8:57:43 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:43 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1032 "C:\Users\powerstrux.DESKTOP-NM6VC29\NTUSER.DAT"
8/7/2026 8:57:42 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:42 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1007
8/7/2026 8:57:40 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:40 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1007 "C:\Users\powerstrux\NTUSER.DAT"
8/7/2026 8:57:36 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:36 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" UNLOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1037
8/7/2026 8:57:34 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:57:34 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\ES_TEMP_S-1-5-21-1645087665-3375922359-1671035281-1037 "C:\Users\WsiAccount\NTUSER.DAT"
8/7/2026 8:53:40 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:26:47 PM4688powerstrux-userC:\Windows\System32\Robocopy.exeType 2"robocopy.exe" C:\ C:\WINDOWS\Temp\null "*.exe.config" "*.p12" "*.pfx" /S /L /FP /XJ /NDL /NJH /NJS /NC /NP /NS /R:0 /W:0 /XD "C:\WINDOWS\CSC" "C:\WINDOWS\WinSxS" "C:\WINDOWS\servicing"
8/7/2026 8:26:44 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:26:44 PM4688powerstrux-userC:\Windows\System32\SecEdit.exeType 2"C:\WINDOWS\system32\SecEdit.exe" /export /cfg C:\WINDOWS\Temp\Evaluate-STIG\Evaluate-STIG_SecPol.ini
8/7/2026 8:26:43 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:26:43 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" LOAD HKU\Evaluate-STIG_UserHive C:\WINDOWS\Temp\Evaluate-STIG\Eval-STIG_UserHive.dat
8/7/2026 8:26:42 PM4688powerstrux-userC:\Windows\System32\conhost.exeType 2\??\C:\WINDOWS\system32\conhost.exe 0xffffffff -ForceV1
8/7/2026 8:26:42 PM4688powerstrux-userC:\Windows\System32\reg.exeType 2"C:\WINDOWS\system32\reg.exe" SAVE HKU\S-1-5-21-1645087665-3375922359-1671035281-1001 C:\WINDOWS\Temp\Evaluate-STIG\Eval-STIG_UserHive.dat /y /c
8/7/2026 8:26:29 PM4688powerstrux-userC:\Windows\System32\Dism\DismHost.exeType 2C:\Windows\System32\Dism\dismhost.exe {5AF1165C-5237-4F30-A6ED-CBC2C069B8E2}
8/7/2026 8:25:13 PM4688powerstrux-userC:\Windows\System32\wbem\WMIC.exeType 2C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid
8/7/2026 8:25:12 PM4688powerstrux-userC:\Windows\System32\cmd.exeType 2C:\WINDOWS\system32\cmd.exe /x/d/c "call C:\Windows\System32\wbem\wmic.exe useraccount where name="powerstrux-user" get sid 2>&1"
8/7/2026 8:24:48 PM4688powerstrux-userC:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exeType 2"C:\Program Files\SCAP Compliance Checker 5.14\lib64\cscc64.exe"
8/7/2026 8:23:51 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 8:23:50 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 8:21:32 PM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/7/2026 8:20:46 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 8:20:22 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 8:18:56 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe" /SESSION:ePm+nEYuVEGSH/YCJcd5dAFMQwA6AFwAUAByAG8AZwByAGEAbQAgAEYAaQBsAGUAcwBcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAE0AbwBkAHUAbABlAHMAXABSAGUAcABvAHIAdABIAFQATQBMAFwAUABvAHcAZQByAFMAdAByAHUAeABXAEEAQwBvAG4AZgBpAGcALgB0AHgAdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQAAcAXAAC6AQAATAMAAAAAAAA=
8/7/2026 8:18:56 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 8:18:33 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Install-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Install-PowerStruxWA.exe"
8/7/2026 8:18:04 PM4688powerstrux-userC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeType 2C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe
8/7/2026 8:18:04 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0xa28 --server 0xa1c
8/7/2026 8:18:01 PM4688powerstrux-userC:\Program Files\PowerShell\7\pwsh.exeType 2"C:\Program Files\PowerShell\7\pwsh.exe"
8/7/2026 8:18:01 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0x890 --server 0x880
8/7/2026 8:18:00 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\WindowsTerminal.exeType 2wt.exe
8/7/2026 8:18:00 PM4688DESKTOP-NM6VC29$C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exe"
8/7/2026 8:17:32 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe $(Arg0)
8/7/2026 8:16:50 PM4688DESKTOP-NM6VC29$C:\Windows\regedit.exeType 2"C:\WINDOWS\regedit.exe"
8/7/2026 8:16:41 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:16:31 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:15:10 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe $(Arg0)
8/7/2026 8:14:27 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:14:07 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:12:49 PM4688powerstrux-userC:\Windows\System32\gpupdate.exeType 2"C:\WINDOWS\system32\gpupdate.exe" /force
8/7/2026 8:12:02 PM4688DESKTOP-NM6VC29$C:\Windows\regedit.exeType 2"C:\WINDOWS\regedit.exe"
8/7/2026 8:11:45 PM4688DESKTOP-NM6VC29$C:\Windows\System32\sdclt.exeType 2"C:\WINDOWS\system32\sdclt.exe" /CHECKSKIPPED
8/7/2026 8:09:14 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f0,0x7fffb28e65f0,0x7fffb28e6600,0x7fffb28e6610
8/7/2026 8:09:13 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 8:08:05 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 8:08:03 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 8:08:02 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 8:07:46 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe $(Arg0)
8/7/2026 8:07:35 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 8:07:30 PM4688powerstrux-userC:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeType 2C:\WINDOWS\System32\WindowsPowerShell\v1.0\powershell.exe
8/7/2026 8:07:30 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0xa40 --server 0xa3c
8/7/2026 8:07:10 PM4688powerstrux-userC:\Program Files\PowerShell\7\pwsh.exeType 2"C:\Program Files\PowerShell\7\pwsh.exe"
8/7/2026 8:07:10 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\OpenConsole.exe" --headless --textMeasurement graphemes --width 120 --height 30 --signal 0x8c8 --server 0x8bc
8/7/2026 8:07:09 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\WindowsTerminal.exeType 2wt.exe
8/7/2026 8:07:09 PM4688DESKTOP-NM6VC29$C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.24.11911.0_x64__8wekyb3d8bbwe\wt.exe"
8/7/2026 8:06:59 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:06:44 PM4688DESKTOP-NM6VC29$C:\Windows\System32\taskhostw.exeType 2taskhostw.exe
8/7/2026 8:04:16 PM4688powerstrux-userC:\Windows\System32\mmc.exeType 2"C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\compmgmt.msc"
8/7/2026 8:03:38 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\powerstrux-user\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=151.0.7922.76 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=151.0.4129.72 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x2f0,0x7ff8f8b265f0,0x7ff8f8b26600,0x7ff8f8b26610
8/7/2026 8:03:37 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 8:03:05 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 8:03:04 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 8:03:03 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 8:02:50 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 8:02:33 PM4688powerstrux-userC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exeType 2"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\powerstrux-user\Desktop\20260807-DESKTOP-NM6VC29-POWERSTRUXWA-REPORT.html
8/7/2026 8:02:02 PM4688powerstrux-userC:\Windows\System32\NETSTAT.EXEType 2"C:\WINDOWS\system32\NETSTAT.EXE" -nao
8/7/2026 8:02:01 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 8:02:00 PM4688powerstrux-userC:\Windows\System32\w32tm.exeType 2"C:\WINDOWS\system32\w32tm.exe" /query /status
8/7/2026 8:01:47 PM4688powerstrux-userC:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exeType 2"C:\Users\powerstrux-user\Downloads\PowerStruxWA-main\PowerStruxWA-main\PowerStruxWA\Initiate-PowerStruxWA.exe"
8/7/2026 8:01:09 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe" /SESSION:Tdk7yaXxakalrmK1YDHxjAFMQwA6AFwAUAByAG8AZwByAGEAbQAgAEYAaQBsAGUAcwBcAFcAaQBuAGQAbwB3AHMAUABvAHcAZQByAFMAaABlAGwAbABcAE0AbwBkAHUAbABlAHMAXABSAGUAcABvAHIAdABIAFQATQBMAFwAUABvAHcAZQByAFMAdAByAHUAeABXAEEAQwBvAG4AZgBpAGcALgB0AHgAdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARQAAWRBAADmAQAATAMAAAAAAAA=
8/7/2026 8:01:09 PM4688powerstrux-userC:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2606.15.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exeType 2"C:\WINDOWS\system32\notepad.exe" "C:\Program Files\WindowsPowerShell\Modules\ReportHTML\PowerStruxWAConfig.txt"
8/7/2026 7:58:15 PM4688powerstrux-userC:\Windows\System32\auditpol.exeType 2"C:\WINDOWS\system32\auditpol.exe" /get /category:*
8/7/2026 7:57:12 PM4688DESKTOP-NM6VC29$C:\Windows\System32\mmc.exeType 2"C:\WINDOWS\system32\mmc.exe" "C:\WINDOWS\system32\compmgmt.msc" /s
Operation Attempted on Privileged Object Events
TimeIDAudit TypeUserPrivilege
8/8/2026 10:18:30 AM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:26 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:24 AM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/8/2026 10:18:24 AM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/8/2026 10:18:23 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:23 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:23 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:18:23 AM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/8/2026 10:16:04 AM4674Audit Failurepowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:11 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:11 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:11 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:11 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:10 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:10 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:10 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:10 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:35:09 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:55 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:34:52 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:19:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:19:13 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:19:13 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:55 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:18:15 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:08 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:07 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:15:07 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:15:05 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:05 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:05 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:15:05 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:13:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:12:51 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:43 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:42 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:09:42 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:09:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:09:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:08:40 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:07:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:46 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:44 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:44 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:44 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:44 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:14 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:13 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:13 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:11 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:11 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:11 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:11 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 9:04:03 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:04:03 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege SeTakeOwnershipPrivilege
8/7/2026 9:03:53 PM4674Audit Successpowerstrux-userSeSecurityPrivilege SeTakeOwnershipPrivilege
8/7/2026 9:01:07 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:07 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:07 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:06 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:06 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:06 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:06 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:06 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:01:05 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:47 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:47 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:47 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:47 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:47 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:46 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:45 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:44 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:43 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:43 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:43 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:43 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 9:00:43 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:26:47 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:47 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:47 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:47 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:17 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:26:16 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:26:16 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:25:13 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:23:50 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:29 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:28 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:28 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:28 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:28 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:27 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:20:27 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:20:24 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:24 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:24 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:20:24 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:08:03 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:42 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:40 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:07:40 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:07:36 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:36 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:36 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:07:36 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:03:04 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:56 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:02:54 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:02:51 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:51 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:51 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:51 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:02:01 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:53 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:51 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:01:51 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 8:01:48 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:48 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:48 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 8:01:48 PM4674Audit Successpowerstrux-userSeTakeOwnershipPrivilege
8/7/2026 7:58:15 PM4674Audit Successpowerstrux-userSeSecurityPrivilege
8/7/2026 7:55:38 PM4674Audit Failurepowerstrux-userSeSecurityPrivilege
System Time Change Events
TimeIDUserPrevious TimeNew Time
8/8/2026 9:45:43 AM4616LOCAL SERVICE8/8/2026 9:45:43 AM8/8/2026 9:45:43 AM
8/8/2026 2:33:15 AM4616LOCAL SERVICE8/8/2026 2:33:15 AM8/8/2026 2:33:15 AM
8/7/2026 9:03:29 PM4616LOCAL SERVICE8/7/2026 9:03:29 PM8/7/2026 9:03:29 PM
8/7/2026 9:03:29 PM4616LOCAL SERVICE8/7/2026 11:03:22 PM8/7/2026 9:03:29 PM
8/7/2026 11:03:03 PM4616powerstrux-user8/7/2026 11:03:03 PM8/7/2026 11:03:03 PM
8/7/2026 11:03:03 PM4616powerstrux-user8/7/2026 9:03:10 PM8/7/2026 11:03:03 PM
Event Log Action Events
TimeIDDetailsAction
8/7/2026 8:13:23 PM1100The event logging service has shut down.Service shutdown
8/7/2026 8:05:22 PM1100The event logging service has shut down.Service shutdown
8/7/2026 7:51:35 PM1102The audit log was cleared. Subject: Security ID: S-1-5-21-1645087665-3375922359-1671035281-1001 Account Name: powerstrux-user Domain Name: DESKTOP-NM6VC29 Logon ID: 0x1FF19DService shutdown
System Event Log Capacity
Log NameMax Size (Bytes)Current Size (Bytes)Max Size (MB)Current Size (MB)Percent Full
Application335544328458240328.0725.21
Security104857600045158400100043.074.31
System33554432335585283232100.01
System Audit Policy
SubcategorySetting
Security System ExtensionSuccess
System IntegritySuccess and Failure
IPsec DriverFailure
Other System EventsSuccess and Failure
Security State ChangeSuccess
LogonSuccess and Failure
LogoffSuccess
Account LockoutFailure
IPsec Main ModeNo Auditing
IPsec Quick ModeNo Auditing
IPsec Extended ModeNo Auditing
Special LogonSuccess
Other Logon/Logoff EventsSuccess and Failure
Network Policy ServerNo Auditing
User / Device ClaimsNo Auditing
Group MembershipSuccess
Access RightsNo Auditing
File SystemNo Auditing
RegistryNo Auditing
Kernel ObjectNo Auditing
SAMNo Auditing
Certification ServicesNo Auditing
Application GeneratedNo Auditing
Handle ManipulationNo Auditing
File ShareSuccess and Failure
Filtering Platform Packet DropNo Auditing
Filtering Platform ConnectionNo Auditing
Other Object Access EventsSuccess and Failure
Detailed File ShareFailure
Removable StorageSuccess and Failure
Central Policy StagingNo Auditing
Non Sensitive Privilege UseNo Auditing
Other Privilege Use EventsNo Auditing
Sensitive Privilege UseSuccess and Failure
Process CreationSuccess and Failure
Process TerminationNo Auditing
DPAPI ActivityNo Auditing
RPC EventsNo Auditing
Plug and Play EventsSuccess
Token Right Adjusted EventsNo Auditing
Audit Policy ChangeSuccess
Authentication Policy ChangeSuccess
Authorization Policy ChangeSuccess
MPSSVC Rule-Level Policy ChangeSuccess and Failure
Filtering Platform Policy ChangeNo Auditing
Other Policy Change EventsSuccess and Failure
Computer Account ManagementNo Auditing
Security Group ManagementSuccess
Distribution Group ManagementNo Auditing
Application Group ManagementNo Auditing
Other Account Management EventsNo Auditing
User Account ManagementSuccess and Failure
Directory Service AccessNo Auditing
Directory Service ChangesNo Auditing
Directory Service ReplicationNo Auditing
Detailed Directory Service ReplicationNo Auditing
Kerberos Service Ticket OperationsNo Auditing
Other Account Logon EventsNo Auditing
Kerberos Authentication ServiceNo Auditing
Credential ValidationSuccess and Failure
System Audit Policy was Changed Events
TimeIDSubject AccountTarget SubCategoryChangeTarget Account
8/7/2026 8:06:05 PM4719DESKTOP-NM6VC29$RegistrySuccess removed
8/7/2026 8:06:05 PM4719DESKTOP-NM6VC29$File SystemSuccess removed

Report: 08-08-2026
Miscellaneous System Information & Events
Installed Software
NameVersionVendorInstall Date
Docker Desktop4.40.0Docker Inc.
Notepad++ (64-bit x64)8.8.1Notepad++ Team
Microsoft 365 - en-us16.0.20228.20158Microsoft Corporation
Microsoft OneDrive26.129.0706.0004Microsoft Corporation
Microsoft Update Health Tools5.72.0.0Microsoft Corporation01/07/2024
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.3521114.44.35211Microsoft Corporation02/03/2026
InstallRoot5.6DoD PKE03/11/2026
SCAP Compliance Checker 5.145.14NIWC Atlantic03/11/2026
Windows Subsystem for Linux2.4.13.0Microsoft Corporation04/17/2025
Snagit 202525.1.1TechSmith Corporation04/30/2025
Snagit 202525.1.1.6503TechSmith Corporation04/30/2025
Tenable Nessus (x64)10.8.4.20028Tenable, Inc.04/30/2025
Office 16 Click-to-Run Extensibility Component16.0.20131.20112Microsoft Corporation07/08/2026
PowerShell 7-x647.4.17.0Microsoft Corporation07/08/2026
VMware Workstation17.6.4VMware, Inc.08/22/2025
NVIDIA Graphics Driver 512.72512.72NVIDIA Corporation11/14/2024
NVIDIA Install Application2.1002.370.0NVIDIA Corporation11/14/2024
Npcap OEM1.72Nmap Project
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.3521114.44.35211.0Microsoft Corporation
PowerShell 7.4.17.0-x647.4.17.0Microsoft Corporation
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.3521114.44.35211.0Microsoft Corporation
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.3521114.44.35211Microsoft Corporation02/03/2026
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.3521114.44.35211Microsoft Corporation02/03/2026
Copilot150.0.4078.96Microsoft Corporation07/28/2026
InstallRoot5.6DoD PKE07/31/2025
Google Chrome151.0.7922.76Google LLC08/07/2026
Microsoft Edge151.0.4129.72Microsoft Corporation08/07/2026
Microsoft Edge WebView2 Runtime151.0.4129.72Microsoft Corporation08/08/2026
System Startup Events
TimeIDMachine NameAction
8/7/2026 8:13:51 PM4608DESKTOP-NM6VC29Security State Change: Windows Started
8/7/2026 8:06:03 PM4608DESKTOP-NM6VC29Security State Change: Windows Started
System Reboot, Restart, and Shutdown Events
TimeIDTitleUserProcessShutdownType
8/7/2026 8:13:23 PM6006The Event Log service was stopped.Not RecordedNot RecordedNot Recorded
8/7/2026 8:13:16 PM1074The system has been shut down properly by a user or process.DESKTOP-NM6VC29\powerstrux-userC:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (DESKTOP-NM6VC29)restart
8/7/2026 8:05:22 PM6006The Event Log service was stopped.Not RecordedNot RecordedNot Recorded
8/7/2026 8:05:13 PM1074The system has been shut down properly by a user or process.DESKTOP-NM6VC29\powerstrux-userC:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe (DESKTOP-NM6VC29)restart
8/7/2026 2:02:27 PM6006The Event Log service was stopped.Not RecordedNot RecordedNot Recorded
8/3/2026 11:45:18 AM1074The system has been shut down properly by a user or process.DESKTOP-NM6VC29\powerstrux-userC:\WINDOWS\system32\winlogon.exe (DESKTOP-NM6VC29)power off
8/3/2026 10:29:29 AM6006The Event Log service was stopped.Not RecordedNot RecordedNot Recorded
System Service Information
NameServiceStatusStart Type
Agent Activation Runtime_36a448AarSvc_36a448StoppedManual
Aggregated Data Platform ServiceADPSvcStoppedManual
Application Layer Gateway ServiceALGStoppedManual
Application IdentityAppIDSvcStoppedManual
Application InformationAppinfoRunningManual
Application ManagementAppMgmtStoppedManual
App ReadinessAppReadinessStoppedManual
Microsoft App-V ClientAppVClientStoppedDisabled
AppX Deployment Service (AppXSVC)AppXSvcRunningAutomatic
Windows Virtual Audio Device Proxy ServiceApxSvcStoppedManual
AssignedAccessManager ServiceAssignedAccessManagerSvcStoppedManual
AtherosSvcAtherosSvcRunningAutomatic
Windows Audio Endpoint BuilderAudioEndpointBuilderRunningAutomatic
Windows AudioAudiosrvRunningAutomatic
Cellular TimeautotimesvcStoppedManual
ActiveX Installer (AxInstSV)AxInstSVStoppedManual
GameDVR and Broadcast User Service_36a448BcastDVRUserService_36a448StoppedManual
BitLocker Drive Encryption ServiceBDESVCStoppedManual
Base Filtering EngineBFERunningAutomatic
Background Intelligent Transfer ServiceBITSStoppedManual
Bluetooth User Support Service_36a448BluetoothUserService_36a448RunningManual
Background Tasks Infrastructure ServiceBrokerInfrastructureRunningAutomatic
Bluetooth Audio Gateway ServiceBTAGServiceRunningManual
AVCTP serviceBthAvctpSvcRunningManual
Bluetooth Support ServicebthservRunningManual
Capability Access Manager ServicecamsvcRunningAutomatic
CaptureService_36a448CaptureService_36a448StoppedManual
Clipboard User Service_36a448cbdhsvc_36a448RunningAutomatic
Connected Devices Platform ServiceCDPSvcRunningAutomatic
Connected Devices Platform User Service_36a448CDPUserSvc_36a448RunningAutomatic
Certificate PropagationCertPropSvcRunningAutomatic
Microsoft Office Click-to-Run ServiceClickToRunSvcRunningAutomatic
Client License Service (ClipSVC)ClipSVCStoppedManual
Cloud Backup and Restore Service_36a448CloudBackupRestoreSvc_36a448StoppedManual
Microsoft Cloud Identity ServicecloudidsvcStoppedManual
Container Manager ServiceCmServiceRunningAutomatic
Docker Desktop Servicecom.docker.serviceStoppedManual
COM+ System ApplicationCOMSysAppStoppedManual
ConsentUX User Service_36a448ConsentUxUserSvc_36a448StoppedManual
CoreMessagingCoreMessagingRegistrarRunningAutomatic
Intel(R) Content Protection HECI ServicecphsRunningManual
Intel(R) Content Protection HDCP ServicecplspconRunningAutomatic
CredentialEnrollmentManagerUserSvc_36a448CredentialEnrollmentManagerUserSvc_36a448StoppedManual
Cryptographic ServicesCryptSvcRunningAutomatic
Offline FilesCscServiceStoppedManual
DCOM Server Process LauncherDcomLaunchRunningAutomatic
Declared Configuration(DC) servicedcsvcStoppedManual
Optimize drivesdefragsvcStoppedManual
DeviceAssociationBroker_36a448DeviceAssociationBrokerSvc_36a448StoppedManual
Device Association ServiceDeviceAssociationServiceRunningAutomatic
Device Install ServiceDeviceInstallStoppedManual
DevicePicker_36a448DevicePickerUserSvc_36a448StoppedManual
DevicesFlow_36a448DevicesFlowUserSvc_36a448RunningManual
DevQuery Background Discovery BrokerDevQueryBrokerRunningManual
DHCP ClientDhcpRunningAutomatic
Diagnostic Execution ServicediagsvcStoppedManual
Connected User Experiences and TelemetryDiagTrackRunningAutomatic
DialogBlockingServiceDialogBlockingServiceStoppedDisabled
Display Policy ServiceDispBrokerDesktopSvcRunningAutomatic
Display Enhancement ServiceDisplayEnhancementServiceRunningManual
Device Management Enrollment ServiceDmEnrollmentSvcStoppedManual
Device Management Wireless Application Protocol (WAP) Push message Routing ServicedmwappushserviceStoppedManual
DNS ClientDnscacheRunningAutomatic
Delivery OptimizationDoSvcRunningAutomatic
Wired AutoConfigdot3svcStoppedManual
Diagnostic Policy ServiceDPSRunningAutomatic
Device Setup ManagerDsmSvcStoppedManual
Data Sharing ServiceDsSvcStoppedManual
Data UsageDusmSvcRunningAutomatic
Extensible Authentication ProtocolEapHostStoppedManual
Microsoft Edge Update Service (edgeupdate)edgeupdateStoppedAutomatic
Microsoft Edge Update Service (edgeupdatem)edgeupdatemStoppedManual
Encrypting File System (EFS)EFSStoppedManual
Embedded ModeembeddedmodeStoppedManual
Enterprise App Management ServiceEntAppSvcStoppedManual
Intel(R) Dynamic Platform and Thermal Framework serviceesifsvcRunningAutomatic
Windows Event LogEventLogRunningAutomatic
COM+ Event SystemEventSystemRunningAutomatic
FaxFaxStoppedManual
Function Discovery Provider HostfdPHostStoppedManual
Function Discovery Resource PublicationFDResPubStoppedManual
File History ServicefhsvcStoppedManual
FileSyncHelperFileSyncHelperRunningManual
Windows Font Cache ServiceFontCacheRunningAutomatic
Windows Camera Frame ServerFrameServerRunningManual
Windows Camera Frame Server MonitorFrameServerMonitorStoppedManual
GameInput ServiceGameInputSvcStoppedManual
Hyper-V Guest Compute ServicegcsStoppedManual
Google Chrome Elevation Service (GoogleChromeElevationService)GoogleChromeElevationServiceStoppedManual
Google Updater Internal Service (GoogleUpdaterInternalService152.0.7933.0)GoogleUpdaterInternalService152.0.7933.0StoppedAutomatic
Google Updater Service (GoogleUpdaterService152.0.7933.0)GoogleUpdaterService152.0.7933.0StoppedAutomatic
Group Policy ClientgpsvcRunningAutomatic
GraphicsPerfSvcGraphicsPerfSvcStoppedManual
Intel(R) RST HFC Disable ServiceHfcDisableServiceStoppedDisabled
Human Interface Device ServicehidservRunningManual
Host Network ServicehnsRunningManual
Hotpatch Monitoring ServicehpatchmonStoppedManual
HV Host ServiceHvHostRunningManual
Intel(R) Optane(TM) Memory ServiceiaStorAfsServiceStoppedManual
Windows Mobile Hotspot ServiceicssvcStoppedManual
Intel(R) Graphics Command Center ServiceigccserviceRunningAutomatic
Intel(R) HD Graphics Control Panel ServiceigfxCUIService2.0.0.0RunningAutomatic
IKE and AuthIP IPsec Keying ModulesIKEEXTRunningAutomatic
InstallRootInstallRootStoppedAutomatic
Microsoft Store Install ServiceInstallServiceRunningManual
Intel(R) Capability Licensing Service TCP IP InterfaceIntel(R) Capability Licensing Service TCP IP InterfaceStoppedManual
Intel(R) TPM Provisioning ServiceIntel(R) TPM Provisioning ServiceStoppedAutomatic
Intel(R) Audio ServiceIntelAudioServiceRunningAutomatic
Inventory and Compatibility Appraisal serviceInventorySvcRunningAutomatic
IP HelperiphlpsvcRunningAutomatic
IP Translation Configuration ServiceIpxlatCfgSvcStoppedManual
Isolation Environment BrokerIsoEnvBrokerStoppedManual
Intel(R) Dynamic Application Loader Host Interface Servicejhi_serviceRunningAutomatic
CNG Key IsolationKeyIsoRunningManual
KtmRm for Distributed Transaction CoordinatorKtmRmStoppedManual
ServerLanmanServerRunningAutomatic
WorkstationLanmanWorkstationRunningAutomatic
Geolocation ServicelfsvcRunningManual
Windows License Manager ServiceLicenseManagerRunningManual
Link-Layer Topology Discovery MapperlltdsvcStoppedManual
TCP/IP NetBIOS HelperlmhostsRunningManual
Intel(R) Management and Security Application Local Management ServiceLMSRunningAutomatic
Kerberos Local Key Distribution CenterLocalKdcStoppedManual
Local Session ManagerLSMRunningAutomatic
Language Experience ServiceLxpSvcStoppedManual
Downloaded Maps ManagerMapsBrokerStoppedAutomatic
Mobile Connectivity Management ServiceMcmSvcStoppedManual
McpManagementServiceMcpManagementServiceStoppedManual
Microsoft Defender Core ServiceMDCoreSvcRunningAutomatic
MessagingService_36a448MessagingService_36a448StoppedManual
Microsoft Copilot Elevation Service (MicrosoftCopilotElevationService)MicrosoftCopilotElevationServiceStoppedManual
Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)MicrosoftEdgeElevationServiceRunningManual
Windows MIDI ServicemidisrvStoppedManual
Windows Defender FirewallmpssvcRunningAutomatic
Distributed Transaction CoordinatorMSDTCStoppedManual
Microsoft iSCSI Initiator ServiceMSiSCSIStoppedManual
Windows InstallermsiserverStoppedManual
Microsoft Keyboard FilterMsKeyboardFilterStoppedDisabled
Nahimic serviceNahimicServiceRunningAutomatic
Natural AuthenticationNaturalAuthenticationStoppedManual
Network Connectivity AssistantNcaSvcStoppedManual
Network Connection BrokerNcbServiceRunningManual
Network Connected Devices Auto-SetupNcdAutoSetupStoppedManual
NetlogonNetlogonStoppedManual
Network ConnectionsNetmanStoppedManual
Network List ServicenetprofmRunningManual
Network Setup ServiceNetSetupSvcRunningManual
Net.Tcp Port Sharing ServiceNetTcpPortSharingStoppedDisabled
Microsoft Passport ContainerNgcCtnrSvcRunningManual
Microsoft PassportNgcSvcRunningManual
Network Location AwarenessNlaSvcStoppedManual
Now Playing Session Manager Service_36a448NPSMSvc_36a448RunningManual
Network Store Interface ServicensiRunningAutomatic
Network Virtualization ServicenvagentRunningManual
NVIDIA Display Container LSNVDisplay.ContainerLocalSystemRunningAutomatic
OneDrive Updater ServiceOneDrive Updater ServiceStoppedManual
Sync Host_36a448OneSyncSvc_36a448StoppedManual
P9RdrService_36a448P9RdrService_36a448StoppedManual
Program Compatibility Assistant ServicePcaSvcRunningAutomatic
BranchCachePeerDistSvcStoppedManual
PenService_36a448PenService_36a448StoppedManual
Windows Perception Simulation ServiceperceptionsimulationStoppedManual
Performance Counter DLL HostPerfHostStoppedManual
Phone ServicePhoneSvcRunningManual
Contact Data_36a448PimIndexMaintenanceSvc_36a448StoppedManual
Performance Logs & AlertsplaStoppedManual
Plug and PlayPlugPlayRunningManual
IPsec Policy AgentPolicyAgentStoppedManual
PowerPowerRunningAutomatic
Print Device Configuration ServicePrintDeviceConfigurationServiceStoppedManual
Printer Extensions and NotificationsPrintNotifyStoppedManual
PrintScanBrokerServicePrintScanBrokerServiceStoppedManual
PrintWorkflow_36a448PrintWorkflowUserSvc_36a448StoppedManual
User Profile ServiceProfSvcRunningAutomatic
Windows PushToInstall ServicePushToInstallStoppedManual
Qualcomm Atheros WLAN Driver ServiceQcomWlanSrvRunningAutomatic
Quality Windows Audio Video ExperienceQWAVEStoppedManual
Remote Access Auto Connection ManagerRasAutoStoppedManual
Remote Access Connection ManagerRasManRunningManual
ReFS Dedup ServicerefsdedupsvcStoppedManual
Routing and Remote AccessRemoteAccessStoppedDisabled
Remote RegistryRemoteRegistryStoppedManual
Retail Demo ServiceRetailDemoStoppedManual
Radio Management ServiceRmSvcRunningManual
RPC Endpoint MapperRpcEptMapperRunningAutomatic
Remote Procedure Call (RPC) LocatorRpcLocatorStoppedManual
Remote Procedure Call (RPC)RpcSsRunningAutomatic
Intel(R) Storage Middleware ServiceRstMwServiceRunningAutomatic
Realtek Audio Universal ServiceRtkAudioUniversalServiceRunningAutomatic
Security Accounts ManagerSamSsRunningAutomatic
Smart CardSCardSvrStoppedAutomatic
Smart Card Device Enumeration ServiceScDeviceEnumStoppedManual
Task SchedulerScheduleRunningAutomatic
Smart Card Removal PolicySCPolicySvcStoppedManual
Windows BackupSDRSVCRunningManual
Secondary LogonseclogonRunningManual
Windows Security ServiceSecurityHealthServiceRunningManual
Payments and NFC/SE ManagerSEMgrSvcStoppedManual
System Event Notification ServiceSENSRunningAutomatic
Windows Defender Advanced Threat Protection ServiceSenseStoppedManual
Sensor Data ServiceSensorDataServiceStoppedManual
Sensor ServiceSensorServiceStoppedManual
Sensor Monitoring ServiceSensrSvcStoppedManual
Remote Desktop ConfigurationSessionEnvRunningManual
Internet Connection Sharing (ICS)SharedAccessRunningManual
Shell Hardware DetectionShellHWDetectionRunningAutomatic
Shared PC Account ManagershpamsvcStoppedDisabled
Microsoft Storage Spaces SMPsmphostRunningManual
Microsoft Windows SMS Router Service.SmsRouterStoppedManual
SNMP TrapSNMPTrapStoppedManual
Print SpoolerSpoolerRunningAutomatic
Software ProtectionsppsvcStoppedAutomatic
SSDP DiscoverySSDPSRVRunningManual
OpenSSH Authentication Agentssh-agentStoppedDisabled
Secure Socket Tunneling Protocol ServiceSstpSvcRunningManual
State Repository ServiceStateRepositoryRunningAutomatic
Windows Image Acquisition (WIA)StiSvcRunningAutomatic
Storage ServiceStorSvcRunningAutomatic
Spot VerifiersvsvcStoppedManual
Microsoft Software Shadow Copy ProviderswprvStoppedManual
SysMainSysMainRunningAutomatic
SysmonSysmonRunningAutomatic
System Events BrokerSystemEventsBrokerRunningAutomatic
TelephonyTapiSrvStoppedManual
Tenable NessusTenable NessusRunningAutomatic
Remote Desktop ServicesTermServiceRunningManual
Text Input Management ServiceTextInputManagementServiceRunningAutomatic
ThemesThemesRunningAutomatic
Storage Tiers ManagementTieringEngineServiceStoppedManual
Time BrokerTimeBrokerSvcRunningManual
Web Account ManagerTokenBrokerRunningManual
Distributed Link Tracking ClientTrkWksRunningAutomatic
Recommended Troubleshooting ServiceTroubleshootingSvcStoppedManual
Windows Modules InstallerTrustedInstallerRunningManual
Auto Time Zone UpdatertzautoupdateStoppedManual
Udk User Service_36a448UdkUserSvc_36a448RunningManual
User Experience Virtualization ServiceUevAgentServiceStoppedDisabled
Remote Desktop Services UserMode Port RedirectorUmRdpServiceRunningManual
User Data Storage_36a448UnistoreSvc_36a448StoppedManual
UPnP Device HostupnphostStoppedManual
User Data Access_36a448UserDataSvc_36a448StoppedManual
User ManagerUserManagerRunningAutomatic
Update Orchestrator ServiceUsoSvcRunningAutomatic
Credential ManagerVaultSvcRunningManual
Virtual DiskvdsStoppedManual
VMware Authorization ServiceVMAuthdServiceRunningAutomatic
Hyper-V Host Compute ServicevmcomputeRunningManual
Hyper-V Guest Service InterfacevmicguestinterfaceStoppedManual
Hyper-V Heartbeat ServicevmicheartbeatStoppedManual
Hyper-V Data Exchange ServicevmickvpexchangeStoppedManual
Hyper-V Remote Desktop Virtualization ServicevmicrdvStoppedManual
Hyper-V Guest Shutdown ServicevmicshutdownStoppedManual
Hyper-V Time Synchronization ServicevmictimesyncStoppedManual
Hyper-V PowerShell Direct ServicevmicvmsessionStoppedManual
Hyper-V Volume Shadow Copy RequestorvmicvssStoppedManual
VMware DHCP ServiceVMnetDHCPRunningAutomatic
VMware USB Arbitration ServiceVMUSBArbServiceRunningAutomatic
VMware NAT ServiceVMware NAT ServiceRunningAutomatic
VMware Autostart ServiceVmwareAutostartServiceStoppedManual
Volume Shadow CopyVSSStoppedManual
Windows TimeW32TimeRunningManual
WaaSMedicSvcWaaSMedicSvcStoppedManual
WalletServiceWalletServiceStoppedManual
Warp JIT ServiceWarpJITSvcStoppedManual
Block Level Backup Engine ServicewbengineStoppedManual
Windows Biometric ServiceWbioSrvcStoppedManual
Windows Connection ManagerWcmsvcRunningAutomatic
Windows Connect Now - Config RegistrarwcncsvcStoppedManual
Diagnostic Service HostWdiServiceHostStoppedManual
Diagnostic System HostWdiSystemHostRunningManual
Microsoft Defender Antivirus Network Inspection ServiceWdNisSvcRunningManual
WebClientWebClientStoppedManual
Web Threat Defense ServicewebthreatdefsvcRunningManual
Web Threat Defense User Service_36a448webthreatdefusersvc_36a448RunningAutomatic
Windows Event CollectorWecsvcStoppedManual
Windows Encryption Provider Host ServiceWEPHOSTSVCStoppedManual
Problem Reports Control Panel SupportwercplsupportStoppedManual
Windows Error Reporting ServiceWerSvcStoppedManual
Wi-Fi Direct Services Connection Manager ServiceWFDSConMgrSvcStoppedManual
Windows Health and Optimized ExperienceswhesvcRunningAutomatic
Still Image Acquisition EventsWiaRpcStoppedManual
Microsoft Defender Antivirus ServiceWinDefendRunningAutomatic
WinHTTP Web Proxy Auto-Discovery ServiceWinHttpAutoProxySvcRunningManual
Windows Management InstrumentationWinmgmtRunningAutomatic
Windows Remote Management (WS-Management)WinRMRunningAutomatic
Windows Insider ServicewisvcStoppedManual
WLAN AutoConfigWlanSvcRunningAutomatic
Microsoft Account Sign-in AssistantwlidsvcStoppedManual
Local Profile Assistant ServicewlpasvcStoppedManual
Windows Management ServiceWManSvcStoppedManual
WMI Performance AdapterwmiApSrvStoppedManual
Intel(R) Management Engine WMI Provider RegistrationWMIRegistrationServiceRunningAutomatic
Windows Media Player Network Sharing ServiceWMPNetworkSvcStoppedManual
Work FoldersworkfolderssvcStoppedManual
Parental ControlsWpcMonSvcRunningManual
Portable Device Enumerator ServiceWPDBusEnumStoppedManual
Windows Push Notifications System ServiceWpnServiceRunningAutomatic
Windows Push Notifications User Service_36a448WpnUserService_36a448RunningAutomatic
WSAIFabricSvcWSAIFabricSvcRunningAutomatic
Security CenterwscsvcRunningAutomatic
Windows SearchWSearchRunningAutomatic
WSL ServiceWSLServiceRunningAutomatic
Windows UpdatewuauservStoppedManual
Microsoft Usage and Quality InsightswuqisvcStoppedManual
WWAN AutoConfigWwanSvcStoppedManual
Xbox Live Auth ManagerXblAuthManagerStoppedManual
Xbox Live Game SaveXblGameSaveStoppedManual
Xbox Accessory Management ServiceXboxGipSvcStoppedManual
Xbox Live Networking ServiceXboxNetApiSvcStoppedManual
ZTDNS Helper serviceZTHELPERStoppedManual
System Port Information (netstat)
ProtocolLocal AddressForeign AddressConnection State
TCP0.0.0.0:1350.0.0.0:0LISTENING
TCP0.0.0.0:4450.0.0.0:0LISTENING
TCP0.0.0.0:9030.0.0.0:0LISTENING
TCP0.0.0.0:9130.0.0.0:0LISTENING
TCP0.0.0.0:33890.0.0.0:0LISTENING
TCP0.0.0.0:50400.0.0.0:0LISTENING
TCP0.0.0.0:59850.0.0.0:0LISTENING
TCP0.0.0.0:76800.0.0.0:0LISTENING
TCP0.0.0.0:88340.0.0.0:0LISTENING
TCP0.0.0.0:470010.0.0.0:0LISTENING
TCP0.0.0.0:496640.0.0.0:0LISTENING
TCP0.0.0.0:496650.0.0.0:0LISTENING
TCP0.0.0.0:496660.0.0.0:0LISTENING
TCP0.0.0.0:496670.0.0.0:0LISTENING
TCP0.0.0.0:496680.0.0.0:0LISTENING
TCP0.0.0.0:496940.0.0.0:0LISTENING
TCP0.0.0.0:496950.0.0.0:0LISTENING
TCP127.0.0.1:49692127.0.0.1:49693ESTABLISHED
TCP127.0.0.1:49693127.0.0.1:49692ESTABLISHED
TCP127.0.0.1:49698127.0.0.1:49699ESTABLISHED
TCP127.0.0.1:49699127.0.0.1:49698ESTABLISHED
TCP192.168.4.36:1390.0.0.0:0LISTENING
TCP192.168.4.36:49161185.199.108.215:443ESTABLISHED
TCP192.168.4.36:49259185.199.111.133:443ESTABLISHED
TCP192.168.4.36:4941420.59.87.226:443ESTABLISHED
TCP192.168.4.36:50388150.171.110.210:443ESTABLISHED
TCP192.168.4.36:5038952.179.73.59:443ESTABLISHED
TCP192.168.4.36:5397272.152.54.162:443ESTABLISHED
TCP192.168.4.36:53989140.82.114.21:443ESTABLISHED
TCP192.168.4.36:54469172.183.7.194:443ESTABLISHED
TCP192.168.4.36:58478172.178.160.17:443TIME_WAIT
TCP192.168.4.36:584804.150.223.112:443TIME_WAIT
TCP192.168.4.36:5848672.145.35.103:443ESTABLISHED
TCP192.168.4.36:61355107.170.69.17:443ESTABLISHED
TCP192.168.4.36:63250140.82.114.25:443ESTABLISHED
TCP192.168.4.36:6325152.96.226.130:443ESTABLISHED
TCP192.168.4.36:64267135.234.174.40:443ESTABLISHED
TCP192.168.195.1:1390.0.0.0:0LISTENING
TCP[::]:135[::]:0LISTENING
TCP[::]:445[::]:0LISTENING
TCP[::]:3389[::]:0LISTENING
TCP[::]:5985[::]:0LISTENING
TCP[::]:7680[::]:0LISTENING
TCP[::]:8834[::]:0LISTENING
TCP[::]:47001[::]:0LISTENING
TCP[::]:49664[::]:0LISTENING
TCP[::]:49665[::]:0LISTENING
TCP[::]:49666[::]:0LISTENING
TCP[::]:49667[::]:0LISTENING
TCP[::]:49668[::]:0LISTENING
TCP[::]:49694[::]:0LISTENING
TCP[::]:49695[::]:0LISTENING
TCP[::1]:49669[::]:0LISTENING
UDP0.0.0.0:123*:*12344
UDP0.0.0.0:500*:*6488
UDP0.0.0.0:3389*:*7832
UDP0.0.0.0:3544*:*5956
UDP0.0.0.0:3702*:*3564
UDP0.0.0.0:3702*:*3564
UDP0.0.0.0:4500*:*6488
UDP0.0.0.0:5050*:*10712
UDP0.0.0.0:5353*:*12976
UDP0.0.0.0:5353*:*12976
UDP0.0.0.0:5353*:*2184
UDP0.0.0.0:5355*:*2184
UDP0.0.0.0:5057623.62.106.135:44317388
UDP0.0.0.0:57530*:*3564
UDP0.0.0.0:63173*:*2184
UDP0.0.0.0:64102*:*2184
UDP127.0.0.1:1900*:*5224
UDP127.0.0.1:49669127.0.0.1:496695956
UDP127.0.0.1:52311*:*5224
UDP192.168.4.36:137*:*4
UDP192.168.4.36:138*:*4
UDP192.168.4.36:1900*:*5224
UDP192.168.4.36:50228*:*5956
UDP192.168.4.36:52310*:*5224
UDP192.168.195.1:137*:*4
UDP192.168.195.1:138*:*4
UDP192.168.195.1:1900*:*5224
UDP192.168.195.1:52309*:*5224
UDP[::]:123*:*12344
UDP[::]:500*:*6488
UDP[::]:3389*:*7832
UDP[::]:3702*:*3564
UDP[::]:3702*:*3564
UDP[::]:4500*:*6488
UDP[::]:5353*:*2184
UDP[::]:57531*:*3564
UDP[::]:63173*:*2184
UDP[::]:64102*:*2184
UDP[::1]:1900*:*5224
UDP[::1]:52308*:*5224
Windows Backup Events
TimeIDEvent SeverityMessage
8/3/2026 10:38:43 AM4103ErrorThe backup did not complete because of an error writing to the backup location F:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).
8/3/2026 10:38:43 AM4097InformationBackup has started. Backup location: F:\.
Scheduled Task Events
TimeIDActionUserTask
8/8/2026 9:42:55 AM4698A scheduled task was createdpowerstrux-user\SoftLanding\S-1-5-21-1645087665-3375922359-1671035281-1001\SoftLandingDeferralTask-{8a7bc312-af7d-4b5b-8ae7-b5519e5006da}
8/8/2026 9:42:55 AM4701A scheduled task was disabledpowerstrux-user\SoftLanding\S-1-5-21-1645087665-3375922359-1671035281-1001\SoftLandingTriggerTask-128000000001615609-render-{ab1a37ea-4c30-4492-8409-d746a7e6db28}
8/8/2026 9:42:55 AM4698A scheduled task was createdpowerstrux-user\SoftLanding\S-1-5-21-1645087665-3375922359-1671035281-1001\SoftLandingTriggerTask-128000000001615609-render-{ab1a37ea-4c30-4492-8409-d746a7e6db28}
8/8/2026 9:42:55 AM4699A scheduled task was deletedpowerstrux-user\SoftLanding\S-1-5-21-1645087665-3375922359-1671035281-1001\SoftLandingDeferralTask-{be3a6a48-9e2b-4467-b365-fc4586caea4d}
8/8/2026 9:42:55 AM4699A scheduled task was deletedpowerstrux-user\SoftLanding\S-1-5-21-1645087665-3375922359-1671035281-1001\SoftLandingTriggerTask-128000000001615609-render-{060f7047-6c73-4c04-bdca-6a5ab966009f}
8/7/2026 8:53:40 PM4701A scheduled task was disabledpowerstrux-user\Microsoft\Windows\Printing\PrintJobCleanupTask
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:17 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:17 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:17 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:17 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:16 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:15 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:12 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:11 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:11 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:10 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:09 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:08 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:07 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:07 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:07 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:07 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:14:07 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:14:07 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:02 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:01 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:07:00 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:07:00 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:59 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:59 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:58 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:58 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:58 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:58 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:58 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:58 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:58 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:57 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:57 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:57 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:57 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:56 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:56 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:56 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:56 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:56 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:56 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:56 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:55 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:55 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:55 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:55 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:55 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:55 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:54 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:54 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:54 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:54 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:53 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:52 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:52 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:52 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:52 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:51 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:50 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:49 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:49 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:48 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:48 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:47 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:47 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:47 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:46 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:45 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:06:44 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:20 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:19 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:05:18 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:43 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 8:03:42 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:14 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:14 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:14 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:14 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:13 PM4699A scheduled task was deletedDESKTOP-NM6VC29$\NahimicTask32
8/7/2026 7:56:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask64
8/7/2026 7:56:12 PM4698A scheduled task was createdDESKTOP-NM6VC29$\NahimicTask32
Service Install Events
TimeIDUserService NameService File Name
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$WpnUserService_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$webthreatdefusersvc_36a448C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$UserDataSvc_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$UnistoreSvc_36a448C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$UdkUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$PrintWorkflowUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k PrintWorkflow
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$PimIndexMaintenanceSvc_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$PenService_36a448C:\WINDOWS\system32\svchost.exe -k PenService
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$P9RdrService_36a448C:\WINDOWS\system32\svchost.exe -k P9RdrService -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$OneSyncSvc_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$NPSMSvc_36a448C:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$MessagingService_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$DevicesFlowUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$DevicePickerUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$DeviceAssociationBrokerSvc_36a448C:\WINDOWS\system32\svchost.exe -k DevicesFlow -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$CredentialEnrollmentManagerUserSvc_36a448C:\WINDOWS\system32\CredentialEnrollmentManager.exe
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$ConsentUxUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$CloudBackupRestoreSvc_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$CDPUserSvc_36a448C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$cbdhsvc_36a448C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$CaptureService_36a448C:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$BluetoothUserService_36a448C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$BcastDVRUserService_36a448C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService
8/7/2026 8:16:31 PM4697DESKTOP-NM6VC29$AarSvc_36a448C:\WINDOWS\system32\svchost.exe -k AarSvcGroup -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$WpnUserService_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$webthreatdefusersvc_f1daaC:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$UserDataSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$UnistoreSvc_f1daaC:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$UdkUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$PrintWorkflowUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k PrintWorkflow
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$PimIndexMaintenanceSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$PenService_f1daaC:\WINDOWS\system32\svchost.exe -k PenService
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$P9RdrService_f1daaC:\WINDOWS\system32\svchost.exe -k P9RdrService -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$OneSyncSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$NPSMSvc_f1daaC:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$MessagingService_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$DevicesFlowUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$DevicePickerUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$DeviceAssociationBrokerSvc_f1daaC:\WINDOWS\system32\svchost.exe -k DevicesFlow -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$CredentialEnrollmentManagerUserSvc_f1daaC:\WINDOWS\system32\CredentialEnrollmentManager.exe
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$ConsentUxUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$CloudBackupRestoreSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$CDPUserSvc_f1daaC:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$cbdhsvc_f1daaC:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$CaptureService_f1daaC:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$BluetoothUserService_f1daaC:\WINDOWS\system32\svchost.exe -k BthAppGroup -p
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$BcastDVRUserService_f1daaC:\WINDOWS\system32\svchost.exe -k BcastDVRUserService
8/7/2026 8:14:07 PM4697DESKTOP-NM6VC29$AarSvc_f1daaC:\WINDOWS\system32\svchost.exe -k AarSvcGroup -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$WpnUserService_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$webthreatdefusersvc_147c79C:\WINDOWS\system32\svchost.exe -k LocalSystemNetworkRestricted -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$UserDataSvc_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$UnistoreSvc_147c79C:\WINDOWS\System32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$UdkUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k UdkSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$PrintWorkflowUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k PrintWorkflow
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$PimIndexMaintenanceSvc_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$PenService_147c79C:\WINDOWS\system32\svchost.exe -k PenService
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$P9RdrService_147c79C:\WINDOWS\system32\svchost.exe -k P9RdrService -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$OneSyncSvc_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$NPSMSvc_147c79C:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$MessagingService_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$DevicesFlowUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$DevicePickerUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$DeviceAssociationBrokerSvc_147c79C:\WINDOWS\system32\svchost.exe -k DevicesFlow -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$CredentialEnrollmentManagerUserSvc_147c79C:\WINDOWS\system32\CredentialEnrollmentManager.exe
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$ConsentUxUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k DevicesFlow
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$CloudBackupRestoreSvc_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$CDPUserSvc_147c79C:\WINDOWS\system32\svchost.exe -k UnistackSvcGroup
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$cbdhsvc_147c79C:\WINDOWS\system32\svchost.exe -k ClipboardSvcGroup -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$CaptureService_147c79C:\WINDOWS\system32\svchost.exe -k LocalService -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$BluetoothUserService_147c79C:\WINDOWS\system32\svchost.exe -k BthAppGroup -p
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$BcastDVRUserService_147c79C:\WINDOWS\system32\svchost.exe -k BcastDVRUserService
8/7/2026 8:06:44 PM4697DESKTOP-NM6VC29$AarSvc_147c79C:\WINDOWS\system32\svchost.exe -k AarSvcGroup -p

Report: 08-08-2026
SCC Scan Information
SCC Scan Subtotals
BenchmarkCAT I OpenCAT I TotalCAT II OpenCAT II TotalCAT III OpenCAT III TotalScore
Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual Questions004949660
Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual Questions03089955
SubTotal034957151514.67
Open CAT I Findings
Vuln IDBenchmarkRule TitleSeverityStatusCCI
NoneNoneNoneNoneNoneNone
Open CAT II Findings
Vuln IDBenchmarkRule TitleSeverityStatusCCI
V-235720Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsBypassing Microsoft Defender SmartScreen prompts for sites must be disabled.CAT IIOpenCCI-000870
V-235721Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsBypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled.CAT IIOpenCCI-000870
V-235723Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsInPrivate mode must be disabled.CAT IIOpenCCI-000166
V-235724Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsBackground processing must be disabled.CAT IIOpenCCI-000381
V-235725Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe ability of sites to show pop-ups must be disabled.CAT IIOpenCCI-000381
V-235726Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe default search provider must be set to use an encrypted connection.CAT IIOpenCCI-000381
V-235728Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsNetwork prediction must be disabled.CAT IIOpenCCI-000381
V-235729Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSearch suggestions must be disabled.CAT IIOpenCCI-000381
V-235730Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of autofill form data must be disabled.CAT IIOpenCCI-000381
V-235732Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of cookies must be disabled.CAT IIOpenCCI-000381
V-235733Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of extensions must be disabled.CAT IIOpenCCI-000381
V-235734Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of browsing history must be disabled.CAT IIOpenCCI-000381
V-235735Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of home page settings must be disabled.CAT IIOpenCCI-000381
V-235736Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of open tabs must be disabled.CAT IIOpenCCI-000381
V-235737Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of payment info must be disabled.CAT IIOpenCCI-000381
V-235738Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of saved passwords must be disabled.CAT IIOpenCCI-000381
V-235739Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of search engine settings must be disabled.CAT IIOpenCCI-000381
V-235740Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of shortcuts must be disabled.CAT IIOpenCCI-000381
V-235741Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsAutoplayAllowed must be set to disabled.CAT IIOpenCCI-000381
V-235742Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWebUSB must be disabled.CAT IIOpenCCI-000381
V-235743Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsGoogle Cast must be disabled.CAT IIOpenCCI-000381
V-235744Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWeb Bluetooth API must be disabled.CAT IIOpenCCI-000381
V-235745Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsAutofill for Credit Cards must be disabled.CAT IIOpenCCI-000381
V-235746Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsAutofill for addresses must be disabled.CAT IIOpenCCI-000381
V-235747Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsOnline revocation checks must be performed.CAT IIOpenCCI-000185
V-235748Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsPersonalization of ads, search, and news by sending browsing history to Microsoft must be disabled.CAT IIOpenCCI-000381
V-235749Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSite tracking of a user�s location must be disabled.CAT IIOpenCCI-000381
V-235750Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsBrowser history must be saved.CAT IIOpenCCI-000166
V-235754Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsExtensions installation must be blocklisted by default.CAT IIOpenCCI-000381
V-235756Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe Password Manager must be disabled.CAT IIOpenCCI-002007
V-235760Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSite isolation for every site must be enabled.CAT IIOpenCCI-000381
V-235761Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSupported authentication schemes must be configured.CAT IIOpenCCI-000382
V-235763Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsMicrosoft Defender SmartScreen must be enabled.CAT IIOpenCCI-000381
V-235764Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsMicrosoft Defender SmartScreen must be configured to block potentially unwanted apps.CAT IIOpenCCI-000381
V-235766Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsTracking of browsing activity must be disabled.CAT IIOpenCCI-000388
V-235767Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsA website's ability to query for payment methods must be disabled.CAT IIOpenCCI-000381
V-235768Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSuggestions of similar web pages in the event of a navigation error must be disabled.CAT IIOpenCCI-000381, CCI-000767
V-235769Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsUser feedback must be disabled.CAT IIOpenCCI-000381
V-235770Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe collections feature must be disabled.CAT IIOpenCCI-000381
V-235771Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe Share Experience feature must be disabled.CAT IIOpenCCI-000381
V-235772Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsGuest mode must be disabled.CAT IIOpenCCI-000381
V-235773Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsRelaunch notification must be required.CAT IIOpenCCI-000381
V-235774Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe built-in DNS client must be disabled.CAT IIOpenCCI-001941, CCI-001942
V-246736Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsUse of the QUIC protocol must be disabled.CAT IIOpenCCI-000381
V-260465Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsVisual Search must be disabled.CAT IIOpenCCI-000381
V-260466Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsCopilot must be disabled.CAT IIOpenCCI-000381
V-260467Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsSession only-based cookies must be enabled.CAT IIOpenCCI-000166
V-266981Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsFriendlyURLs must be disabled.CAT IIOpenCCI-000381
V-279940Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsAccess to Microsoft 365 Copilot writing assistance must be disabled.CAT IIOpenCCI-000381
Open CAT III Findings
Vuln IDBenchmarkRule TitleSeverityStatusCCI
V-235719Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsUser control of proxy settings must be disabled.CAT IIIOpenCCI-001414
V-235727Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsData Synchronization must be disabled.CAT IIIOpenCCI-000381
V-235731Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsImporting of browser settings must be disabled.CAT IIIOpenCCI-000381
V-235751Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsEdge development tools must be disabled.CAT IIIOpenCCI-000381
V-235752Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsDownload restrictions must be configured.CAT IIIOpenCCI-000381
V-235765Microsoft Edge STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsThe download location prompt must be configured.CAT IIIOpenCCI-000381
V-241994Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security log size must be configured for domain connections.CAT IIIOpenCCI-000140
V-241995Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log dropped packets when connected to a domain.CAT IIIOpenCCI-000172
V-241996Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log successful connections when connected to a domain.CAT IIIOpenCCI-001462
V-241999Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security log size must be configured for private network connections.CAT IIIOpenCCI-000140
V-242000Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log dropped packets when connected to a private network.CAT IIIOpenCCI-000172
V-242001Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log successful connections when connected to a private network.CAT IIIOpenCCI-001462
V-242006Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security log size must be configured for public network connections.CAT IIIOpenCCI-000140
V-242007Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log dropped packets when connected to a public network.CAT IIIOpenCCI-000172
V-242008Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must log successful connections when connected to a public network.CAT IIIOpenCCI-001462
Closed Findings
Vuln IDBenchmarkRule TitleSeverityStatusCCI
V-241989Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must be enabled when connected to a domain.CAT IINot a FindingCCI-001414
V-241990Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must be enabled when connected to a private network.CAT IINot a FindingCCI-001414
V-241991Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must be enabled when connected to a public network.CAT IINot a FindingCCI-001414
V-241992Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must block unsolicited inbound connections when connected to a domain.CAT INot a FindingCCI-000382
V-241993Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a domain.CAT IINot a FindingCCI-001094
V-241997Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must block unsolicited inbound connections when connected to a private network.CAT INot a FindingCCI-000382
V-241998Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a private network.CAT IINot a FindingCCI-001094
V-242002Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must block unsolicited inbound connections when connected to a public network.CAT INot a FindingCCI-000382
V-242003Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a public network.CAT IINot a FindingCCI-001094
V-242004Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security local firewall rules must not be merged with Group Policy settings when connected to a public network.CAT IINot a FindingCCI-001190
V-242005Microsoft Windows Defender Firewall with Advanced Security STIG SCAP Benchmark - NIWC Enhanced with Manual QuestionsWindows Defender Firewall with Advanced Security local connection rules must not be merged with Group Policy settings when connected to a public network.CAT IINot a FindingCCI-001190

Report: 08-08-2026
Evaluate-STIG Scan Information
Evaluate-STIG Scan Subtotals
BenchmarkCAT I OpenCAT I TotalCAT II OpenCAT II TotalCAT III OpenCAT III TotalScore
Google Chrome Current Windows004343220
Microsoft DotNet Framework 4.000280177.78
Microsoft Internet Explorer 1111133133230.73
Microsoft Defender Antivirus3444610027.69
Microsoft Edge004949596.9
Microsoft Office 365 ProPlus111131260010.24
Microsoft OneDrive011111008.33
Microsoft Windows 113242419811488.14
Microsoft Windows Defender Firewall with Advanced Security02046650
SubTotal833419633163536.8
Open CAT I Findings
Vuln IDSTIGRule TitleSeverityStatusCCI
V-252910Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The version of Internet Explorer running on the system must be a supported version.CAT IOpenCCI-002605
V-213426Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to block the Potentially Unwanted Application (PUA) feature.CAT IOpenCCI-001243
V-213452Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV spyware definition age must not exceed 7 days.CAT IOpenCCI-004964
V-213453Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV virus definition age must not exceed 7 days.CAT IOpenCCI-004964
V-223285Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Document metadata for rights managed Office Open XML files must be protected.CAT IOpenCCI-002476
V-253259Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 information systems must use BitLocker to encrypt all disks to protect the confidentiality and integrity of all information at rest.CAT IOpenCCI-002475
V-253260Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 systems must use a BitLocker PIN for pre-boot authentication.CAT IOpenCCI-002476
V-253418Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) service must not use Basic authentication.CAT IOpenCCI-000877
Open CAT II Findings
Vuln IDSTIGRule TitleSeverityStatusCCI
V-221558Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Firewall traversal from remote host must be disabled.CAT IIOpenCCI-001414
V-221559Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Site tracking users location must be disabled.CAT IIOpenCCI-001166
V-221561Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Sites ability to show pop-ups must be disabled.CAT IIOpenCCI-000381
V-221562Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Extensions installation must be blocklisted by default.CAT IIOpenCCI-000169
V-221564Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025The default search providers name must be set.CAT IIOpenCCI-000381
V-221565Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025The default search provider URL must be set to perform encrypted searches.CAT IIOpenCCI-000381
V-221566Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Default search provider must be enabled.CAT IIOpenCCI-000381
V-221567Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025The Password Manager must be disabled.CAT IIOpenCCI-000381
V-221570Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Background processing must be disabled.CAT IIOpenCCI-001695
V-221571Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Google Data Synchronization must be disabled.CAT IIOpenCCI-001374
V-221572Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025The URL protocol schema javascript must be disabled.CAT IIOpenCCI-000381
V-221573Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Cloud print sharing must be disabled.CAT IIOpenCCI-001374
V-221574Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Network prediction must be disabled.CAT IIOpenCCI-000366
V-221575Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Metrics reporting to Google must be disabled.CAT IIOpenCCI-000381
V-221576Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Search suggestions must be disabled.CAT IIOpenCCI-000381
V-221577Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Importing of saved passwords must be disabled.CAT IIOpenCCI-000381
V-221578Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Incognito mode must be disabled.CAT IIOpenCCI-000166
V-221579Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Online revocation checks must be performed.CAT IIOpenCCI-000185
V-221580Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Safe Browsing must be enabled.CAT IIOpenCCI-001166
V-221581Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Browser history must be saved.CAT IIOpenCCI-001199
V-221586Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Deletion of browser history must be disabled.CAT IIOpenCCI-000169
V-221587Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Prompt for download location must be enabled.CAT IIOpenCCI-000169
V-221588Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Download restrictions must be configured.CAT IIOpenCCI-000169
V-221590Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Safe Browsing Extended Reporting must be disabled.CAT IIOpenCCI-001166
V-221591Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025WebUSB must be disabled.CAT IIOpenCCI-000381
V-221594Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Google Cast must be disabled.CAT IIOpenCCI-000381
V-221595Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Autoplay must be disabled.CAT IIOpenCCI-000381
V-221596Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025URLs must be allowlisted for Autoplay use.CAT IIOpenCCI-001170
V-221597Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Anonymized data collection must be disabled.CAT IIOpenCCI-001166
V-221598Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Collection of WebRTC event logs must be disabled.CAT IIOpenCCI-001166
V-226401Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Guest Mode must be disabled.CAT IIOpenCCI-001166
V-226402Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025AutoFill for credit cards must be disabled.CAT IIOpenCCI-001166
V-226403Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025AutoFill for addresses must be disabled.CAT IIOpenCCI-001166
V-226404Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Import AutoFill form data must be disabled.CAT IIOpenCCI-001166
V-241787Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Web Bluetooth API must be disabled.CAT IIOpenCCI-000381
V-245538Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Use of the QUIC protocol must be disabled.CAT IIOpenCCI-001762
V-245539Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Session only based cookies must be enabled.CAT IIOpenCCI-000166
V-275780Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Create Themes with AI must be disabled.CAT IIOpenCCI-000169
V-275781Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025DevTools Generative AI features must be disabled.CAT IIOpenCCI-000169
V-275782Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025GenAI local foundational model must be disabled.CAT IIOpenCCI-000169
V-275783Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Help Me Write must be disabled.CAT IIOpenCCI-000169
V-275784Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025AI-powered History Search must be disabled.CAT IIOpenCCI-000169
V-275785Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Tab Compare Settings must be disabled.CAT IIOpenCCI-000169
V-225231Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026.NET must be configured to validate strong names on full-trust assemblies.CAT IIOpenCCI-000185
V-225238Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Update and configure the .NET Framework to support TLS.CAT IIOpenCCI-001762
V-223015Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Internet Explorer warning about certificate address mismatch must be enforced.CAT IIOpenCCI-000366
V-223017Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Download signed ActiveX controls property must be disallowed (Internet zone).CAT IIOpenCCI-001169
V-223018Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Download unsigned ActiveX controls property must be disallowed (Internet zone).CAT IIOpenCCI-001169
V-223019Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).CAT IIOpenCCI-001170
V-223020Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Java permissions must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223021Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Accessing data sources across domains must be disallowed (Internet zone).CAT IIOpenCCI-001414
V-223022Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223023Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Launching programs and files in IFRAME must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223024Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Navigating windows and frames across different domains must be disallowed (Internet zone).CAT IIOpenCCI-001414
V-223025Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Userdata persistence must be disallowed (Internet zone).CAT IIOpenCCI-001199
V-223026Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Clipboard operations via script must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223027Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Logon options must be configured to prompt (Internet zone).CAT IIOpenCCI-001184
V-223028Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be configured with High Safety (Intranet zone).CAT IIOpenCCI-000381
V-223029Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anti-Malware programs against ActiveX controls must be run for the Intranet zone.CAT IIOpenCCI-001662
V-223030Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be configured with High Safety (Trusted Sites zone).CAT IIOpenCCI-000381
V-223031Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anti-Malware programs against ActiveX controls must be run for the Trusted Sites zone.CAT IIOpenCCI-001662
V-223032Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Dragging of content from different domains within a window must be disallowed (Internet zone).CAT IIOpenCCI-001414
V-223033Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Dragging of content from different domains across windows must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001414
V-223034Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes Restrict ActiveX Install must be enforced (Explorer).CAT IIOpenCCI-001695
V-223035Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes Restrict ActiveX Install must be enforced (iexplore).CAT IIOpenCCI-001695
V-223036Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Dragging of content from different domains within a window must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001414
V-223037Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anti-Malware programs against ActiveX controls must be run for the Internet zone.CAT IIOpenCCI-001662
V-223038Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anti-Malware programs against ActiveX controls must be run for the Restricted Sites zone.CAT IIOpenCCI-001662
V-223039Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Prevent bypassing SmartScreen Filter warnings must be enabled.CAT IIOpenCCI-001242
V-223040Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet must be enabled.CAT IIOpenCCI-001169
V-223041Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Prevent per-user installation of ActiveX controls must be enabled.CAT IIOpenCCI-001170
V-223042Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Prevent ignoring certificate errors option must be enabled.CAT IIOpenCCI-001954
V-223043Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Turn on SmartScreen Filter scan option for the Internet Zone must be enabled.CAT IIOpenCCI-001242
V-223044Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Turn on SmartScreen Filter scan option for the Restricted Sites Zone must be enabled.CAT IIOpenCCI-001242
V-223045Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Initialize and script ActiveX controls not marked as safe must be disallowed (Intranet Zone).CAT IIOpenCCI-001170
V-223046Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Initialize and script ActiveX controls not marked as safe must be disallowed (Trusted Sites Zone).CAT IIOpenCCI-001170
V-223048Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Run once selection for running outdated ActiveX controls must be disabled.CAT IIOpenCCI-000381
V-223049Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Enabling outdated ActiveX controls for Internet Explorer must be blocked.CAT IIOpenCCI-000381
V-223050Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Internet Zone.CAT IIOpenCCI-000381
V-223051Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Download signed ActiveX controls property must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001169
V-223052Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Restricted Sites Zone.CAT IIOpenCCI-000381
V-223053Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026VBScript must not be allowed to run in Internet Explorer (Internet zone).CAT IIOpenCCI-001169
V-223054Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Download unsigned ActiveX controls property must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001169
V-223055Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026VBScript must not be allowed to run in Internet Explorer (Restricted Sites zone).CAT IIOpenCCI-001169
V-223057Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Initialize and script ActiveX controls not marked as safe property must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001170
V-223058Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026ActiveX controls and plug-ins must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000366
V-223059Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026ActiveX controls marked safe for scripting must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001170
V-223060Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026File downloads must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223061Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223062Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Accessing data sources across domains must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001414
V-223063Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Allow META REFRESH property must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000366
V-223064Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Functionality to drag and drop or copy and paste files must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223065Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Launching programs and files in IFRAME must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223066Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Navigating windows and frames across different domains must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001414
V-223067Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Userdata persistence must be disallowed (Restricted Sites zone).CAT IIOpenCCI-001199
V-223068Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Active scripting must be disallowed (Restricted Sites Zone).CAT IIOpenCCI-000381
V-223069Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Clipboard operations via script must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223070Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Logon options must be configured and enforced (Restricted Sites zone).CAT IIOpenCCI-001184
V-223071Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Configuring History setting must be set to 40 days.CAT IIOpenCCI-000169
V-223072Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer must be set to disallow users to add/delete sites.CAT IIOpenCCI-000381
V-223073Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer must be configured to disallow users to change policies.CAT IIOpenCCI-000366
V-223074Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer must be configured to use machine settings.CAT IIOpenCCI-000366
V-223075Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Security checking features must be enforced.CAT IIOpenCCI-000366
V-223076Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Software must be disallowed to run or install with invalid signatures.CAT IIOpenCCI-001170
V-223077Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on.CAT IIOpenCCI-001084
V-223079Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Checking for signatures on downloaded programs must be enforced.CAT IIOpenCCI-001749
V-223080Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026All network paths (UNCs) for Intranet sites must be disallowed.CAT IIOpenCCI-000366
V-223081Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Script-initiated windows without size or position constraints must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223082Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Script-initiated windows without size or position constraints must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223083Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Scriptlets must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223084Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Automatic prompting for file downloads must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223085Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Local Machine zone).CAT IIOpenCCI-000381
V-223086Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anti-Malware programs against ActiveX controls must be run for the Local Machine zone.CAT IIOpenCCI-001662
V-223087Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Locked Down Local Machine zone).CAT IIOpenCCI-000381
V-223088Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Locked Down Intranet zone).CAT IIOpenCCI-000381
V-223089Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Locked Down Trusted Sites zone).CAT IIOpenCCI-000381
V-223090Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Java permissions must be disallowed (Locked Down Restricted Sites zone).CAT IIOpenCCI-000381
V-223091Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026XAML files must be disallowed (Internet zone).CAT IIOpenCCI-000366
V-223092Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026XAML files must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000366
V-223093Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Protected Mode must be enforced (Internet zone).CAT IIOpenCCI-001084
V-223094Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Protected Mode must be enforced (Restricted Sites zone).CAT IIOpenCCI-001084
V-223095Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Pop-up Blocker must be enforced (Internet zone).CAT IIOpenCCI-000381
V-223096Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Pop-up Blocker must be enforced (Restricted Sites zone).CAT IIOpenCCI-000381
V-223097Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Websites in less privileged web content zones must be prevented from navigating into the Internet zone.CAT IIOpenCCI-001414
V-223098Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Websites in less privileged web content zones must be prevented from navigating into the Restricted Sites zone.CAT IIOpenCCI-001414
V-223099Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Allow binary and script behaviors must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223100Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Automatic prompting for file downloads must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223101Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME handling must be enforced. (Reserved)CAT IIOpenCCI-001166
V-223102Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME handling must be enforced (Explorer).CAT IIOpenCCI-001166
V-223103Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME handling must be enforced (iexplore).CAT IIOpenCCI-001166
V-223104Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME sniffing must be enforced (Reserved).CAT IIOpenCCI-001166
V-223105Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME sniffing must be enforced (Explorer).CAT IIOpenCCI-001166
V-223106Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MIME sniffing must be enforced (iexplore).CAT IIOpenCCI-001166
V-223107Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MK protocol must be enforced (Reserved).CAT IIOpenCCI-000381
V-223108Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MK protocol must be enforced (Explorer).CAT IIOpenCCI-000381
V-223109Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for MK protocol must be enforced (iexplore).CAT IIOpenCCI-000381
V-223110Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Zone Elevation must be enforced (Reserved).CAT IIOpenCCI-001084
V-223111Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Zone Elevation must be enforced (Explorer).CAT IIOpenCCI-001084
V-223112Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Zone Elevation must be enforced (iexplore).CAT IIOpenCCI-001084
V-223113Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Restrict File Download must be enforced (Reserved).CAT IIOpenCCI-000381
V-223114Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Restrict File Download must be enforced (Explorer).CAT IIOpenCCI-000381
V-223115Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Restrict File Download must be enforced (iexplore).CAT IIOpenCCI-000381
V-223116Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for restricting pop-up windows must be enforced (Reserved).CAT IIOpenCCI-000381
V-223117Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for restricting pop-up windows must be enforced (Explorer).CAT IIOpenCCI-000381
V-223118Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for restricting pop-up windows must be enforced (iexplore).CAT IIOpenCCI-000381
V-223119Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026.NET Framework-reliant components not signed with Authenticode must be disallowed to run (Restricted Sites Zone).CAT IIOpenCCI-000366
V-223120Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026.NET Framework-reliant components signed with Authenticode must be disallowed to run (Restricted Sites Zone).CAT IIOpenCCI-000366
V-223121Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Scripting of Java applets must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223122Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026AutoComplete feature for forms must be disallowed.CAT IIOpenCCI-000381
V-223123Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Crash Detection management must be enforced.CAT IIOpenCCI-000381
V-223124Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Turn on the auto-complete feature for user names and passwords on forms must be disabled.CAT IIOpenCCI-000381
V-223125Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Managing SmartScreen Filter use must be enforced.CAT IIOpenCCI-001166
V-223126Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Browser must retain history on exit.CAT IIOpenCCI-000169
V-223127Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Deleting websites that the user has visited must be disallowed.CAT IIOpenCCI-000169
V-223128Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026InPrivate Browsing must be disallowed.CAT IIOpenCCI-000166
V-223129Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Scripting of Internet Explorer WebBrowser control property must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223130Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026When uploading files to a server, the local directory path must be excluded (Internet zone).CAT IIOpenCCI-000381
V-223131Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Notification Bars must be enforced (Reserved).CAT IIOpenCCI-000381
V-223132Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Security Warning for unsafe files must be set to prompt (Internet zone).CAT IIOpenCCI-000366
V-223133Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Notification Bars must be enforced (Explorer).CAT IIOpenCCI-000381
V-223134Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026ActiveX controls without prompt property must be used in approved domains only (Internet zone).CAT IIOpenCCI-001170
V-223135Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes for Notification Bars must be enforced (iexplore).CAT IIOpenCCI-000381
V-223136Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Cross-Site Scripting Filter must be enforced (Internet zone).CAT IIOpenCCI-000381
V-223137Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Scripting of Internet Explorer WebBrowser Control must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223138Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026When uploading files to a server, the local directory path must be excluded (Restricted Sites zone).CAT IIOpenCCI-000381
V-223139Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Security Warning for unsafe files must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000366
V-223140Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026ActiveX controls without prompt property must be used in approved domains only (Restricted Sites zone).CAT IIOpenCCI-001170
V-223141Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Cross-Site Scripting Filter property must be enforced (Restricted Sites zone).CAT IIOpenCCI-000381
V-223142Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Processes Restrict ActiveX Install must be enforced (Reserved).CAT IIOpenCCI-001695
V-223143Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Status bar updates via script must be disallowed (Internet zone).CAT IIOpenCCI-000381
V-223144Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026.NET Framework-reliant components not signed with Authenticode must be disallowed to run (Internet zone).CAT IIOpenCCI-000366
V-223145Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026.NET Framework-reliant components signed with Authenticode must be disallowed to run (Internet zone).CAT IIOpenCCI-000366
V-223146Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Scriptlets must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223147Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Status bar updates via script must be disallowed (Restricted Sites zone).CAT IIOpenCCI-000381
V-223148Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026When Enhanced Protected Mode is enabled, ActiveX controls must be disallowed to run in Protected Mode.CAT IIOpenCCI-000366
V-223149Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Dragging of content from different domains across windows must be disallowed (Internet zone).CAT IIOpenCCI-001414
V-250540Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Turn off Encryption Support must be enabled.CAT IIOpenCCI-002450
V-250541Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Allow Fallback to SSL 3.0 (Internet Explorer) must be disabled.CAT IIOpenCCI-002450
V-213433Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to check in real time with MAPS before content is run or accessed.CAT IIOpenCCI-002624
V-213434Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must join Microsoft MAPS.CAT IIOpenCCI-001170
V-213435Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to only send safe samples for MAPS telemetry.CAT IIOpenCCI-001170
V-213449Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to scan removable drives.CAT IIOpenCCI-000870
V-213450Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to perform a weekly scheduled scan.CAT IIOpenCCI-001241
V-213451Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to turn on e-mail scanning.CAT IIOpenCCI-001170
V-213454Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to check for definition updates daily.CAT IIOpenCCI-001308
V-213455Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Severe.CAT IIOpenCCI-001662
V-213456Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to block executable content from email client and webmail.CAT IIOpenCCI-001170
V-213457Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured block Office applications from creating child processes.CAT IIOpenCCI-001170
V-213458Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured block Office applications from creating executable content.CAT IIOpenCCI-001170
V-213459Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to block Office applications from injecting into other processes.CAT IIOpenCCI-001170
V-213460Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to impede JavaScript and VBScript to launch executables.CAT IIOpenCCI-001170
V-213461Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to block execution of potentially obfuscated scripts.CAT IIOpenCCI-001170
V-213462Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to block Win32 imports from macro code in Office.CAT IIOpenCCI-001170
V-213463Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to prevent user and apps from accessing dangerous websites.CAT IIOpenCCI-001170
V-213464Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level High.CAT IIOpenCCI-001662
V-213465Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Medium.CAT IIOpenCCI-001662
V-213466Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured for automatic remediation action to be taken for threat alert level Low.CAT IIOpenCCI-001662
V-278647Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must block Adobe Reader from creating child processes.CAT IIOpenCCI-001170
V-278648Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must block credential stealing from the Windows local security authority subsystem.CAT IIOpenCCI-001170
V-278649Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must block untrusted and unsigned processes that run from USB.CAT IIOpenCCI-001170
V-278650Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must use advanced protection against ransomware.CAT IIOpenCCI-001170
V-278651Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must audit process creations originating from PSExec and WMI commands.CAT IIOpenCCI-001170
V-278652Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must audit persistence through WMI event subscription.CAT IIOpenCCI-001170
V-278653Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must audit executable files from running unless they meet a prevalence, age, or trusted list criterion.CAT IIOpenCCI-001170
V-278654Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must block Office communication application from creating child processes.CAT IIOpenCCI-001170
V-278655Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must block abuse of exploited vulnerable signed drivers.CAT IIOpenCCI-001170
V-278656Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must configure local administrator merge behavior for lists.CAT IIOpenCCI-001170
V-278658Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must control whether exclusions are visible to Local Admins.CAT IIOpenCCI-001170
V-278659Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must randomize scheduled task times.CAT IIOpenCCI-002624
V-278660Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must hide the Family options area.CAT IIOpenCCI-001170
V-278661Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable the file hash computation feature.CAT IIOpenCCI-001170
V-278662Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable extended cloud check.CAT IIOpenCCI-001170
V-278668Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable script scanning.CAT IIOpenCCI-002624
V-278669Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable real-time protection and Security Intelligence Updates during OOBE.CAT IIOpenCCI-002624
V-278674Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable EDR in block mode.CAT IIOpenCCI-001170
V-278675Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must report Dynamic Signature dropped events.CAT IIOpenCCI-001170
V-278676Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must scan excluded files and directories during quick scans.CAT IIOpenCCI-002624
V-278677Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must convert warn verdict to block.CAT IIOpenCCI-001170
V-278678Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable asynchronous inspection.CAT IIOpenCCI-001170
V-278679Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must scan packed executables.CAT IIOpenCCI-002624
V-278680Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must enable heuristics.CAT IIOpenCCI-002624
V-278863Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must set cloud protection level to High.CAT IIOpenCCI-001170
V-235720Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Bypassing Microsoft Defender SmartScreen prompts for sites must be disabled.CAT IIOpenCCI-000870
V-235721Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Bypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled.CAT IIOpenCCI-000870
V-235723Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026InPrivate mode must be disabled.CAT IIOpenCCI-000166
V-235724Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Background processing must be disabled.CAT IIOpenCCI-000381
V-235725Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The ability of sites to show pop-ups must be disabled.CAT IIOpenCCI-000381
V-235728Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Network prediction must be disabled.CAT IIOpenCCI-000381
V-235729Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Search suggestions must be disabled.CAT IIOpenCCI-000381
V-235730Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of autofill form data must be disabled.CAT IIOpenCCI-000381
V-235732Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of cookies must be disabled.CAT IIOpenCCI-000381
V-235733Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of extensions must be disabled.CAT IIOpenCCI-000381
V-235734Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of browsing history must be disabled.CAT IIOpenCCI-000381
V-235735Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of home page settings must be disabled.CAT IIOpenCCI-000381
V-235736Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of open tabs must be disabled.CAT IIOpenCCI-000381
V-235737Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of payment info must be disabled.CAT IIOpenCCI-000381
V-235738Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of saved passwords must be disabled.CAT IIOpenCCI-000381
V-235739Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of search engine settings must be disabled.CAT IIOpenCCI-000381
V-235740Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of shortcuts must be disabled.CAT IIOpenCCI-000381
V-235741Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026AutoplayAllowed must be set to disabled.CAT IIOpenCCI-000381
V-235742Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026WebUSB must be disabled.CAT IIOpenCCI-000381
V-235743Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Google Cast must be disabled.CAT IIOpenCCI-000381
V-235744Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Web Bluetooth API must be disabled.CAT IIOpenCCI-000381
V-235745Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Autofill for Credit Cards must be disabled.CAT IIOpenCCI-000381
V-235746Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Autofill for addresses must be disabled.CAT IIOpenCCI-000381
V-235747Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Online revocation checks must be performed.CAT IIOpenCCI-000185
V-235748Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Personalization of ads, search, and news by sending browsing history to Microsoft must be disabled.CAT IIOpenCCI-000381
V-235749Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Site tracking of a user�s location must be disabled.CAT IIOpenCCI-000381
V-235750Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Browser history must be saved.CAT IIOpenCCI-000166
V-235754Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Extensions installation must be blocklisted by default.CAT IIOpenCCI-000381
V-235756Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The Password Manager must be disabled.CAT IIOpenCCI-002007
V-235760Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Site isolation for every site must be enabled.CAT IIOpenCCI-000381
V-235761Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Supported authentication schemes must be configured.CAT IIOpenCCI-000382
V-235763Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Microsoft Defender SmartScreen must be enabled.CAT IIOpenCCI-000381
V-235764Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Microsoft Defender SmartScreen must be configured to block potentially unwanted apps.CAT IIOpenCCI-000381
V-235766Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Tracking of browsing activity must be disabled.CAT IIOpenCCI-000388
V-235767Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026A website's ability to query for payment methods must be disabled.CAT IIOpenCCI-000381
V-235768Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Suggestions of similar web pages in the event of a navigation error must be disabled.CAT IIOpenCCI-000381, CCI-000767
V-235769Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026User feedback must be disabled.CAT IIOpenCCI-000381
V-235770Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The collections feature must be disabled.CAT IIOpenCCI-000381
V-235771Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The Share Experience feature must be disabled.CAT IIOpenCCI-000381
V-235772Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Guest mode must be disabled.CAT IIOpenCCI-000381
V-235773Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Relaunch notification must be required.CAT IIOpenCCI-000381
V-235774Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The built-in DNS client must be disabled.CAT IIOpenCCI-001941, CCI-001942
V-246736Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Use of the QUIC protocol must be disabled.CAT IIOpenCCI-000381
V-260465Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Visual Search must be disabled.CAT IIOpenCCI-000381
V-260466Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Copilot must be disabled.CAT IIOpenCCI-000381
V-260467Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Session only-based cookies must be enabled.CAT IIOpenCCI-000166
V-266981Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026FriendlyURLs must be disabled.CAT IIOpenCCI-000381
V-279940Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Access to Microsoft 365 Copilot writing assistance must be disabled.CAT IIOpenCCI-000381
V-283439Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Spell checking provided by Microsoft Editor must be disabled.CAT IIOpenCCI-000381
V-223280Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Macros must be blocked from running in Access files from the Internet.CAT IIOpenCCI-001170
V-223281Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Trust Bar Notifications for unsigned application add-ins in Access must be disabled and blocked.CAT IIOpenCCI-001749, CCI-003992
V-223282Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026VBA macros not digitally signed must be blocked in Access.CAT IIOpenCCI-000381
V-223284Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Macro Runtime Scan Scope must be enabled for all documents.CAT IIOpenCCI-001170
V-223286Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Office client must be prevented from polling the SharePoint Server for published links.CAT IIOpenCCI-000381, CCI-001662
V-223287Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Custom user interface (UI) code must be blocked from loading in all Office applications.CAT IIOpenCCI-000366
V-223289Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Macros in all Office applications that are opened programmatically by another application must be opened based upon macro security level.CAT IIOpenCCI-001170
V-223290Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Trust Bar notifications must be configured to display information in the Message Bar about the content that has been automatically blocked.CAT IIOpenCCI-001749, CCI-003992
V-223291Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Office applications must be configured to specify encryption type in password-protected Office 97-2003 files.CAT IIOpenCCI-001199
V-223292Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Office applications must be configured to specify encryption type in password-protected Office Open XML files.CAT IIOpenCCI-001199
V-223293Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Users must be prevented from creating new trusted locations in the Trust Center.CAT IIOpenCCI-002235
V-223294Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Office applications must not load XML expansion packs with Smart Documents.CAT IIOpenCCI-000366
V-223296Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Add-on Management must be enabled for all Office 365 ProPlus programs.CAT IIOpenCCI-001662
V-223297Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Consistent MIME handling must be enabled for all Office 365 ProPlus programs.CAT IIOpenCCI-000803
V-223298Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026User name and password must be disabled in all Office programs.CAT IIOpenCCI-001170
V-223299Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Information Bar must be enabled in all Office programs.CAT IIOpenCCI-001662
V-223300Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Local Machine Zone Lockdown Security must be enabled in all Office programs.CAT IIOpenCCI-000366
V-223301Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The MIME Sniffing safety feature must be enabled in all Office programs.CAT IIOpenCCI-000803
V-223302Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Navigate URL must be enabled in all Office programs.CAT IIOpenCCI-001170
V-223303Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Object Caching Protection must be enabled in all Office programs.CAT IIOpenCCI-000803
V-223304Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Protection from zone elevation must be enabled in all Office programs.CAT IIOpenCCI-001695
V-223305Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026ActiveX installation restriction must be enabled in all Office programs.CAT IIOpenCCI-002460
V-223306Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File Download Restriction must be enabled in all Office programs.CAT IIOpenCCI-001695
V-223307Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Save from URL feature must be enabled in all Office programs.CAT IIOpenCCI-001170
V-223308Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Scripted Windows Security restrictions must be enabled in all Office programs.CAT IIOpenCCI-001695
V-223309Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Flash player activation must be disabled in all Office programs.CAT IIOpenCCI-002460
V-223310Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Trusted Locations on the network must be disabled in Excel.CAT IIOpenCCI-001170
V-223311Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026VBA Macros not digitally signed must be blocked in Excel.CAT IIOpenCCI-000381
V-223312Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Dynamic Data Exchange (DDE) server launch in Excel must be blocked.CAT IIOpenCCI-001662
V-223313Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Dynamic Data Exchange (DDE) server lookup in Excel must be blocked.CAT IIOpenCCI-001662
V-223314Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of dBase III / IV format files must be blocked.CAT IIOpenCCI-001662
V-223315Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Dif and Sylk format files must be blocked.CAT IIOpenCCI-001662
V-223316Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 2 macrosheets and add-in files must be blocked.CAT IIOpenCCI-001662
V-223317Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 2 worksheets must be blocked.CAT IIOpenCCI-001662
V-223318Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 3 macrosheets and add-in files must be blocked.CAT IIOpenCCI-001662
V-223319Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 3 worksheets must be blocked.CAT IIOpenCCI-001662
V-223320Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 4 macrosheets and add-in files must be blocked.CAT IIOpenCCI-001662
V-223321Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 4 workbooks must be blocked.CAT IIOpenCCI-001662
V-223322Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 4 worksheets must be blocked.CAT IIOpenCCI-001662
V-223323Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 95 workbooks must be blocked.CAT IIOpenCCI-001662
V-223324Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Excel 95-97 workbooks and templates must be blocked.CAT IIOpenCCI-001662
V-223325Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The default file block behavior must be set to not open blocked files in Excel.CAT IIOpenCCI-001662
V-223326Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/save of Web pages and Excel 2003 XML spreadsheets must be blocked.CAT IIOpenCCI-001662
V-223327Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Extraction options must be blocked when opening corrupt Excel workbooks.CAT IIOpenCCI-001662
V-223328Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Updating of links in Excel must be prompted and not automatic.CAT IIOpenCCI-001170
V-223329Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Loading of pictures from Web pages not created in Excel must be disabled.CAT IIOpenCCI-002460
V-223330Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026AutoRepublish in Excel must be disabled.CAT IIOpenCCI-000366
V-223331Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026AutoRepublish warning alert in Excel must be enabled.CAT IIOpenCCI-000366
V-223332Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File extensions must be enabled to match file types in Excel.CAT IIOpenCCI-000366
V-223334Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File validation in Excel must be enabled.CAT IIOpenCCI-001695
V-223336Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Macros must be blocked from running in Excel files from the Internet.CAT IIOpenCCI-001170
V-223337Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Trust Bar notification must be enabled for unsigned application add-ins in Excel and blocked.CAT IIOpenCCI-001749, CCI-003992
V-223338Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Untrusted Microsoft Query files must be blocked from opening in Excel.CAT IIOpenCCI-001662
V-223339Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Untrusted database files must be opened in Excel in Protected View mode.CAT IIOpenCCI-001662
V-223342Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files failing file validation must be opened in Excel in Protected view mode and disallow edits.CAT IIOpenCCI-001170
V-223343Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File attachments from Outlook must be opened in Excel in Protected mode.CAT IIOpenCCI-001170
V-223346Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Exchange client authentication with Exchange servers must be enabled to use Kerberos Password Authentication.CAT IIOpenCCI-001967
V-223347Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Outlook must use remote procedure call (RPC) encryption to communicate with Microsoft Exchange servers.CAT IIOpenCCI-001967
V-223348Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Scripts associated with public folders must be prevented from execution in Outlook.CAT IIOpenCCI-001170
V-223349Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Scripts associated with shared folders must be prevented from execution in Outlook.CAT IIOpenCCI-001170
V-223350Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files dragged from an Outlook e-mail to the file system must be created in ANSI format.CAT IIOpenCCI-000366
V-223351Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The junk email protection level must be set to No Automatic Filtering.CAT IIOpenCCI-000366
V-223352Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Active X One-Off forms must only be enabled to load with Outlook Controls.CAT IIOpenCCI-001170
V-223353Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Outlook must be configured to prevent users overriding attachment security settings.CAT IIOpenCCI-002235
V-223354Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Internet must not be included in Safe Zone for picture download in Outlook.CAT IIOpenCCI-000366
V-223355Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Publish to Global Address List (GAL) button must be disabled in Outlook.CAT IIOpenCCI-000366
V-223356Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The minimum encryption key length in Outlook must be at least 168.CAT IIOpenCCI-002450
V-223357Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The warning about invalid digital signatures must be enabled to warn Outlook users.CAT IIOpenCCI-001662
V-223358Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Outlook must be configured to allow retrieving of Certificate Revocation Lists (CRLs) always when online.CAT IIOpenCCI-000185
V-223359Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Outlook Security Mode must be enabled to always use the Outlook Security Group Policy.CAT IIOpenCCI-000366
V-223360Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The ability to demote attachments from Level 2 to Level 1 must be disabled.CAT IIOpenCCI-001662
V-223361Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The display of Level 1 attachments must be disabled in Outlook.CAT IIOpenCCI-001662
V-223364Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Outlook must be configured to not run scripts in forms in which the script and the layout are contained within the message.CAT IIOpenCCI-001170
V-223365Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When a custom action is executed that uses the Outlook object model, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223366Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When an untrusted program attempts to programmatically access an Address Book using the Outlook object model, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223367Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When a user designs a custom form in Outlook and attempts to bind an Address Information field to a combination or formula custom field, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223368Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When an untrusted program attempts to use the Save As command to programmatically save an item, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223369Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When an untrusted program attempts to gain access to a recipient field, such as the, To: field, using the Outlook object model, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223370Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When an untrusted program attempts to programmatically send e-mail in Outlook using the Response method of a task or meeting request, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223371Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026When an untrusted program attempts to send e-mail programmatically using the Outlook object model, Outlook must automatically deny it.CAT IIOpenCCI-002460
V-223372Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Outlook must be configured to not allow hyperlinks in suspected phishing messages.CAT IIOpenCCI-000366
V-223373Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The Security Level for macros in Outlook must be configured to Warn for signed and disable unsigned.CAT IIOpenCCI-001662
V-223377Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026VBA Macros not digitally signed must be blocked in PowerPoint.CAT IIOpenCCI-000381
V-223379Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of PowerPoint 97-2003 presentations, shows, templates, and add-in files must be blocked.CAT IIOpenCCI-001662
V-223380Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The default file block behavior must be set to not open blocked files in PowerPoint.CAT IIOpenCCI-001662
V-223382Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File validation in PowerPoint must be enabled.CAT IIOpenCCI-001170
V-223383Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Macros from the Internet must be blocked from running in PowerPoint.CAT IIOpenCCI-001170
V-223384Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Unsigned add-ins in PowerPoint must be blocked with no Trust Bar Notification to the user.CAT IIOpenCCI-001749, CCI-003992
V-223385Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files downloaded from the Internet must be opened in Protected view in PowerPoint.CAT IIOpenCCI-001662
V-223386Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026PowerPoint attachments opened from Outlook must be in Protected View.CAT IIOpenCCI-001662
V-223387Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files in unsafe locations must be opened in Protected view in PowerPoint.CAT IIOpenCCI-001662
V-223388Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026If file validation fails, files must be opened in Protected view in PowerPoint with ability to edit disabled.CAT IIOpenCCI-001170
V-223389Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The use of network locations must be ignored in PowerPoint.CAT IIOpenCCI-001170
V-223390Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Publisher must be configured to prompt the user when another application programmatically opens a macro.CAT IIOpenCCI-001662
V-223391Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Publisher must automatically disable unsigned add-ins without informing users.CAT IIOpenCCI-001749, CCI-003992
V-223392Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Publisher must disable all unsigned VBA macros.CAT IIOpenCCI-001749, CCI-003992
V-223400Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Word must automatically disable unsigned add-ins without informing users.CAT IIOpenCCI-001749, CCI-003992
V-223404Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026If file validation fails, files must be opened in Protected view in Word with ability to edit disabled.CAT IIOpenCCI-001662
V-223405Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Word attachments opened from Outlook must be in Protected View.CAT IIOpenCCI-001662
V-223406Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The default file block behavior must be set to not open blocked files in Word.CAT IIOpenCCI-001662
V-223407Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 2 and earlier binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223408Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 2000 binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223409Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 2003 binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223410Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 2007 and later binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223411Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 6.0 binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223412Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 95 binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223413Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word 97 binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223414Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Open/Save of Word XP binary documents and templates must be blocked.CAT IIOpenCCI-001662
V-223415Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026In Word, macros must be blocked from running, even if Enable all macros is selected in the Macro Settings section of the Trust Center.CAT IIOpenCCI-001170
V-223416Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Trusted Locations on the network must be disabled in Word.CAT IIOpenCCI-001170
V-223417Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026VBA Macros not digitally signed must be blocked in Word.CAT IIOpenCCI-000381
V-223418Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026File validation in Word must be enabled.CAT IIOpenCCI-001695
V-278355Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Sending of diagnostic data to Microsoft must be disabled.CAT IIOpenCCI-000381
V-215529Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Disabling of user name and password syntax from being used in URLs must be enforced. CAT IIOpenCCI-001170
V-215531Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Saved from URL mark to assure Internet zone processing must be enforced. CAT IIOpenCCI-001170
V-215532Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Navigation to URLs embedded in Office products must be blocked. CAT IIOpenCCI-001170
V-215533Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Scripted Window Security must be enforced. CAT IIOpenCCI-001695
V-215534Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Add-on Management functionality must be allowed. CAT IIOpenCCI-001662
V-215535Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Links that invoke instances of Internet Explorer from within an Office product must be blocked. CAT IIOpenCCI-001662
V-215536Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025File Downloads must be configured for proper restrictions. CAT IIOpenCCI-001169
V-215537Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025Protection from zone elevation must be enforced. CAT IIOpenCCI-001695
V-215538Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025ActiveX Installs must be configured for proper restriction. CAT IIOpenCCI-002460
V-230562Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025OneDrive must only allow synchronizing of accounts for DoD organization instances.CAT IIOpenCCI-000366
V-230564Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025The use of personal accounts for OneDrive synchronization must be disabled.CAT IIOpenCCI-000381
V-253261Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 systems must use a BitLocker PIN with a minimum length of six digits for pre-boot authentication.CAT IIOpenCCI-000804
V-253273Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Accounts must be configured to require password expiration.CAT IIOpenCCI-000199, CCI-004066
V-253289Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Secondary Logon service must be disabled on Windows 11.CAT IIOpenCCI-000381
V-253338Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The security event log size must be configured to a value that holds at least one week's worth of audit records.CAT IIOpenCCI-001849
V-253341Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 permissions for the Security event log must prevent access by non-privileged accounts.CAT IIOpenCCI-000162
V-253417Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) client must not allow unencrypted traffic.CAT IIOpenCCI-002890
V-253419Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) service must not allow unencrypted traffic.CAT IIOpenCCI-003123
V-253420Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) service must not store RunAs credentials.CAT IIOpenCCI-002038
V-253421Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) client must not use Digest authentication.CAT IIOpenCCI-000877
V-253427Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The DoD Root CA certificates must be installed in the Trusted Root Store.CAT IIOpenCCI-000185
V-253429Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The DoD Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store on unclassified systems.CAT IIOpenCCI-002470
V-253445Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The required legal notice must be configured to display before console logon.CAT IIOpenCCI-000044, CCI-000048, CCI-000050
V-253466Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to use FIPS-compliant algorithms for encryption, hashing, and signing.CAT IIOpenCCI-002450
V-253476Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Passwords for enabled local Administrator accounts must be changed at least every 60 days.CAT IIOpenCCI-000199, CCI-004066
V-253482Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Allow log on locally" user right must only be assigned to the Administrators and Users groups.CAT IIOpenCCI-000213
V-253489Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Create symbolic links" user right must only be assigned to the Administrators group.CAT IIOpenCCI-002235
V-268317Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Copilot must be disabled for Windows 11.CAT IIOpenCCI-000382
V-278926Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit file system failures.CAT IIOpenCCI-000172
V-278927Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit file system successes.CAT IIOpenCCI-000172
V-278928Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit handle manipulation failures.CAT IIOpenCCI-000172
V-278929Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit handle manipulation successes.CAT IIOpenCCI-000172
V-278930Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit registry failures.CAT IIOpenCCI-000172
V-278931Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit registry successes.CAT IIOpenCCI-000172
V-279688Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 systems must block consumer account user authentication.CAT IIOpenCCI-000381
Open CAT III Findings
Vuln IDSTIGRule TitleSeverityStatusCCI
V-221563Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Extensions that are approved for use must be allowlisted.CAT IIIOpenCCI-001170
V-221599Google Chrome Current Windows Security Technical Implementation Guide::Version 2, Release: 11 Benchmark Date: 02 Jul 2025Chrome development tools must be disabled.CAT IIIOpenCCI-001312
V-223056Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer Development Tools Must Be Disabled.CAT IIIOpenCCI-001312
V-223078Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Checking for server certificate revocation must be enforced.CAT IIIOpenCCI-000185
V-235727Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Data Synchronization must be disabled.CAT IIIOpenCCI-000381
V-235731Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Importing of browser settings must be disabled.CAT IIIOpenCCI-000381
V-235751Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Edge development tools must be disabled.CAT IIIOpenCCI-000381
V-235752Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Download restrictions must be configured.CAT IIIOpenCCI-000381
V-235765Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The download location prompt must be configured.CAT IIIOpenCCI-000381
V-253446Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows message title for the legal notice must be configured.CAT IIIOpenCCI-000048, CCI-001384, CCI-001385, CCI-001386, CCI-001387, CCI-001388
V-241999Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security log size must be configured for private network connections.CAT IIIOpenCCI-000140
V-242000Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must log dropped packets when connected to a private network.CAT IIIOpenCCI-000172
V-242001Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must log successful connections when connected to a private network.CAT IIIOpenCCI-001462
V-242006Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security log size must be configured for public network connections.CAT IIIOpenCCI-000140
V-242007Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must log dropped packets when connected to a public network.CAT IIIOpenCCI-000172
V-242008Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must log successful connections when connected to a public network.CAT IIIOpenCCI-001462
Closed Findings
Vuln IDSTIGRule TitleSeverityStatusCCI
V-225223Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Digital signatures assigned to strongly named assemblies must be verified.CAT IINot a FindingCCI-000185
V-225224Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026The Trust Providers Software Publishing State must be set to 0x23C00.CAT IINot a FindingCCI-000185
V-225229Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026.Net Framework versions installed on the system must be supported.CAT IINot a FindingCCI-000366
V-225230Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026The .NET CLR must be configured to use FIPS approved encryption modules.CAT IINot a FindingCCI-002450
V-225233Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Trust must be established prior to enabling the loading of remote code in .Net 4.CAT IINot a FindingCCI-002530
V-225234Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026.NET default proxy settings must be reviewed and approved.CAT IIINot a FindingCCI-000366
V-225235Microsoft DotNet Framework 4.0 Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Event tracing for Windows (ETW) for Common Language Runtime events must be enabled.CAT IINot a FindingCCI-000130
V-223016Microsoft Internet Explorer 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Check for publishers certificate revocation must be enforced.CAT IIINot a FindingCCI-000185
V-213427Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to automatically take action on all detected tasks.CAT IINot a FindingCCI-001243
V-213428Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to run and scan for malware and other potentially unwanted software.CAT INot a FindingCCI-002624
V-213429Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not exclude files for scanning.CAT IINot a FindingCCI-002624
V-213430Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not exclude files opened by specified processes.CAT IINot a FindingCCI-002624
V-213432Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to disable local setting override for reporting to Microsoft MAPS.CAT IINot a FindingCCI-001170
V-213436Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured for protocol recognition for network protection.CAT IINot a FindingCCI-002624
V-213437Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not allow local override of monitoring for file and program activity.CAT IINot a FindingCCI-001695
V-213438Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not allow override of monitoring for incoming and outgoing file activity.CAT IINot a FindingCCI-001695
V-213439Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not allow override of scanning for downloaded files and attachments.CAT IINot a FindingCCI-001169
V-213440Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to not allow override of behavior monitoring.CAT IINot a FindingCCI-001170
V-213441Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV Group Policy settings must take priority over the local preference settings.CAT IINot a FindingCCI-002624
V-213442Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must monitor for incoming and outgoing files.CAT IINot a FindingCCI-002624
V-213443Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to monitor for file and program activity.CAT IINot a FindingCCI-002624
V-213444Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to scan all downloaded files and attachments.CAT IINot a FindingCCI-001169
V-213445Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to always enable real-time protection.CAT IINot a FindingCCI-002624
V-213446Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to enable behavior monitoring.CAT IINot a FindingCCI-001170
V-213447Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to process scanning when real-time protection is enabled.CAT IINot a FindingCCI-002624
V-213448Microsoft Defender Antivirus Security Technical Implementation Guide::Version 2, Release: 8 Benchmark Date: 01 Apr 2026Microsoft Defender AV must be configured to scan archive files.CAT IINot a FindingCCI-002624
V-235722Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used.CAT IIINot a FindingCCI-000870
V-235753Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026URLs must be allowlisted for plugin use if used.CAT IIINot a FindingCCI-001812, CCI-003980
V-235755Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026Extensions that are approved for use must be allowlisted if used.CAT IIINot a FindingCCI-001774
V-251694Microsoft Edge Security Technical Implementation Guide::Version 2, Release: 5 Benchmark Date: 01 Apr 2026The list of domains media autoplay allows must be allowlisted if used.CAT IIINot a FindingCCI-000381
V-223288Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026ActiveX Controls must be initialized in Safe Mode.CAT IINot a FindingCCI-002460
V-223295Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The load of controls in Forms3 must be blocked.CAT IINot a FindingCCI-001662
V-223333Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Scan of encrypted macros in Excel Open XML workbooks must be enabled.CAT IINot a FindingCCI-001170
V-223335Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026WEBSERVICE Function Notification in Excel must be configured to disable all, with notifications.CAT IINot a FindingCCI-001662
V-223340Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files from Internet zone must be opened in Excel in Protected View mode.CAT IINot a FindingCCI-001662
V-223341Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files from unsafe locations must be opened in Excel in Protected View mode.CAT IINot a FindingCCI-001170
V-223362Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Level 1 file attachments must be blocked from being delivered.CAT IINot a FindingCCI-001662
V-223363Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Level 2 file attachments must be blocked from being delivered.CAT IINot a FindingCCI-001662
V-223378Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026The ability to run programs from PowerPoint must be disabled.CAT IINot a FindingCCI-001170
V-223381Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Encrypted macros in PowerPoint Open XML presentations must be scanned.CAT IINot a FindingCCI-001170
V-223401Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026In Word, encrypted macros must be scanned.CAT IINot a FindingCCI-001170
V-223402Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files downloaded from the Internet must be opened in Protected view in Word.CAT IINot a FindingCCI-001662
V-223403Microsoft Office 365 ProPlus Security Technical Implementation Guide::Version 3, Release: 5 Benchmark Date: 01 Apr 2026Files located in unsafe locations must be opened in Protected view in Word.CAT IINot a FindingCCI-001662
V-275978Microsoft OneDrive Security Technical Implementation Guide::Version 2, Release: 4 Benchmark Date: 02 Jul 2025The version of OneDrive running on the system must be a supported version.CAT INot a FindingCCI-002605
V-253256Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 systems must have Unified Extensible Firmware Interface (UEFI) firmware and be configured to run in UEFI mode, not Legacy BIOS.CAT IINot a FindingCCI-002421
V-253257Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Secure Boot must be enabled on Windows 11 systems.CAT IINot a FindingCCI-002421
V-253262Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.CAT IINot a FindingCCI-001774
V-253263Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 systems must be maintained at a supported servicing level.CAT INot a FindingCCI-000366
V-253264Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows 11 system must use an antivirus program.CAT INot a FindingCCI-000366
V-253265Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Local volumes must be formatted using NTFS.CAT INot a FindingCCI-000213
V-253266Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Alternate operating systems must not be permitted on the same system.CAT IINot a FindingCCI-000366
V-253270Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Only accounts responsible for the backup operations must be members of the Backup Operators group.CAT IINot a FindingCCI-000366
V-253274Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Permissions for system files and directories must conform to minimum requirements.CAT IINot a FindingCCI-002165
V-253275Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Information System (IIS) or its subcomponents must not be installed on a workstation.CAT INot a FindingCCI-000381
V-253276Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Simple Network Management Protocol (SNMP) must not be installed on the system.CAT IINot a FindingCCI-000382
V-253277Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Simple TCP/IP Services must not be installed on the system.CAT IINot a FindingCCI-000381
V-253278Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Telnet Client must not be installed on the system.CAT IINot a FindingCCI-000382
V-253279Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The TFTP Client must not be installed on the system.CAT IINot a FindingCCI-000382
V-253280Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Software certificate installation files must be removed from Windows 11.CAT IINot a FindingCCI-000366
V-253281Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026A host-based firewall must be installed and enabled on the system.CAT IINot a FindingCCI-000366
V-253284Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Structured Exception Handling Overwrite Protection (SEHOP) must be enabled.CAT INot a FindingCCI-002824
V-253286Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Server Message Block (SMB) v1 protocol must be disabled on the system.CAT IINot a FindingCCI-000381
V-253290Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Orphaned security identifiers (SIDs) must be removed from user rights on Windows 11.CAT IINot a FindingCCI-000366
V-253293Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must notify the user when a Bluetooth device attempts to connect.CAT IINot a FindingCCI-000366
V-253297Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 account lockout duration must be configured to 15 minutes or greater.CAT IINot a FindingCCI-002238
V-253298Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The number of allowed bad logon attempts must be configured to three or less.CAT IINot a FindingCCI-000044
V-253299Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The period of time before the bad logon counter is reset must be configured to 15 minutes.CAT IINot a FindingCCI-000044
V-253300Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The password history must be configured to 24 passwords remembered.CAT IINot a FindingCCI-004061
V-253301Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The maximum password age must be configured to 60 days or less.CAT IINot a FindingCCI-000199, CCI-004066
V-253302Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The minimum password age must be configured to at least 1 day.CAT IINot a FindingCCI-000198, CCI-004066
V-253303Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Passwords must, at a minimum, be 14 characters.CAT IINot a FindingCCI-000205, CCI-004066
V-253304Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The built-in Microsoft password complexity filter must be enabled.CAT IINot a FindingCCI-000192, CCI-004066
V-253305Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Reversible password encryption must be disabled.CAT INot a FindingCCI-000196, CCI-004062
V-253306Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Account Logon - Credential Validation failures.CAT IINot a FindingCCI-000172
V-253307Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Account Logon - Credential Validation successes.CAT IINot a FindingCCI-000172
V-253308Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Account Management - Security Group Management successes.CAT IINot a FindingCCI-001914
V-253309Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Account Management - User Account Management failures.CAT IINot a FindingCCI-001314
V-253310Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Account Management - User Account Management successes.CAT IINot a FindingCCI-001403
V-253311Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Detailed Tracking - PNP Activity successes.CAT IINot a FindingCCI-000172, CCI-001814, CCI-003938
V-253312Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Detailed Tracking - Process Creation successes.CAT IINot a FindingCCI-000172, CCI-001814, CCI-003938
V-253313Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Account Lockout failures.CAT IINot a FindingCCI-000172
V-253314Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Group Membership successes.CAT IINot a FindingCCI-000172
V-253315Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Logoff successes.CAT IINot a FindingCCI-000067
V-253316Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Logon failures.CAT IINot a FindingCCI-000172
V-253317Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Logon successes.CAT IINot a FindingCCI-000172
V-253318Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Logon/Logoff - Special Logon successes.CAT IINot a FindingCCI-000172
V-253319Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Object Access - File Share failures.CAT IINot a FindingCCI-000172
V-253320Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Object Access - File Share successes.CAT IINot a FindingCCI-000172
V-253321Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Object Access - Other Object Access Events successes.CAT IINot a FindingCCI-000172
V-253322Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Object Access - Other Object Access Events failures.CAT IINot a FindingCCI-000172
V-253323Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Object Access - Removable Storage failures.CAT IINot a FindingCCI-000172
V-253324Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Object Access - Removable Storage successes.CAT IINot a FindingCCI-000172
V-253325Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Policy Change - Audit Policy Change successes.CAT IINot a FindingCCI-000172
V-253326Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Policy Change - Authentication Policy Change successes.CAT IINot a FindingCCI-000172
V-253327Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Policy Change - Authorization Policy Change successes.CAT IINot a FindingCCI-000172
V-253328Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Privilege Use - Sensitive Privilege Use failures.CAT IINot a FindingCCI-002234
V-253329Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit Privilege Use - Sensitive Privilege Use successes.CAT IINot a FindingCCI-000172
V-253330Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - IPsec Driver failures.CAT IINot a FindingCCI-000172
V-253331Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - Other System Events successes.CAT IINot a FindingCCI-000172
V-253332Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - Other System Events failures.CAT IINot a FindingCCI-000172
V-253333Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - Security State Change successes.CAT IINot a FindingCCI-000172
V-253334Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - Security System Extension successes.CAT IINot a FindingCCI-000172
V-253335Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - System Integrity failures.CAT IINot a FindingCCI-000172
V-253336Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to audit System - System Integrity successes.CAT IINot a FindingCCI-000172
V-253337Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Application event log size must be configured to 32768 KB or greater.CAT IINot a FindingCCI-001849
V-253339Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The System event log size must be configured to 32768 KB or greater.CAT IINot a FindingCCI-001849
V-253340Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 permissions for the Application event log must prevent access by non-privileged accounts.CAT IINot a FindingCCI-000162
V-253342Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 permissions for the System event log must prevent access by non-privileged accounts.CAT IINot a FindingCCI-000162
V-253344Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Other Policy Change Events Failures.CAT IINot a FindingCCI-000130
V-253345Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit other Logon/Logoff Events Successes.CAT IINot a FindingCCI-000130
V-253346Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit other Logon/Logoff Events Failures.CAT IINot a FindingCCI-000130
V-253347Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit Detailed File Share Failures.CAT IINot a FindingCCI-000130
V-253348Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit MPSSVC Rule-Level Policy Change Successes.CAT IINot a FindingCCI-000130
V-253349Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit MPSSVC Rule-Level Policy Change Failures.CAT IINot a FindingCCI-000130
V-253350Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Camera access from the lock screen must be disabled.CAT IINot a FindingCCI-000381
V-253352Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The display of slide shows on the lock screen must be disabled.CAT IINot a FindingCCI-000381
V-253353Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026IPv6 source routing must be configured to highest protection.CAT IINot a FindingCCI-000366
V-253354Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to prevent IP source routing.CAT IINot a FindingCCI-000366
V-253355Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to prevent Internet Control Message Protocol (ICMP) redirects from overriding Open Shortest Path First (OSPF) generated routes.CAT IIINot a FindingCCI-000366
V-253356Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to ignore NetBIOS name release requests except from WINS servers.CAT IIINot a FindingCCI-002385
V-253358Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026WDigest Authentication must be disabled.CAT IINot a FindingCCI-000381
V-253359Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Run as different user must be removed from context menus.CAT IINot a FindingCCI-000381
V-253360Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Insecure logons to an SMB server must be disabled.CAT IINot a FindingCCI-000366
V-253361Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet connection sharing must be disabled.CAT IINot a FindingCCI-000381
V-253363Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to prioritize ECC Curves with longer key lengths first.CAT IINot a FindingCCI-000803
V-253364Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Simultaneous connections to the internet or a Windows domain must be limited.CAT IINot a FindingCCI-002418
V-253365Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Connections to non-domain networks when connected to a domain authenticated network must be blocked.CAT IINot a FindingCCI-000366
V-253366Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Wi-Fi Sense must be disabled.CAT IINot a FindingCCI-000366
V-253367Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Command line data must be included in process creation events.CAT IINot a FindingCCI-000135
V-253368Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to enable Remote host allows delegation of non-exportable credentials.CAT IINot a FindingCCI-000366
V-253369Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Virtualization-based Security must be enabled on Windows 11 with the platform security level configured to Secure Boot or Secure Boot with DMA Protection.CAT IINot a FindingCCI-000366
V-253371Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Virtualization-based protection of code integrity must be enabled.CAT IINot a FindingCCI-000366
V-253372Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers.CAT IINot a FindingCCI-000366
V-253373Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Group Policy objects must be reprocessed even if they have not changed.CAT IINot a FindingCCI-000366
V-253374Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Downloading print driver packages over HTTP must be prevented.CAT IINot a FindingCCI-000381
V-253375Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Web publishing and online ordering wizards must be prevented from downloading a list of providers.CAT IINot a FindingCCI-000381
V-253376Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Printing over HTTP must be prevented.CAT IINot a FindingCCI-000381
V-253378Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The network selection user interface (UI) must not be displayed on the logon screen.CAT IINot a FindingCCI-000381
V-253380Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Users must be prompted for a password on resume from sleep (on battery).CAT IINot a FindingCCI-002038
V-253381Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The user must be prompted for a password on resume from sleep (plugged in).CAT IINot a FindingCCI-002038
V-253382Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Solicited Remote Assistance must not be allowed.CAT INot a FindingCCI-001090
V-253383Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Unauthenticated RPC clients must be restricted from connecting to the RPC server.CAT IINot a FindingCCI-001967
V-253384Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The setting to allow Microsoft accounts to be optional for modern style apps must be enabled.CAT IIINot a FindingCCI-000366
V-253385Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Application Compatibility Program Inventory must be prevented from collecting data and sending the information to Microsoft.CAT IIINot a FindingCCI-000381
V-253386Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Autoplay must be turned off for non-volume devices.CAT INot a FindingCCI-001764
V-253387Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The default autorun behavior must be configured to prevent autorun commands.CAT INot a FindingCCI-001764
V-253388Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Autoplay must be disabled for all drives.CAT INot a FindingCCI-001764
V-253389Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Enhanced anti-spoofing for facial recognition must be enabled on Windows 11.CAT IINot a FindingCCI-000366
V-253390Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Microsoft consumer experiences must be turned off.CAT IIINot a FindingCCI-000381
V-253391Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Administrator accounts must not be enumerated during elevation.CAT IINot a FindingCCI-001084
V-253393Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows Telemetry must not be configured to Full.CAT IINot a FindingCCI-001312
V-253394Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows Update must not obtain updates from other PCs on the internet.CAT IIINot a FindingCCI-000366
V-253395Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Microsoft Defender SmartScreen for Explorer must be enabled.CAT IINot a FindingCCI-000381
V-253396Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Explorer Data Execution Prevention must be enabled.CAT IINot a FindingCCI-002824
V-253397Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026File Explorer heap termination on corruption must be disabled.CAT IIINot a FindingCCI-002385
V-253398Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026File Explorer shell protocol must run in protected mode.CAT IINot a FindingCCI-000366
V-253399Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to disable Windows Game Recording and Broadcasting.CAT IINot a FindingCCI-000381
V-253400Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The use of a hardware security device with Windows Hello for Business must be enabled.CAT IINot a FindingCCI-000366
V-253401Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to require a minimum pin length of six characters or greater.CAT IINot a FindingCCI-000366
V-253402Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Passwords must not be saved in the Remote Desktop Client.CAT IINot a FindingCCI-002038
V-253403Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Local drives must be prevented from sharing with Remote Desktop Session Hosts.CAT IINot a FindingCCI-001090
V-253404Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Remote Desktop Services must always prompt a client for passwords upon connection.CAT IINot a FindingCCI-002038
V-253405Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Remote Desktop Session Host must require secure RPC communications.CAT IINot a FindingCCI-001453
V-253406Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Remote Desktop Services must be configured with the client connection encryption set to the required level.CAT IINot a FindingCCI-000068
V-253407Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Attachments must be prevented from being downloaded from RSS feeds.CAT IINot a FindingCCI-000366
V-253408Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Basic authentication for RSS feeds over HTTP must not be used.CAT IINot a FindingCCI-000381
V-253409Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Indexing of encrypted files must be turned off.CAT IINot a FindingCCI-000381
V-253410Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Users must be prevented from changing installation options.CAT IINot a FindingCCI-001812, CCI-003980
V-253411Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Installer feature "Always install with elevated privileges" must be disabled.CAT INot a FindingCCI-001812, CCI-003980
V-253412Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Users must be notified if a web-based program attempts to install software.CAT IINot a FindingCCI-000366
V-253413Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Automatically signing in the last interactive user after a system-initiated restart must be disabled.CAT IINot a FindingCCI-000366
V-253414Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026PowerShell script block logging must be enabled on Windows 11.CAT IINot a FindingCCI-000135
V-253415Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026PowerShell Transcription must be enabled on Windows 11.CAT IINot a FindingCCI-000134
V-253416Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows Remote Management (WinRM) client must not use Basic authentication.CAT INot a FindingCCI-000877
V-253422Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to prevent Windows apps from being activated by voice while the system is locked.CAT IINot a FindingCCI-000056
V-253423Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The convenience PIN for Windows 11 must be disabled.CAT IINot a FindingCCI-000381
V-253424Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows Ink Workspace must be configured to disallow access above the lock.CAT IINot a FindingCCI-000060
V-253425Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to prevent users from receiving suggestions for third-party or additional applications.CAT IIINot a FindingCCI-000381
V-253426Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 Kernel (Direct Memory Access) DMA Protection must be enabled.CAT IINot a FindingCCI-000172
V-253428Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The External Root CA certificates must be installed in the Trusted Root Store on unclassified systems.CAT IINot a FindingCCI-000185
V-253430Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The US DOD CCEB Interoperability Root CA cross-certificates must be installed in the Untrusted Certificates Store on unclassified systems.CAT IINot a FindingCCI-002470
V-253431Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Default permissions for the HKEY_LOCAL_MACHINE registry hive must be maintained.CAT IINot a FindingCCI-002235
V-253433Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The built-in guest account must be disabled.CAT IINot a FindingCCI-000804
V-253434Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Local accounts with blank passwords must be restricted to prevent access from the network.CAT IINot a FindingCCI-000366
V-253435Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The built-in administrator account must be renamed.CAT IINot a FindingCCI-000366
V-253436Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The built-in guest account must be renamed.CAT IINot a FindingCCI-000366
V-253437Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Audit policy using subcategories must be enabled.CAT IINot a FindingCCI-000169
V-253438Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Outgoing secure channel traffic must be encrypted or signed.CAT IINot a FindingCCI-002418, CCI-002421
V-253439Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Outgoing secure channel traffic must be encrypted.CAT IINot a FindingCCI-002418, CCI-002421
V-253440Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Outgoing secure channel traffic must be signed.CAT IINot a FindingCCI-002418, CCI-002421
V-253441Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The computer account password must not be prevented from being reset.CAT IIINot a FindingCCI-000366
V-253442Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The maximum age for machine account passwords must be configured to 30 days or less.CAT IIINot a FindingCCI-000366
V-253443Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to require a strong session key.CAT IINot a FindingCCI-002418
V-253444Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The machine inactivity limit must be set to 15 minutes, locking the system with the screensaver.CAT IINot a FindingCCI-001133, CCI-002361
V-253447Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Caching of logon credentials must be limited.CAT IIINot a FindingCCI-000366
V-253448Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Smart Card removal option must be configured to Force Logoff or Lock Workstation.CAT IINot a FindingCCI-000366
V-253449Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows SMB client must be configured to always perform SMB packet signing.CAT IINot a FindingCCI-002418
V-253450Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Unencrypted passwords must not be sent to third-party SMB Servers.CAT IINot a FindingCCI-000197
V-253451Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The Windows SMB server must be configured to always perform SMB packet signing.CAT IINot a FindingCCI-002418
V-253452Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anonymous SID/Name translation must not be allowed.CAT INot a FindingCCI-000366
V-253453Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anonymous enumeration of SAM accounts must not be allowed.CAT INot a FindingCCI-000366
V-253454Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anonymous enumeration of shares must be restricted.CAT INot a FindingCCI-001090
V-253455Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to prevent anonymous users from having the same rights as the Everyone group.CAT IINot a FindingCCI-000366
V-253456Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Anonymous access to Named Pipes and Shares must be restricted.CAT INot a FindingCCI-001090
V-253457Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Remote calls to the Security Account Manager (SAM) must be restricted to Administrators.CAT IINot a FindingCCI-002235
V-253458Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026NTLM must be prevented from falling back to a Null session.CAT IINot a FindingCCI-000366
V-253459Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026PKU2U authentication using online identities must be prevented.CAT IINot a FindingCCI-000366
V-253460Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Kerberos encryption types must be configured to prevent the use of DES and RC4 encryption suites.CAT IINot a FindingCCI-000803
V-253461Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to prevent the storage of the LAN Manager hash of passwords.CAT INot a FindingCCI-000196, CCI-004062
V-253462Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The LanMan authentication level must be set to send NTLMv2 response only, and to refuse LM and NTLM.CAT INot a FindingCCI-000366
V-253463Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to the required LDAP client signing level.CAT IINot a FindingCCI-000366
V-253464Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to meet the minimum session security requirement for NTLM SSP based clients.CAT IINot a FindingCCI-000366
V-253465Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The system must be configured to meet the minimum session security requirement for NTLM SSP based servers.CAT IINot a FindingCCI-000366
V-253467Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The default permissions of global system objects must be increased.CAT IIINot a FindingCCI-000366
V-253468Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control approval mode for the built-in Administrator must be enabled.CAT IINot a FindingCCI-002038
V-253469Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must prompt administrators for consent on the secure desktop.CAT IINot a FindingCCI-001084
V-253471Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must automatically deny elevation requests for standard users.CAT IINot a FindingCCI-002038
V-253472Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must be configured to detect application installations and prompt for elevation.CAT IINot a FindingCCI-001084
V-253473Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must only elevate UIAccess applications that are installed in secure locations.CAT IINot a FindingCCI-001084
V-253474Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must run all administrators in Admin Approval Mode, enabling UAC.CAT IINot a FindingCCI-002038
V-253475Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026User Account Control must virtualize file and registry write failures to per-user locations.CAT IINot a FindingCCI-001084
V-253477Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Toast notifications to the lock screen must be turned off.CAT IIINot a FindingCCI-000381
V-253478Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Zone information must be preserved when saving attachments.CAT IINot a FindingCCI-000366
V-253479Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Access Credential Manager as a trusted caller" user right must not be assigned to any groups or accounts.CAT IINot a FindingCCI-002235
V-253480Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Access this computer from the network" user right must only be assigned to the Administrators and Remote Desktop Users groups.CAT IINot a FindingCCI-000213
V-253481Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Act as part of the operating system" user right must not be assigned to any groups or accounts.CAT INot a FindingCCI-002235
V-253483Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Back up files and directories" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253484Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Change the system time" user right must only be assigned to Administrators and Local Service.CAT IINot a FindingCCI-002235
V-253485Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Create a pagefile" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253486Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Create a token object" user right must not be assigned to any groups or accounts.CAT INot a FindingCCI-002235
V-253487Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Create global objects" user right must only be assigned to Administrators, Service, Local Service, and Network Service.CAT IINot a FindingCCI-002235
V-253488Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Create permanent shared objects" user right must not be assigned to any groups or accounts.CAT IINot a FindingCCI-002235
V-253490Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Debug programs" user right must only be assigned to the Administrators group.CAT INot a FindingCCI-002235
V-253491Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Deny access to this computer from the network" user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.CAT IINot a FindingCCI-000213
V-253494Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Deny log on locally" user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.CAT IINot a FindingCCI-000213
V-253495Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Deny log on through Remote Desktop Services" user right on Windows 11 workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.CAT IINot a FindingCCI-000213, CCI-002314
V-253496Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Enable computer and user accounts to be trusted for delegation" user right must not be assigned to any groups or accounts.CAT IINot a FindingCCI-002235
V-253497Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Force shutdown from a remote system" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253498Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Impersonate a client after authentication" user right must only be assigned to Administrators, Service, Local Service, and Network Service.CAT IINot a FindingCCI-002235
V-253499Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Load and unload device drivers" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253500Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Lock pages in memory" user right must not be assigned to any groups or accounts.CAT IINot a FindingCCI-002235
V-253501Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Manage auditing and security log" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-000162, CCI-000171
V-253502Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Modify firmware environment values" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253503Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Perform volume maintenance tasks" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253504Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Profile single process" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253505Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Restore files and directories" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-253506Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026The "Take ownership of files or other objects" user right must only be assigned to the Administrators group.CAT IINot a FindingCCI-002235
V-256893Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Internet Explorer must be disabled for Windows 11.CAT IINot a FindingCCI-000366
V-257592Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must not have portproxy enabled or in use.CAT IINot a FindingCCI-000381
V-257770Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must have command line process auditing events enabled for failures.CAT IINot a FindingCCI-002234
V-278932Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit sensitive privilege use successes.CAT IINot a FindingCCI-000172
V-278933Microsoft Windows 11 Security Technical Implementation Guide::Version 2, Release: 7 Benchmark Date: 01 Apr 2026Windows 11 must be configured to audit sensitive privilege use failures.CAT IINot a FindingCCI-000172
V-241990Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must be enabled when connected to a private network.CAT IINot a FindingCCI-001414
V-241991Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must be enabled when connected to a public network.CAT IINot a FindingCCI-001414
V-241997Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must block unsolicited inbound connections when connected to a private network.CAT INot a FindingCCI-000382
V-241998Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a private network.CAT IINot a FindingCCI-001094
V-242002Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must block unsolicited inbound connections when connected to a public network.CAT INot a FindingCCI-000382
V-242003Microsoft Windows Defender Firewall with Advanced Security Security Technical Implementation Guide::Version 2, Release: 2 Benchmark Date: 09 Nov 2023Windows Defender Firewall with Advanced Security must allow outbound connections, unless a rule explicitly blocks the connection when connected to a public network.CAT IINot a FindingCCI-001094

Report: 08-08-2026
PowerStruxWA Configuration
PowerStruxWA Configuration
KeyValue
ReportLocation $ENV:USERPROFILE\Desktop
ReportName $(Get-Date -Format yyyyMMdd)-$($env:COMPUTERNAME)-POWERSTRUXWA-REPORT
DaysToAudit 8
AuditDataTransfers 1
FilteredSids S-1-5-18,S-1-5-19,S-1-5-90-0-1,S-1-5-20,S-1-5-96-0-1,S-1-5-96-0-0,S-1-5-90-0-2,S-1-5-96-0-2,S-1-5-90-0-4,S-1-5-96-0-4,S-1-5-90-0-3,S-1-5-96-0-3
ShowDisabledUsers 0
PathLogSecurity C:\Windows\System32\winevt\Logs\Security.evtx
PathLogApplication C:\Windows\System32\winevt\Logs\Application.evtx
PathLogSystem C:\Windows\System32\winevt\Logs\System.evtx
PathLogPrint C:\Windows\System32\winevt\Logs\Microsoft-Windows-PrintService%4Operational.evtx
ClearLogSecurity 0
ClearLogBackupPathSecurity C:\Windows\System32\winevt\Logs
ClearLogBackupFileNameSecurity $(Get-Date -Format yyyyMMdd)-$env:COMPUTERNAME-Security.evtx
ClearLogApplication 0
ClearLogBackupPathApplication C:\Windows\System32\winevt\Logs
ClearLogBackupFileNameApplication $(Get-Date -Format yyyyMMdd)-$env:COMPUTERNAME-Application.evtx
ClearLogSystem 0
ClearLogBackupPathSystem C:\Windows\System32\winevt\Logs
ClearLogBackupFileNameSystem $(Get-Date -Format yyyyMMdd)-$env:COMPUTERNAME-System.evtx
ClearLogPrint 0
ClearLogBackupPathPrint C:\Windows\System32\winevt\Logs
ClearLogBackupFileNamePrint $(Get-Date -Format yyyyMMdd)-$env:COMPUTERNAME-Print.evtx
EnableSccScan 1
SccRootDirectory C:\Program Files
EnableEvalSTIGScan 1
EvalSTIGPath C:\Users\Public\Documents\Evaluate-STIG\Evaluate-STIG.ps1
EvalSTIGScanType Unclassified
EvalSTIGOutput CKLB,CKL
EvalSTIGOutputPath C:\Users\Public\Documents\Evaluate-STIG
EvalSTIGAFPath C:\Users\Public\Documents\Evaluate-STIG\AnswerFiles
ShowDefender 1
EnableModernReport 1