Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
148 rules foundof 8,597Page 1 of 6
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-EDGE-1.3.1 | Ensure 'Allow users to manage installed CA certificates' is set to 'Enabled: Disallow users from managing certificates'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.4.3 | Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.7.1 | Ensure 'Enable insecure download warnings' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.11.1 | Ensure 'Blocks external extensions from being installed' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.14.1 | Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.1 | Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.2 | Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.3 | Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.4 | Ensure 'Force Microsoft Defender SmartScreen checks on downloads from trusted sources' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.5 | Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.34.6 | Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.38 | Ensure 'Allow download restrictions' is set to 'Enabled: Block malicious downloads'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.55 | Ensure 'Allow remote debugging' is set to 'Disabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.63 | Ensure 'Allow Web Authentication requests on sites with broken TLS certificates' is set to 'Disabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.78 | Ensure 'Configure the list of names that will bypass the HSTS policy check' is set to 'Disabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.85 | Ensure 'Control where security restrictions on insecure origins apply' is set to 'Disabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.122 | Ensure 'Enable warnings for insecure forms' is set to 'Enabled'edge · Level 1 | edge | High | 1 | Automated |
| TMA-EDGE-1.4.1 | Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'edge · Level 2 | edge | Medium | 2 | Automated |
| TMA-EDGE-1.4.4 | Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'edge · Level 2 | edge | Medium | 2 | Automated |
| TMA-EDGE-1.4.5 | Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories via the File System API'edge · Level 2 | edge | Medium | 2 | Automated |
| TMA-EDGE-1.4.6 | Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'edge · Level 1 | edge | Medium | 1 | Automated |
| TMA-EDGE-1.4.7 | Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'edge · Level 2 | edge | Medium | 2 | Automated |
| TMA-EDGE-1.4.8 | Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'edge · Level 2 | edge | Medium | 2 | Automated |
| TMA-EDGE-1.4.9 | Ensure 'Default automatic downloads setting' is set to 'Enabled: Prevent all websites from performing multiple downloads, even after a user gesture'edge · Level 1 | edge | Medium | 1 | Automated |
| TMA-EDGE-1.8.1 | Ensure 'Configure Edge Website Typo Protection' is set to 'Enabled'edge · Level 1 | edge | Medium | 1 | Automated |