# poams

poam_number: POAM-00001
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215807: The Cisco router must be configured to limit the number of concurrent management sessions to an orga

description:
  The Cisco router must be configured to limit the number of concurrent management sessions to an organization-defined number.


poam_number: POAM-00002
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215814: The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner 

description:
  The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.


poam_number: POAM-00003
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215823: The Cisco router must be configured to prohibit the use of all unnecessary and nonsecure functions a

description:
  The Cisco router must be configured to prohibit the use of all unnecessary and nonsecure functions and services.


poam_number: POAM-00004
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215824: The Cisco router must be configured with only one local account to be used as the account of last re

description:
  The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.


poam_number: POAM-00005
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215833: The Cisco router must be configured to terminate all network connections associated with device mana

description:
  The Cisco router must be configured to terminate all network connections associated with device management after five minutes of inactivity.


poam_number: POAM-00006
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215836: The Cisco router must be configured to allocate audit record storage capacity in accordance with org

description:
  The Cisco router must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.


poam_number: POAM-00007
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215844: The Cisco router must be configured to use FIPS-validated Keyed-Hash Message Authentication Code (HM

description:
  The Cisco router must be configured to use FIPS-validated Keyed-Hash Message Authentication Code (HMAC) to protect the integrity of remote maintenance sessions.


poam_number: POAM-00009
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-215856: The Cisco router must be configured to obtain its public key certificates from an appropriate certif

description:
  The Cisco router must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.


poam_number: POAM-00010
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-220139: The Cisco router must be configured to send log data to at least two syslog servers for the purpose 

description:
  The Cisco router must be configured to send log data to at least two syslog servers for the purpose of forwarding alerts to the administrators and the information system security officer (ISSO).


poam_number: POAM-00011
description: The Cisco router must be running an IOS release that is currently supported by Cisco Systems.
weakness_source: CKL Import: tmp1p43lvhn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
title:
  V-220140: The Cisco router must be running an IOS release that is currently supported by Cisco Systems.


poam_number: POAM-00028
description: The Office client must be prevented from polling the SharePoint Server for published links.
weakness_source: CKL Import: tmpotzglez5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
title:
  V-223286: The Office client must be prevented from polling the SharePoint Server for published links.


poam_number: POAM-00054
description: Open/Save of PowerPoint 97-2003 presentations, shows, templates, and add-in files must be blocked.
weakness_source: CKL Import: tmpotzglez5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
title:
  V-223379: Open/Save of PowerPoint 97-2003 presentations, shows, templates, and add-in files must be blocked.


poam_number: POAM-00065
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
title:
  V-220705: The operating system must employ a deny-all, permit-by-exception policy to allow the execution of au

description:
  The operating system must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.


poam_number: POAM-00068
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
title:
  V-220737: Administrative accounts must not be used with applications that access the Internet, such as web bro

description:
  Administrative accounts must not be used with applications that access the Internet, such as web browsers, or with potential Internet sources, such as email.


poam_number: POAM-00070
description: Passwords for enabled local Administrator accounts must be changed at least every 60 days.
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220952: Passwords for enabled local Administrator accounts must be changed at least every 60 days.


poam_number: POAM-00071
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220957: The Access this computer from the network user right must only be assigned to the Administrators and

description:
  The Access this computer from the network user right must only be assigned to the Administrators and Remote Desktop Users groups.


poam_number: POAM-00072
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220968: The Deny access to this computer from the network user right on workstations must be configured to p

description:
  The Deny access to this computer from the network user right on workstations must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.


poam_number: POAM-00073
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220970: The Deny log on as a service user right on Windows 10 domain-joined workstations must be configured 

description:
  The Deny log on as a service user right on Windows 10 domain-joined workstations must be configured to prevent access from highly privileged domain accounts.


poam_number: POAM-00074
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220971: The Deny log on locally user right on workstations must be configured to prevent access from highly 

description:
  The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems.


poam_number: POAM-00075
weakness_source: CKL Import: tmpsp66hlyh.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
title:
  V-220972: The Deny log on through Remote Desktop Services user right on Windows 10 workstations must at a mini

description:
  The Deny log on through Remote Desktop Services user right on Windows 10 workstations must at a minimum be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and unauthenticated access on all systems.


poam_number: POAM-00082
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-224819: Users with Administrative privileges must have separate accounts for administrative duties and norma

description:
  Users with Administrative privileges must have separate accounts for administrative duties and normal operational tasks.


poam_number: POAM-00084
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-224821: Administrative accounts must not be used with applications that access the Internet, such as web bro

description:
[cell repeats an earlier one in this file: 157 characters]


poam_number: POAM-00086
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-224826: Windows Server 2016 must employ a deny-all, permit-by-exception policy to allow the execution of aut

description:
  Windows Server 2016 must employ a deny-all, permit-by-exception policy to allow the execution of authorized software programs.


poam_number: POAM-00091
description: Audit records must be backed up to a different system or media than the system being audited.
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-224875: Audit records must be backed up to a different system or media than the system being audited.


poam_number: POAM-00092
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-224876: Windows Server 2016 must, at a minimum, offload audit records of interconnected systems in real time

description:
  Windows Server 2016 must, at a minimum, offload audit records of interconnected systems in real time and offload standalone or nondomain-joined systems weekly.


poam_number: POAM-00093
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-225007: Only administrators responsible for the member server or standalone or nondomain-joined system must 

description:
  Only administrators responsible for the member server or standalone or nondomain-joined system must have Administrator rights on the system.


poam_number: POAM-00094
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-225015: The "Deny access to this computer from the network" user right on member servers must be configured 

description:
  The "Deny access to this computer from the network" user right on member servers must be configured to prevent access from highly privileged domain accounts and local accounts on domain systems and from unauthenticated access on all systems.


poam_number: POAM-00095
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-225017: The "Deny log on as a service" user right on member servers must be configured to prevent access fro

description:
  The "Deny log on as a service" user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems. No other groups or accounts must be assigned this right.


poam_number: POAM-00096
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-225018: The "Deny log on locally" user right on member servers must be configured to prevent access from hig

description:
  The "Deny log on locally" user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and from unauthenticated access on all systems.


poam_number: POAM-00097
weakness_source: CKL Import: tmpd9vt6j_t.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:30
updated_at: 2026-01-14 17:57:30
title:
  V-225019: The "Deny log on through Remote Desktop Services" user right on member servers must be configured to

description:
  The "Deny log on through Remote Desktop Services" user right on member servers must be configured to prevent access from highly privileged domain accounts and all local accounts on domain systems and from unauthenticated access on all systems.


poam_number: POAM-00101
description: Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled.
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218786: Both the log file and Event Tracing for Windows (ETW) for the IIS 10.0 web server must be enabled.


poam_number: POAM-00102
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218788: The IIS 10.0 web server must produce log records that contain sufficient information to establish th

description:
  The IIS 10.0 web server must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 web server events.


poam_number: POAM-00103
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218789: The IIS 10.0 web server must produce log records containing sufficient information to establish the 

description:
  The IIS 10.0 web server must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event.


poam_number: POAM-00104
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218790: The log information from the IIS 10.0 web server must be protected from unauthorized modification or

description:
  The log information from the IIS 10.0 web server must be protected from unauthorized modification or deletion.


poam_number: POAM-00106
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218797: The IIS 10.0 web server must be reviewed on a regular basis to remove any Operating System features,

description:
  The IIS 10.0 web server must be reviewed on a regular basis to remove any Operating System features, utility programs, plug-ins, and modules not necessary for operation.


poam_number: POAM-00107
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:32
updated_at: 2026-01-14 17:57:32
title:
  V-218798: The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell 

description:
  The IIS 10.0 web server must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.


poam_number: POAM-00112
weakness_source: CKL Import: tmpby7wv3s8.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218819: The IIS 10.0 web server must be tuned to handle the operational requirements of the hosted applicati

description:
  The IIS 10.0 web server must be tuned to handle the operational requirements of the hosted application.


poam_number: POAM-00117
description: Both the log file and Event Tracing for Windows (ETW) for each IIS 10.0 website must be enabled.
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218739: Both the log file and Event Tracing for Windows (ETW) for each IIS 10.0 website must be enabled.


poam_number: POAM-00118
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218741: The IIS 10.0 website must produce log records that contain sufficient information to establish the o

description:
  The IIS 10.0 website must produce log records that contain sufficient information to establish the outcome (success or failure) of IIS 10.0 website events.


poam_number: POAM-00119
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218742: The IIS 10.0 website must produce log records containing sufficient information to establish the ide

description:
  The IIS 10.0 website must produce log records containing sufficient information to establish the identity of any user/subject or process associated with an event.


poam_number: POAM-00120
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218743: The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell pro

description:
  The IIS 10.0 website must have Multipurpose Internet Mail Extensions (MIME) that invoke OS shell programs disabled.


poam_number: POAM-00122
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218749: A private IIS 10.0 website authentication mechanism must use client certificates to transmit session

description:
  A private IIS 10.0 website authentication mechanism must use client certificates to transmit session identifier to assure integrity.


poam_number: POAM-00123
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218763: The IIS 10.0 websites connectionTimeout setting must be explicitly configured to disconnect an idle 

description:
  The IIS 10.0 websites connectionTimeout setting must be explicitly configured to disconnect an idle session.


poam_number: POAM-00124
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218768: The IIS 10.0 private website must employ cryptographic mechanisms (TLS) and require client certifica

description:
  The IIS 10.0 private website must employ cryptographic mechanisms (TLS) and require client certificates.


poam_number: POAM-00125
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218770: Cookies exchanged between the IIS 10.0 website and the client must have cookie properties set to pro

description:
  Cookies exchanged between the IIS 10.0 website and the client must have cookie properties set to prohibit client-side scripts from reading the cookie data.


poam_number: POAM-00126
weakness_source: CKL Import: tmpeop8kpnn.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-218782: The required DoD banner page must be displayed to authenticated users accessing a DoD private websit

description:
  The required DoD banner page must be displayed to authenticated users accessing a DoD private website.


poam_number: POAM-00150
description: Exchange must provide Mailbox databases in a highly available and redundant configuration.
weakness_source: CKL Import: tmps1__rawz.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-228410: Exchange must provide Mailbox databases in a highly available and redundant configuration.


poam_number: POAM-00153
weakness_source: CKL Import: tmp45k0e9j5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:33
updated_at: 2026-01-14 17:57:33
title:
  V-224824: Manually managed application account passwords must be changed at least annually or when a system ad

description:
  Manually managed application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization.


poam_number: POAM-00156
weakness_source: CKL Import: tmp45k0e9j5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
title:
  V-224923: Windows Server 2016 virtualization-based security must be enabled with the platform security level c

description:
  Windows Server 2016 virtualization-based security must be enabled with the platform security level configured to Secure Boot or Secure Boot with DMA Protection.


poam_number: POAM-00158
weakness_source: CKL Import: tmp45k0e9j5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
title:
  V-225016: The "Deny log on as a batch job" user right on member servers must be configured to prevent access f

description:
  The "Deny log on as a batch job" user right on member servers must be configured to prevent access from highly privileged domain accounts on domain systems and from unauthenticated access on all systems.


poam_number: POAM-00159
weakness_source: CKL Import: tmp45k0e9j5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:34
updated_at: 2026-01-14 17:57:34
title:
  V-225082: The Impersonate a client after authentication user right must only be assigned to Administrators, Se

description:
  The Impersonate a client after authentication user right must only be assigned to Administrators, Service, Local Service, and Network Service.


poam_number: POAM-00160
weakness_source: CKL Import: tmpxh4ozyf5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218802: IIS 10.0 Web server accounts accessing the directory tree, the shell, or other operating system func

description:
  IIS 10.0 Web server accounts accessing the directory tree, the shell, or other operating system functions and utilities must only be administrative accounts.


poam_number: POAM-00161
weakness_source: CKL Import: tmpxh4ozyf5.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218823: All accounts installed with the IIS 10.0 web server software and tools must have passwords assigned 

description:
  All accounts installed with the IIS 10.0 web server software and tools must have passwords assigned and default passwords changed.


poam_number: POAM-00163
weakness_source: CKL Import: tmp0x7gc95z.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218738: A public IIS 10.0 website must only accept Secure Socket Layer (SSL) connections when authentication

description:
  A public IIS 10.0 website must only accept Secure Socket Layer (SSL) connections when authentication is required.


poam_number: POAM-00164
description: The IIS 10.0 website must have resource mappings set to disable the serving of certain file types.
weakness_source: CKL Import: tmp0x7gc95z.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218745: The IIS 10.0 website must have resource mappings set to disable the serving of certain file types.


poam_number: POAM-00166
weakness_source: CKL Import: tmp0x7gc95z.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218752: The IIS 10.0 website document directory must be in a separate partition from the IIS 10.0 websites s

description:
  The IIS 10.0 website document directory must be in a separate partition from the IIS 10.0 websites system files.


poam_number: POAM-00169
weakness_source: CKL Import: tmp0x7gc95z.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218767: The IIS 10.0 website must only accept client certificates issued by DOD PKI or DOD-approved PKI Cert

description:
  The IIS 10.0 website must only accept client certificates issued by DOD PKI or DOD-approved PKI Certification Authorities (CAs).


poam_number: POAM-00170
weakness_source: CKL Import: tmp0x7gc95z.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:35
updated_at: 2026-01-14 17:57:35
title:
  V-218772: The maximum number of requests an application pool can process for each IIS 10.0 website must be exp

description:
  The maximum number of requests an application pool can process for each IIS 10.0 website must be explicitly set.


poam_number: POAM-00171
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243466: Membership to the Enterprise Admins group must be restricted to accounts used only to manage the Act

description:
  Membership to the Enterprise Admins group must be restricted to accounts used only to manage the Active Directory Forest.


poam_number: POAM-00172
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243467: Membership to the Domain Admins group must be restricted to accounts used only to manage the Active 

description:
  Membership to the Domain Admins group must be restricted to accounts used only to manage the Active Directory domain and domain controllers.


poam_number: POAM-00173
description: Administrators must have separate accounts specifically for managing domain member servers.
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243468: Administrators must have separate accounts specifically for managing domain member servers.


poam_number: POAM-00177
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243472: Separate smart cards must be used for Enterprise Admin (EA) and Domain Admin (DA) accounts from smar

description:
  Separate smart cards must be used for Enterprise Admin (EA) and Domain Admin (DA) accounts from smart cards used for other accounts.


poam_number: POAM-00179
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243477: User accounts with domain level administrative privileges must be members of the Protected Users gro

description:
  User accounts with domain level administrative privileges must be members of the Protected Users group in domains with a domain functional level of Windows 2012 R2 or higher.


poam_number: POAM-00180
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243487: Membership in the Group Policy Creator Owners and Incoming Forest Trust Builders groups must be limi

description:
  Membership in the Group Policy Creator Owners and Incoming Forest Trust Builders groups must be limited.


poam_number: POAM-00181
weakness_source: CKL Import: tmp1f95gfst.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-269097: Windows Server domain controllers must have Kerberos logging enabled with servers hosting Active Dir

description:
  Windows Server domain controllers must have Kerberos logging enabled with servers hosting Active Directory Certificate Services (AD CS).


poam_number: POAM-00183
weakness_source: CKL Import: tmpvredoalx.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:36
updated_at: 2026-01-14 17:57:36
title:
  V-243504: The Windows Time Service on the forest root PDC Emulator must be configured to acquire its time from

description:
  The Windows Time Service on the forest root PDC Emulator must be configured to acquire its time from an external time source.


poam_number: POAM-00189
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-07-13
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224979: The directory service must be configured to terminate LDAP-based network connections to the director

description:
  The directory service must be configured to terminate LDAP-based network connections to the directory server after 5 minutes of inactivity.


poam_number: POAM-00192
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224983: The Active Directory Domain Controllers Organizational Unit (OU) object must be configured with prop

description:
  The Active Directory Domain Controllers Organizational Unit (OU) object must be configured with proper audit settings.


poam_number: POAM-00195
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-02-13
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224993: PKI certificates associated with user accounts must be issued by the DoD PKI or an approved External

description:
  PKI certificates associated with user accounts must be issued by the DoD PKI or an approved External Certificate Authority (ECA).


poam_number: POAM-00196
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224994: Active Directory user accounts, including administrators, must be configured to require the use of a

description:
  Active Directory user accounts, including administrators, must be configured to require the use of a Common Access Card (CAC), Personal Identity Verification (PIV)-compliant hardware token, or Alternate Logon Token (ALT) for user authentication.


poam_number: POAM-00198
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224997: The Access this computer from the network user right must only be assigned to the Administrators, Au

description:
  The Access this computer from the network user right must only be assigned to the Administrators, Authenticated Users, and 
  Enterprise Domain Controllers groups on domain controllers.


poam_number: POAM-00199
description: The Add workstations to domain user right must only be assigned to the Administrators group.
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:37
updated_at: 2026-01-14 17:57:37
title:
  V-224998: The Add workstations to domain user right must only be assigned to the Administrators group.


poam_number: POAM-00201
description: The Back up files and directories user right must only be assigned to the Administrators group.
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-225073: The Back up files and directories user right must only be assigned to the Administrators group.


poam_number: POAM-00202
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-225080: The Force shutdown from a remote system user right must only be assigned to the Administrators group

description:
  The Force shutdown from a remote system user right must only be assigned to the Administrators group.


poam_number: POAM-00203
description: The Load and unload device drivers user right must only be assigned to the Administrators group.
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-225084: The Load and unload device drivers user right must only be assigned to the Administrators group.


poam_number: POAM-00204
description: The Manage auditing and security log user right must only be assigned to the Administrators group.
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-225086: The Manage auditing and security log user right must only be assigned to the Administrators group.


poam_number: POAM-00205
description: The Restore files and directories user right must only be assigned to the Administrators group.
weakness_source: CKL Import: tmpd8rmy5b_.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-225092: The Restore files and directories user right must only be assigned to the Administrators group.


poam_number: POAM-00207
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259342: Forwarders on an authoritative Windows DNS Server, if enabled for external resolution, must forward 

description:
  Forwarders on an authoritative Windows DNS Server, if enabled for external resolution, must forward only to an internal, non-Active Directory (AD)-integrated DNS server or to the DOD Enterprise Recursive Services (ERS).


poam_number: POAM-00208
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259357: The Windows DNS Server authoritative for local zones must only point root hints to the DNS servers t

description:
  The Windows DNS Server authoritative for local zones must only point root hints to the DNS servers that host the internal root domain.


poam_number: POAM-00209
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259367: The Windows DNS Server must be configured to enforce authorized access to the corresponding private 

description:
  The Windows DNS Server must be configured to enforce authorized access to the corresponding private key.


poam_number: POAM-00210
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259369: The Windows DNS Server permissions must be set so the key file can only be read or modified by the a

description:
  The Windows DNS Server permissions must be set so the key file can only be read or modified by the account that runs the name server software.


poam_number: POAM-00211
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259405: The Windows DNS Server must, when a component failure is detected, activate a notification to the sy

description:
  The Windows DNS Server must, when a component failure is detected, activate a notification to the system administrator.


poam_number: POAM-00212
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259407: The Windows DNS Server must verify the correct operation of security functions upon system startup a

description:
  The Windows DNS Server must verify the correct operation of security functions upon system startup and/or restart, upon command by a user with privileged access, and/or every 30 days.


poam_number: POAM-00213
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259411: The DNS server implementation must employ strong authenticators in the establishment of nonlocal mai

description:
  The DNS server implementation must employ strong authenticators in the establishment of nonlocal maintenance and diagnostic sessions.


poam_number: POAM-00214
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259412: In the event of a system failure, the Windows DNS Server must preserve any information necessary to 

description:
  In the event of a system failure, the Windows DNS Server must preserve any information necessary to determine cause of failure and any information necessary to return to operations with least disruption to mission processes.


poam_number: POAM-00216
weakness_source: CKL Import: tmp3y295sfi.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:38
updated_at: 2026-01-14 17:57:38
title:
  V-259415: The Windows DNS Server audit records must be backed up at least every seven days onto a different sy

description:
  The Windows DNS Server audit records must be backed up at least every seven days onto a different system or system component than the system or component being audited.


poam_number: POAM-00219
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
title:
  V-213929: SQL Server must limit the number of concurrent sessions to an organization-defined number per user f

description:
  SQL Server must limit the number of concurrent sessions to an organization-defined number per user for all accounts and/or account types.


poam_number: POAM-00220
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
title:
  V-213934: SQL Server must protect against a user falsely repudiating by ensuring the NT AUTHORITY SYSTEM accou

description:
  SQL Server must protect against a user falsely repudiating by ensuring the NT AUTHORITY SYSTEM account is not used for administration.


poam_number: POAM-00221
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:40
updated_at: 2026-01-14 17:57:40
title:
  V-213936: SQL Server must be configured to generate audit records for DoD-defined auditable events within all 

description:
  SQL Server must be configured to generate audit records for DoD-defined auditable events within all DBMS/database components.


poam_number: POAM-00223
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-213975: SQL Server must prevent unauthorized and unintended information transfer via shared system resources

description:
  SQL Server must prevent unauthorized and unintended information transfer via shared system resources.


poam_number: POAM-00224
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-213989: SQL Server must produce audit records of its enforcement of access restrictions associated with chan

description:
  SQL Server must produce audit records of its enforcement of access restrictions associated with changes to the configuration of SQL Server or database(s).


poam_number: POAM-00226
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214000: SQL Server must generate audit records when successful and unsuccessful attempts to add privileges/p

description:
  SQL Server must generate audit records when successful and unsuccessful attempts to add privileges/permissions occur.


poam_number: POAM-00227
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214002: SQL Server must generate audit records when successful and unsuccessful attempts to modify privilege

description:
  SQL Server must generate audit records when successful and unsuccessful attempts to modify privileges/permissions occur.


poam_number: POAM-00228
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214004: SQL Server must generate audit records when successful and unsuccessful attempts to modify security 

description:
  SQL Server must generate audit records when successful and unsuccessful attempts to modify security objects occur.


poam_number: POAM-00229
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214008: SQL Server must generate audit records when successful and unsuccessful attempts to delete privilege

description:
  SQL Server must generate audit records when successful and unsuccessful attempts to delete privileges/permissions occur.


poam_number: POAM-00230
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214010: SQL Server must generate audit records when successful and unsuccessful attempts to delete security 

description:
  SQL Server must generate audit records when successful and unsuccessful attempts to delete security objects occur.


poam_number: POAM-00231
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214014: SQL Server must generate audit records when successful and unsuccessful logons or connection attempt

description:
  SQL Server must generate audit records when successful and unsuccessful logons or connection attempts occur.


poam_number: POAM-00232
description: SQL Server must generate audit records for all privileged activities or other system-level access.
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214015: SQL Server must generate audit records for all privileged activities or other system-level access.


poam_number: POAM-00233
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214016: SQL Server must generate audit records when unsuccessful attempts to execute privileged activities o

description:
  SQL Server must generate audit records when unsuccessful attempts to execute privileged activities or other system-level access occur.


poam_number: POAM-00234
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214017: SQL Server must generate audit records showing starting and ending time for user access to the datab

description:
  SQL Server must generate audit records showing starting and ending time for user access to the database(s).


poam_number: POAM-00235
weakness_source: CKL Import: tmpknnhe5ct.ckl
scope: Ship
discovery_date: 2026-01-14
due_date: 2026-04-14
created_at: 2026-01-14 17:57:41
updated_at: 2026-01-14 17:57:41
title:
  V-214018: SQL Server must generate audit records when concurrent logons/connections by the same user from diff

description:
  SQL Server must generate audit records when concurrent logons/connections by the same user from different workstations occur.


poam_number: POAM-00238
title: CSI Prep Deliverable: POC Designation
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-02-05
due_date: 2026-02-05
completion_date: 2026-03-19
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.168583
assignee: Inspection Lead
tags: csi-prep
description:
  FCC/OCA Action Officer will contact the scheduled command to obtain POC information.

  Timeline status: Complete.


poam_number: POAM-00239
title: CSI Prep Deliverable: Notification Email
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-02-25
due_date: 2026-02-25
completion_date: 2026-03-19
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.172266
assignee: Inspection Lead
tags: csi-prep
description:
  FCC/OCA Director or Deputy will transmit notification to include documents (RFI and the Preparation Timeline).

  Timeline status: Complete.


poam_number: POAM-00242
title: CSI Prep Deliverable: Foreign Travel Document (if req'd)
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-03-17
due_date: 2026-05-03
completion_date: 2026-03-19
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.183515
assignee: Inspection Lead
tags: csi-prep
description:
  FCC/OCA Action Officer provide document to CSI team members. APACS submission for Team members. (N/A if not applicable).

  Timeline status: Not Applicable.


poam_number: POAM-00243
title: CSI Prep Deliverable: Scoping Document Review (SAV)
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-03-17
due_date: 2026-05-03
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.186822
assignee: Inspection Lead
tags: csi-prep
description:
  Assigned Team Lead will review scoping artifacts and contact AO to schedule in-house scoping meeting.


poam_number: POAM-00246
title: CSI Prep Deliverable: Reserve In brief and Out brief Locations (SAV)
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-03-17
due_date: 2026-05-23
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.212465
assignee: Inspection Lead
tags: csi-prep
description:
  FCC/OCA Action Officer and scheduled site prepare and reserve locations for the in brief and out brief.


poam_number: POAM-00247
title: CSI Prep Deliverable: Final Logistics
weakness_source: CSI Preparation Deliverable
scope: Ship
discovery_date: 2026-03-17
due_date: 2026-05-23
created_at: 2026-03-17 17:33:06
updated_at: 2026-03-19T14:00:45.216452
assignee: Inspection Lead
tags: csi-prep
description:
  Visit Requests and additional logistics sent to site. OCA provides site reciprocity memo for NIPR/SIPR user accounts.


# scan_imports

source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:27.516343
imported_at: 2026-01-14 17:57:27
source_file:
  _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_AdobeAcrobatProDCContinuous_V2R1_20251023-140757.ckl


source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:40.371699
imported_at: 2026-01-14 17:57:40
source_file:
  _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_SQL2016DB_MONT-BE-002-BKUPEXEC64_BEDB_V3R3_20251023-143959.ckl


source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:40.470811
imported_at: 2026-01-14 17:57:40
source_file:
  _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_SQL2016DB_MONT-BE-002-BKUPEXEC64_master_V3R3_20251023-144120.ckl


source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:40.569961
imported_at: 2026-01-14 17:57:40
source_file:
  _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_SQL2016DB_MONT-BE-002-BKUPEXEC64_model_V3R3_20251023-144128.ckl


source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:40.663257
imported_at: 2026-01-14 17:57:40
source_file:
  _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_SQL2016DB_MONT-BE-002-BKUPEXEC64_msdb_V3R3_20251023-144148.ckl


source_tool: Evaluate-STIG
scan_date: 2026-01-14T12:57:40.769694
imported_at: 2026-01-14 17:57:40
source_file:
  _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_SQL2016DB_MONT-BE-002-BKUPEXEC64_tempdb_V3R3_20251023-144154.ckl


# findings

vuln_id: V-215807
rule_id: SV-215807r960735_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: B8F2A604E2162488415B37981572E5251E977016
  ~~~~~
  IP Http Server Settings:
  http\https servers are disabled, https requirements are not applicable
  no ip http server
  no ip http secure-server

  line vty 0 4
   transport input ssh session-limit 3


vuln_id: V-215808
rule_id: SV-215808r960777_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A678C60E1EAF17D7C51ED8282DC985211C33F443
  ~~~~~
  Archive
  log config
  logging enable
  logging size 1000
  notify syslog contenttype plaintext
  hidekeys


vuln_id: V-215812
rule_id: SV-215812r991874_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 7C34C4946A66BAD21BCD23A9B909B63F3502B98E
  ~~~~~
  line vty 0 4
  session-timeout 10 
  access-class vty_access in
  session-limit 3
  logging synchronous
  transport preferred ssh
  transport input ssh
  transport output ssh
  !

  ip access-list extended vty_access
  10 remark Allow access from other ships, NOCs or Afloat Support
  10 permit tcp 164.231.0.0 0.0.255.255 any eq 22 log
  20 deny   ip any any log
  !
  !
  !
  !
  !
  !
  !


vuln_id: V-215813
rule_id: SV-215813r960840_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: ABBAB8CC78DE7347B6202BF8F03B33B9A6291A0E
  ~~~~~
  login block-for 900 attempts 3 within 120


vuln_id: V-215814
rule_id: SV-215814r960843_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: B1893061C5DDD560F8FECD36FB3416E58526B729
  ~~~~~
  Configured login banner DOES NOT match Standard Mandatory DoD Notice and Consent Banner as identified in STIG.

  Configured login banner:
  ##### Military Sealift Command (MSC) #####
  ##### MSC Corporate Data Center(MCDC) #####
  --------------------------------------------------------------------------------------
  DOD WARNING BANNER
  --------------------------------------------------------------------------------------
  You are accessing a U.S. Government (USG) Information System (IS) that
  is provided for USG-authorized use only. By using this IS (which includes
  any device attached to this IS), you consent to the following conditions:
  -The USG routinely intercepts and monitors communications on this IS
  for purposes including, but not limited to, penetration testing, COMSEC
  monitoring, network operations and defense, personnel misconduct (PM),
  law enforcement (LE), and counterintelligence (CI) investigations.
  -At any time, the USG may inspect and seize data stored on this IS.
  -Communications using, or data stored on, this IS are not private, are
  subject to routine monitoring, interception, and search, and may be
  disclosed or used for any USG authorized purpose.
  -This IS includes security measures (e.g., authentication and access
  controls) to protect USG interests--not for your personal benefit or
  privacy.
  -Notwithstanding the above, using this IS does not constitute consent to
  PM, LE or CI investigative searching or monitoring of the content of
  privileged communications, or work product, related to personal
  representation or services by attorneys, psychotherapists, or clergy,
  and their assistants. Such communications and work product are private
  and confidential. See User Agreement for details.
  -------------------------------------------------------------------------
  DOD WARNING BANNER
  -------------------------------------------------------------------------


vuln_id: V-215815
rule_id: SV-215815r960864_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8FFBED927D401C4C59BC347DFFD3868F3306C61D
  ~~~~~
  hostname MONTPOINTGTWYRTR
  logging userinfo
  archive
  log config
  logging enable
  logging size 1000
  notify syslog contenttype plaintext
  hidekeys


vuln_id: V-215817
rule_id: SV-215817r960894_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DE0D02323230142232357AF55AE5B85E1C6CF819
  ~~~~~
  service timestamps log datetime msec localtime show-timezone year


vuln_id: V-215818
rule_id: SV-215818r960897_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 949FD62A829175C2132E70DF0486F90EB24C9A8A
  ~~~~~
  All 'deny' statements are configured to log.


vuln_id: V-215820
rule_id: SV-215820r960933_rule
status: Not_Applicable
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: BE9D336E6083AAD077B0C802971ECCA37B641B51
  ~~~~~
  Logging persistent not found, this requirement is not applicable


vuln_id: V-215822
rule_id: SV-215822r960960_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 27E2CCFBEAF21F0CF88252AA3BD21746F050EEB7
  ~~~~~
  File privilege configuration was not found
  File privilege 15 configuration is assumed
  Please verify settings on router


vuln_id: V-215823
rule_id: SV-215823r1043177_rule
status: Open
comments: SERVICE CALL-HOME FOUND
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: DD0C8EF05E5C236F6DE0AC78EFCA66F351187ECB
  ~~~~~
  boot network not found
  ip boot server not found
  ip bootp server not found
  ip dns server not found
  ip identd not found
  ip finger not found
  ip http server not found
  ip rcmd rcp-enable not found
  ip rcmd rsh-enable not found
  service config not found
  service finger not found
  service tcp-small-servers not found
  service udp-small-servers not found
  service pad not found
  SERVICE CALL-HOME FOUND


vuln_id: V-215824
rule_id: SV-215824r1051115_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: F317A8608580E65A7FD848FF078AE7B20D6F8440
  ~~~~~
  Accounts
  username emer-access privilege 0 secret 9 <pwd removed>
  Verify that a local account for last resort has been configured with a privilege level that will enable the administrator to troubleshoot connectivity to the authentication server.

  AAA Login Method:
  aaa authentication login default group ISE group AR21-Radius local


vuln_id: V-215826
rule_id: SV-215826r1015288_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C4104C43FF3450C0073B61738529B67004F83A5B
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   min-length 15


vuln_id: V-215827
rule_id: SV-215827r1015289_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6553FABD4B56D1A387B5DB3F6CF16C838667FAFF
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   upper-case 1


vuln_id: V-215828
rule_id: SV-215828r1015290_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6C8C9A04EE0049FF30F16D96F6497AEF4B48F61F
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   lower-case 1


vuln_id: V-215829
rule_id: SV-215829r1015291_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B33379AD6F2ED0966DBD92772AE64D65D2E60892
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   numeric-count 1


vuln_id: V-215830
rule_id: SV-215830r1015292_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3716573D24AFF025B7A4466C19199D89373DCDC6
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   special-case 1


vuln_id: V-215831
rule_id: SV-215831r1043189_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B24372278E11DB93CB56DA5D58F2C691579D30F4
  ~~~~~
  aaa common-criteria policy PASSWORD_POLICY
   char-changes 8


vuln_id: V-215832
rule_id: SV-215832r1015294_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6FFE5E388F143FAEAC142114D4F65C55EDC01323
  ~~~~~
  service password-encryption


vuln_id: V-215833
rule_id: SV-215833r961068_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: EC2FCBD8253B86CFC2922A92FE8E178EA3988544
  ~~~~~
  IP HTTP Timeout Settings
  no ip http server
  no ip http secure-server
  http\https servers are disabled, http\https requirements are not applicable

  line con 0
  privilege level 15
  logging synchronous
  login authentication USER_AUTH
  stopbits 1
  line con 0 exec-timeout is not configured. Default value of 10 is assumed
  Confirm value is correctly configured by checking against 'show running-config all' configuration file


  Line VTY Timeout Settings
  line vty 0 4
  session-timeout 10 
  access-class vty_access in
  session-limit 3
  logging synchronous
  transport preferred ssh
  transport input ssh
  transport output ssh
  !
   exec-timeout is not configured. Default value of 10 is assumed
   Confirm value is correctly configured by checking against 'show running-config all' configuration file


vuln_id: V-215836
rule_id: SV-215836r961392_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 5F8368BFC68F3878D80F5B9647E5D732EB331313
  ~~~~~
  'logging buffered' is not configured


vuln_id: V-215837
rule_id: SV-215837r991886_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AC8D3D82BA9C34A72D08AFC9E465F551B1580A74
  ~~~~~
  Trap logging: level informational, 815 message lines logged


vuln_id: V-215838
rule_id: SV-215838r1015295_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5CB0787E1E482D4AD90CB4D79FFA8280B5A635AC
  ~~~~~
  ntp server 164.231.98.1 key 20
  ntp server 164.231.69.13 key 80 prefer


vuln_id: V-215841
rule_id: SV-215841r1107207_rule
status: Not_Applicable
comments:
  MONTPOINTGTWYRTR#show snmp user
  %SNMP agent not enabled
  MONTPOINTGTWYRTR#

hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 1DB45E772E2D5C909D9677E4B1376C0A674A7D4B
  ~~~~~
  Requires information not provided by show tech or show running configuration file


vuln_id: V-215843
rule_id: SV-215843r1050862_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 746684BF0C80384E74956B54D242941B88392F07
  ~~~~~
  ntp allow mode control 0
  ntp authentication-key 80 md5 0021450F24771D4F387C521D5936042A32 7
  ntp authentication-key 20 md5 10401D090E120B051814212E3D 7
  ntp trusted-key 20
  ntp trusted-key 80
  ntp source BDI400
  ntp server 164.231.98.1 key 20
  ntp server 164.231.69.13 key 80 prefer


vuln_id: V-215844
rule_id: SV-215844r961554_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: FAA040DE8CA5849E5308201D0776B0A8AC84BA79
  ~~~~~
  SSH Server Algorithm is not configured per STIG check guidelines
  ip ssh source-interface BDI400
  ip ssh logging events
  ip ssh version 2
  ip ssh server algorithm mac hmac-sha1
  ip ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr


vuln_id: V-215845
rule_id: SV-215845r961557_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 93C96089FB06A0232EAFE70A05C0C894B0598049
  ~~~~~
  ip ssh server algorithm encryption aes256-ctr aes192-ctr aes128-ctr


vuln_id: V-215849
rule_id: SV-215849r961824_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A19CCFDDF163501A636769305EE4AE7BC1A36158
  ~~~~~
  login on-failure log
  login on-success log


vuln_id: V-215854
rule_id: SV-215854r961863_rule
status: NotAFinding
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  aaa new-model
  !
  !
  aaa group server radius AR21-Radius
   server name AR21-DC003
   server name AR21-DC004
   ip radius source-interface BDI400
   load-balance method least-outstanding
  !
  aaa group server tacacs+ ISE
   server-private 164.231.72.99 key 7 060B1C22424F1F0044
   server-private 164.231.111.4 key 7 060B1C22424F1F0044
   ip tacacs source-interface BDI400
  !
  aaa authentication login default group ISE group AR21-Radius local
  aaa authentication enable default group ISE group AR21-Radius enable
  aaa authorization config-commands
  aaa authorization exec default group ISE group AR21-Radius local if-authenticated 
  aaa authorization network ISE group AR21-Radius local if-authenticated 
  aaa accounting exec default start-stop group ISE group AR21-Radius
  !
  aaa common-criteria policy PASSWORD_POLICY
   min-length 15
   max-length 127
   numeric-count 1
   upper-case 1
   lower-case 1
   special-case 1
   char-changes 8
  !
  !
  !
  !
  !
  !
  aaa session-id common
  call-home
   ! If contact email address in call-home is configured as sch-smart-licensing@cisco.com
   ! the email address configured in Cisco Smart License Portal will be used as contact email address to send SCH notifications.
   contact-email-addr sch-smart-licensing@cisco.com
   profile "CiscoTAC-1"
    active
    destination transport-method http
    no destination transport-method email
  no ip source-route
  !
  !
  !
  !
  !
  !
  !
  no ip domain lookup
  ip domain name MONTPOINTGTWRTR.navy.mil
  !
  !
  !
  login block-for 900 attempts 3 within 120
  login on-failure log
  login on-success log
  ipv6 hop-limit 32

comments:
  radius server AR21-DC003
   address ipv4 164.231.187.34 auth-port 1812 acct-port 1813
   retransmit 0
   key 7 15222B59513D24362C7205024652010C135218
  !
  radius server AR21-DC004
   address ipv4 164.231.187.35 auth-port 1812 acct-port 1813
   retransmit 0
   key 7 046B2B535A36435C0D583537475E1B0B382F65


vuln_id: V-215855
rule_id: SV-215855r1069501_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 887A831BD26D733D8E7BF0EFA917C4970FFE1B26
  ~~~~~
  Cisco router is not configured to conduct backups of the configuration when changes occur


vuln_id: V-215856
rule_id: SV-215856r991889_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 173712CE30761257E28758267267A6B72D8F12F1
  ~~~~~
  crypto pki trustpoint TP-self-signed-1964743403 is not configured for url enrollment
  crypto pki trustpoint TP-self-signed-1964743403 enrollment selfsigned
  crypto pki trustpoint SLA-TrustPoint is not configured for url enrollment
  crypto pki trustpoint SLA-TrustPoint enrollment pkcs12
  crypto pki trustpoint TP-self-signed-941045115 is not configured for url enrollment
  crypto pki trustpoint TP-self-signed-941045115 enrollment selfsigned


vuln_id: V-220139
rule_id: SV-220139r961863_rule
status: Open
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) found this to be OPEN on 10/23/2025
  ResultHash: CA349E0F1566CFDFB09D8F996B3AD3B036574454
  ~~~~~
  The router is not configured to send log data to the syslog server, this is a finding.


vuln_id: V-220140
rule_id: SV-220140r961863_rule
status: Open
comments: CiscoOSVer : 16.12.4
hostname: MONTPOINTGTWYRTR
host_ip: 10.10.10.1
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-CiscoXERouterNDM_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: F616F024AD309ED67328DF3127A0A41B41DA2441
  ~~~~~
  Check with vendor for support status of the device
  Device Info:
  Hostname      : MONTPOINTGTWYRTR
  DomainName    : 
  MACAddress    : 
  DeviceInfo    : {Cisco IOS Software [Gibraltar], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.12.4, 
                  RELEASE SOFTWARE (fc5)}
  CiscoOS       : IOS-XE
  CiscoOSVer    : 16.12.4
  CiscoSoftware : ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M)
  SerialNumber  : FLM2122V0D9
  Model         : ISR4351/K9
  DeviceType    : Router


vuln_id: V-213168
rule_id: SV-213168r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 026A7712392177E522A06BA0BAE45493CC2E4EF5
  ~~~~~
  'Enable Enhanced Security Standalone' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bEnhancedSecurityStandalone
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213169
rule_id: SV-213169r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0E65388627213752CFE0EE642175597DDB0ABB12
  ~~~~~
  'Enable Enhanced Security In Browser' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bEnhancedSecurityInBrowser
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213170
rule_id: SV-213170r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F56BA44B4F03A7705BDC04245F1970912B529F40
  ~~~~~
  'Enable Protected Mode at startup' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bProtectedMode
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213171
rule_id: SV-213171r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9C834D0F57BEA07235F5FD2EA669F35F0DFE5DE9
  ~~~~~
  'Protected View: All files' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	iProtectedView
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-213172
rule_id: SV-213172r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 932AE2BE1F475877B8951F72A07E56BB4603F1CB
  ~~~~~
  'Access to websites: Block PDF files access to all web sites' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms
  Value Name:	iURLPerms
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213173
rule_id: SV-213173r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B2DD2F1F5DAC28D6AFCC9352F293636944DE3891
  ~~~~~
  'Access to unknown websites: Block access' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cDefaultLaunchURLPerms
  Value Name:	iUnknownURLPerms
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-213174
rule_id: SV-213174r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D01E4CAC41C0A6D973296E957E479B08E93172AF
  ~~~~~
  'Allow opening of non-PDF file attachments with external applications' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	iFileAttachmentPerms
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213175
rule_id: SV-213175r395811_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9A5846A993365728C937DB0A533035091798AA6B
  ~~~~~
  'Enable Flash' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bEnableFlash
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213176
rule_id: SV-213176r395850_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5C2FF8E09938E6E4A08C6F8A9261E3EEF28AC7F8
  ~~~~~
  'Disable PDF handler switching' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bDisablePDFHandlerSwitching
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213177
rule_id: SV-213177r766574_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 127AA277BF9D723F6B60435EAC91B90F4B7E0812
  ~~~~~
  'Send and Track plugin' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cCloud
  Value Name:	bAdobeSendPluginToggle
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213178
rule_id: SV-213178r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 77B9CB076F85356B6622BD5D925A259B76DFC001
  ~~~~~
  'Service access to Document Cloud Services' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices
  Value Name:	bToggleAdobeDocumentServices
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213179
rule_id: SV-213179r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 248D55C7A60D311F7472FCB52DD285B28BE3101F
  ~~~~~
  'Cloud Synchronization' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices
  Value Name:	bTogglePrefsSync
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213180
rule_id: SV-213180r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 653AD3C603E98AB1BE408F4263230BB50EC2BD44
  ~~~~~

  Registry Path:	HKLM:\SOFTWARE\Adobe\Acrobat Reader\DC\Installer
  Value Name:	DisableMaintenance
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Wow6432Node\Adobe\Acrobat Reader\DC\Installer
  Value Name:	DisableMaintenance
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213181
rule_id: SV-213181r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 76884A3735685CEC045A7F1BC1BC4624CC703837
  ~~~~~
  'Third-party web connectors' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices
  Value Name:	bToggleWebConnectors
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213182
rule_id: SV-213182r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 15A8326D2952B15D0A83A3A77053F1C1E8C4C247
  ~~~~~
  'Acrobat Upsell' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bAcroSuppressUpsell
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213183
rule_id: SV-213183r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7E7B6ED950ECF262158F4D4B0DDD9B519A96D886
  ~~~~~
  'Adobe Send for Signature' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices
  Value Name:	bToggleAdobeSign
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213184
rule_id: SV-213184r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AF7F7A38D7D1497D7216AA3B8E073EA76F8612E9
  ~~~~~
  'WebMail' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWebmailProfiles
  Value Name:	bDisableWebmail
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213185
rule_id: SV-213185r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 778FDCE630C51576C1AB38A6A6B02EA8336A1C4D
  ~~~~~
  'SharePoint and Office 365 access' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cSharePoint
  Value Name:	bDisableSharePointFeatures
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213186
rule_id: SV-213186r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4174954B062122A1A5ED151003CFF2AA2DAD1CA2
  ~~~~~
  'Welcome Screen' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cWelcomeScreen
  Value Name:	bShowWelcomeScreen
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213187
rule_id: SV-213187r395853_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A9D4813611240CFC67F58C86656CB3FCAF8BD5F9
  ~~~~~
  'Service Upgrades' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices
  Value Name:	bUpdater
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213188
rule_id: SV-213188r400006_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 15246B494416F0B34AC1736A02EC403E6597CEB0
  ~~~~~
  'Privileged folder locations' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bDisableTrustedFolders
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213189
rule_id: SV-213189r400006_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B2799CCFC1C83AD01D852D3BD26C39C9D28EE1C1
  ~~~~~
  'Privileged host locations' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown
  Value Name:	bDisableTrustedSites
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-213190
rule_id: SV-213190r400378_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E839D7AAC582DE5CBE62156A6875B34511E7E917
  ~~~~~
  'Load trusted certificates from an Adobe EUTL server' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\Security\cDigSig\cEUTLDownload
  Value Name:	bLoadSettingsFromURL
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213191
rule_id: SV-213191r400378_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 5A32004519F673542B903436368A624D4E149DFD
  ~~~~~
  'Load trusted certificates from an Adobe AATL server' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\Security\cDigSig\cAdobeDownload
  Value Name:	bLoadSettingsFromURL
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-213192
rule_id: SV-213192r400525_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 52C747ED8AD535C8D5B3C3BFCE49764504D0FE1D
  ~~~~~
  Name:			Adobe Reader DC
  Version:			DC
  Track:			Continuous
  DisplayVersion:	25.001.20756
  Architecture:		x86


vuln_id: V-213193
rule_id: SV-213193r400876_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-AdobeReaderDCContinuous_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 0953BC0DDDE64D9D7383C59DA5A8B777988C2D35
  ~~~~~
  'Enable FIPS' is NOT Enabled

  Registry Path:	HKCU:\SOFTWARE\Adobe\Acrobat Reader\DC\AVGeneral
  Value Name:	bFIPSMode (Not found)


vuln_id: V-221558
rule_id: SV-221558r960804_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B6AA552093C875CFBF6E0F8C4BAA73C928D1447E
  ~~~~~
  'Enable firewall traversal from remote access host' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	RemoteAccessHostFirewallTraversal
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221559
rule_id: SV-221559r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A13562B6341A89B3C907EB231590C9B48A11B3D1
  ~~~~~
  'Default geolocation setting' is Enabled: (Do not allow any site to track the users' physical location)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultGeolocationSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-221561
rule_id: SV-221561r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7CA6D59CDB675C21DAED1DE671FBBE58300ECDC8
  ~~~~~
  'Default popups setting' is Enabled: (Do not allow any site to show popups)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultPopupsSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-221562
rule_id: SV-221562r960879_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8F9ED6BB4A138CBF0E8EEEAFF95ACDE3476CCA81
  ~~~~~
  'Configure extension installation blocklist' is Enabled: (*)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist
  Value Name:	1
  Value:		*
  Type:		REG_SZ


vuln_id: V-221563
rule_id: SV-221563r1015468_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 223250B6A902F24CD16C85C922E3E72BD539D148
  ~~~~~
  'Configure extension installation allowlist' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallAllowlist
  Value Name:	1
  Value:		oiigbmnaadbkfbmpbfijlflahbdbdgdf
  Type:		REG_SZ


vuln_id: V-221564
rule_id: SV-221564r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BA250C98703E598AD8EE6E27C5EB161E00EC8F8D
  ~~~~~
  'Default search provider name' is Configured

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultSearchProviderName
  Value:		Google Encrypted
  Type:		REG_SZ


vuln_id: V-221565
rule_id: SV-221565r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4E2A308B8138082CBCDE899BDC5B493E0085A6E2
  ~~~~~
  'Default search provider search URL' is Configured

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultSearchProviderSearchURL
  Value:		https://www.google.com/search?q={searchTerms}
  Type:		REG_SZ


vuln_id: V-221566
rule_id: SV-221566r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2449380066A51563EDEB3E5E4AC33CFAC8D13C1C
  ~~~~~
  'Enable the default search provider' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultSearchProviderEnabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221567
rule_id: SV-221567r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DB7006051F07865D414129854D8C342B284EDD73
  ~~~~~
  'Enable Saving Passwords to the Password Manager' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	PasswordManagerEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221570
rule_id: SV-221570r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FDA40B1CAE77587F47001714CF227FBABCE9246D
  ~~~~~
  'Continue running background apps when Google Chrome is closed' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	BackgroundModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221571
rule_id: SV-221571r987620_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B44660AB12170102BE7D91FAF7781C708BE9E912
  ~~~~~
  'Disable synchronization of data with Google' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	SyncDisabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221572
rule_id: SV-221572r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DAEDE8A412B63ACCA5E9A968BCDCD657B7551F62
  ~~~~~
  'Block access to a list of URLs' is Configured

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome\URLBlocklist
  Value Name:	1
  Value:		javascript://*
  Type:		REG_SZ


vuln_id: V-221573
rule_id: SV-221573r987620_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C3EBC76D9B66FB2901C25ED5B2A7015EE5C81D5A
  ~~~~~
  'Enable Google Cloud Print proxy' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	CloudPrintProxyEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221574
rule_id: SV-221574r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F28F59977E21D5CF2487D033A4005934219BD961
  ~~~~~
  'Enable network prediction' is Enabled: (Do not predict network actions on any network connection)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	NetworkPredictionOptions
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-221575
rule_id: SV-221575r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CA8ED4F4BC7846F4B4393D87D36C6FC87C5AC643
  ~~~~~
  'Enable reporting of usage and crash-related data' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	MetricsReportingEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221576
rule_id: SV-221576r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 657FEE086E88958B6B8E7A2E631868C52C430528
  ~~~~~
  'Enable search suggestions' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	SearchSuggestEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221577
rule_id: SV-221577r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FA7D560398330109D81C9DE554DB404B884DF336
  ~~~~~
  'Import saved passwords from default browser on first run' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	ImportSavedPasswords
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221578
rule_id: SV-221578r960864_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0BB5E7ABF3A7506ADDB8445128BFD55CF3075767
  ~~~~~
  'Incognito mode availability' is Enabled: (Incognito mode disabled)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	IncognitoModeAvailability
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221579
rule_id: SV-221579r961893_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 80955251D21E00CC304F8D07DB6DF8B784D3F20C
  ~~~~~
  'Enable online OCSP/CRL checks' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	EnableOnlineRevocationChecks
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221580
rule_id: SV-221580r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F8F90D651C3087C04215624DDEB48B3A3017E088
  ~~~~~
  'Safe Browsing Protection Level' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	SafeBrowsingProtectionLevel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221581
rule_id: SV-221581r961128_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A12DDD36DFD9595CB9B098FAF78EBD8FB4889289
  ~~~~~
  'Disable saving browser history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	SavingBrowserHistoryDisabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221584
rule_id: SV-221584r961683_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 879C99FEDB6AA3653CE96F2F1DDB0A1CDE798DB6
  ~~~~~
  Google Chrome version information:

  Google Chrome (141.0.7390.77)


vuln_id: V-221586
rule_id: SV-221586r960879_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7D247F79301C508404D9A276934D69D890FDF24A
  ~~~~~
  'Enable deleting browser and download history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	AllowDeletingBrowserHistory
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221587
rule_id: SV-221587r960879_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 11A1A1E7ACB156F3C185EFA0DA6164974414AF23
  ~~~~~
  'Ask where to save each file before downloading' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	PromptForDownloadLocation
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221588
rule_id: SV-221588r1106670_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D6B549671195402555D023531B61C0FED4438686
  ~~~~~
  'Allow download restrictions' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DownloadRestrictions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-221590
rule_id: SV-221590r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 520ACF5572EACC0C1C519DD617C9528917939DA8
  ~~~~~
  'Enable Safe Browsing Extended Reporting' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	SafeBrowsingExtendedReportingEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221591
rule_id: SV-221591r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 409ADAACCEB33AFEE85CA2DD4450350EE9CF57C0
  ~~~~~
  'Control use of the WebUSB API' is Enabled: (2)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultWebUsbGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-221594
rule_id: SV-221594r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6BE230CB23EDC8BFED0FB02B9A889DA93F00CEC1
  ~~~~~
  'Enable Google Cast' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	EnableMediaRouter
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221595
rule_id: SV-221595r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9BF76005607848898EEBB1940B14D6A20D2BDC4D
  ~~~~~
  'Allow media autoplay' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	AutoplayAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221596
rule_id: SV-221596r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AAD1ABC02C91EED66628615D9BAF76514E0BC7FE
  ~~~~~
  Registry key for HKLM:SOFTWARE\Policies\Google\Chrome\AutoplayAllowlist exists.

  Current values:

  1 : [*.]mil
  2 : [*.]gov


vuln_id: V-221597
rule_id: SV-221597r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A9D99B15A6AD5BCA7D481C7ED16340FA67E490F2
  ~~~~~
  'Enable URL-keyed anonymized data collection' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	UrlKeyedAnonymizedDataCollectionEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221598
rule_id: SV-221598r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2D439B2C63C7192C93A0FE653C80534DF7EB6D19
  ~~~~~
  'Allow collection of WebRTC event logs from Google services' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	WebRtcEventLogCollectionAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-221599
rule_id: SV-221599r961167_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BF276DF9BBE92D2FF0B322B8EFE8A73249B8EB7D
  ~~~~~
  'Control where Developer Tools can be used' is Enabled: (Disallow usage of the Developer Tools)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DeveloperToolsAvailability
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-226401
rule_id: SV-226401r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9F9920DF01122CE48F038C86CC0E5E2427F05ED7
  ~~~~~
  'Enable guest mode in browser' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	BrowserGuestModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-226402
rule_id: SV-226402r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D992FAF5853E55631FCF2738755CA01F9B5B2D1B
  ~~~~~
  'Enable AutoFill for credit cards' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	AutofillCreditCardEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-226403
rule_id: SV-226403r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CF6C56E9F0E05F11B548FC9151923E42E451E7EC
  ~~~~~
  'Enable AutoFill for addresses' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	AutofillAddressEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-226404
rule_id: SV-226404r961083_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D74F6E90D1303296730DB38466F50AADAD122095
  ~~~~~
  'Import autofill form data from default browser on first run' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	ImportAutofillFormData
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-241787
rule_id: SV-241787r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 878C9C503CF30370A0F99099040EFE4365DF4170
  ~~~~~
  'Control use of the Web Bluetooth API' is Enabled (Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultWebBluetoothGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-245538
rule_id: SV-245538r961470_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3388A79B1F7719EC09A512653AF6198C72276AFF
  ~~~~~
  'Allow QUIC protocol' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	QuicAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-245539
rule_id: SV-245539r960864_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: B42979BE5A28F62E82EA83D59BC26834CCCB8E3B
  ~~~~~
  'Default cookies setting' is NOT Enabled: (Keep cookies for the duration of the session)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DefaultCookiesSetting (Not found)


vuln_id: V-275780
rule_id: SV-275780r1106603_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 030095F2C704F9953395356EDF1505802B21545B
  ~~~~~
  'Generative AI' is NOT Enabled: (Do not allow Create Themes)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	CreateThemesSettings (Not found)


vuln_id: V-275781
rule_id: SV-275781r1106671_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 0315F4406C97D117822450C5FD984BFED7773393
  ~~~~~
  'Settings for DevTools Generative AI Features' is NOT Enabled: (Do not allow DevTools Generative AI Features)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	DevToolsGenAiSettings (Not found)


vuln_id: V-275782
rule_id: SV-275782r1106672_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: AB0429249D5824A95A4B689E7D91D5A20E45FB61
  ~~~~~
  'Settings for GenAI local foundational model' is NOT Enabled: (Do not download model)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	GenAILocalFoundationalModelSettings (Not found)


vuln_id: V-275783
rule_id: SV-275783r1106612_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 6FBF401494667F427807D389332943ACAEC62015
  ~~~~~
  'Settings forSettings for Help Me Write' is NOT Enabled: (Do not allow Help Me Write)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	HelpMeWriteSettings (Not found)


vuln_id: V-275784
rule_id: SV-275784r1106615_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 82159A5C7B7BBE8553740194834F08EFBC052DBF
  ~~~~~
  'Settings for AI-powered History Search' is NOT Enabled: (Do not allow AI History Search)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	HistorySearchSettings (Not found)


vuln_id: V-275785
rule_id: SV-275785r1106673_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 622EB36F17F9B80BD6A6F35FE7118CC514DB5D40
  ~~~~~
  'Tab Compare settings' is NOT Enabled: (Do not allow Tab Compare)

  Registry Path:	HKLM:\SOFTWARE\Policies\Google\Chrome
  Value Name:	TabCompareSettings (Not found)


vuln_id: V-225223
rule_id: SV-225223r961038_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 540AD243F46DB5DD820AEE05A8F5EADCA3474F69
  ~~~~~
  HKLM:\SOFTWARE\Microsoft\StrongName\Verification does not exist


vuln_id: V-225224
rule_id: SV-225224r961038_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 76CBF5A7C87686EA51FA77410808A92FDB3A947F
  ~~~~~
  All user profiles have State configured to 0x00023c00


vuln_id: V-225225
rule_id: SV-225225r961038_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 0E4360D1A69538A55E456743C4260C8FCE83E079
  ~~~~~
  Installed .NET version is '4.8'.  This check only applies to .NET version 4.0 specifically so this requirement is NA.


vuln_id: V-225228
rule_id: SV-225228r1043178_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 5484AA1F334AF98C429F840221EEC8B7ADB0A2EE
  ~~~~~
  No machine.config or *.exe.config files found using .NET remoting with HTTP channel so this requirement is NA.


vuln_id: V-225229
rule_id: SV-225229r1107247_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 00EA9E6B0DC0142D579F8CB7A365BAEB5242CE24
  ~~~~~
  Operating system:
  ---------------------------------
  Name:	Microsoft Windows 10 Enterprise LTSC [21H2]
  Version:	10.0.19044

  Enabled .NET Windows features:
  ---------------------------------
  NetFx3
  NetFx4-AdvSrvs

  Library files:
  ---------------------------------
  File Path:			C:\windows\Microsoft.NET\Framework\v2.0.50727\mscorlib.dll
  Version:			2.0.50727.9179
  Support Ends:		01/09/2029

  File Path:			C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorlib.dll
  Version:			4.8.4790.0

  File Path:			C:\windows\Microsoft.NET\Framework64\v2.0.50727\mscorlib.dll
  Version:			2.0.50727.9179
  Support Ends:		01/09/2029

  File Path:			C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorlib.dll
  Version:			4.8.4790.0

  Ref - https://learn.microsoft.com/en-us/lifecycle/products/microsoft-net-framework

  Ref - https://support.microsoft.com/en-us/topic/clarification-on-the-support-life-cycle-for-the-net-framework-3-5-the-net-framework-3-0-and-the-net-framework-2-0-28621c7b-226c-7682-27f5-2e2a42db39c3


vuln_id: V-225230
rule_id: SV-225230r961908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 665ECD2BE03F9086D5C3B003C3B3238D2C474D25
  ~~~~~
  No machine.config or *.exe.config files found with 'enforceFIPSPolicy enabled=false'.


vuln_id: V-225231
rule_id: SV-225231r961038_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E28F7B07BF034968DDD074235F2D4C0EFC0E8F76
  ~~~~~
  Registry Path:	HKLM:\SOFTWARE\Microsoft\.NETFramework
  Value Name:	AllowStrongNameBypass
  Value:		0x00000000 (0)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework
  Value Name:	AllowStrongNameBypass
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-225233
rule_id: SV-225233r961608_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6CC95A95DACFD9A95160D8D82AE7400D383C1A8D
  ~~~~~
  No *.exe.config files found with 'loadFromRemoteSources enabled=true'.


vuln_id: V-225234
rule_id: SV-225234r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D494EFC0B5BFFA0F47A4414E95B31461DB797F2D
  ~~~~~
  No machine.config or *.exe.config files found with 'defaultProxy enabled=false' or with 'bypasslist', 'module', or 'proxy' elements.


vuln_id: V-225235
rule_id: SV-225235r960891_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 337EA4CB8826346C79B61FFD2C48107B8F2246C3
  ~~~~~
  No machine.config or *.exe.config files found with 'etwEnable enabled=false'.


vuln_id: V-225236
rule_id: SV-225236r1069477_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4E9D9F9778F6BF1402126A5E6E14400D9AF77B9C
  ~~~~~
  No applications found requiring .NET 4.0 specifically.


vuln_id: V-225237
rule_id: SV-225237r1043178_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 499D611575281956E8E80B6EFACA64CD0F81EBAD
  ~~~~~
  No machine.config or *.exe.config files found using .NET remoting with TCP channel so this requirement is NA.


vuln_id: V-225238
rule_id: SV-225238r1069480_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-NETFramework4_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 23C37571322EA7216F197978D4B3FF97743E9C71
  ~~~~~
  .NET Framework 4 version is 4.6 or later.

  Registry Path:	HKLM:\SOFTWARE\Microsoft\.NETFramework\v4.0.30319
  Value Name:	SystemDefaultTlsVersions
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework\v4.0.30319
  Value Name:	SystemDefaultTlsVersions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-251545
rule_id: SV-251545r961683_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: CDA64C53C50F058D63F08C3F6AD2DAD12183D817
  ~~~~~
  Apps and Features entries for Firefox:

  Name:	Mozilla Firefox ESR (x64 en-US)
  Version:	140.4.0
  Path:		C:\Program Files\Mozilla Firefox


vuln_id: V-251546
rule_id: SV-251546r961869_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4A1B334B1277709B8C673DCF44E7FB095B1934FF
  ~~~~~
  'Minimum SSL version enabled' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	SSLVersionMin
  Value:	tls1.2
  Type:	REG_SZ


vuln_id: V-251547
rule_id: SV-251547r1067550_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 91E48F7518473AE7664AF990CFB3CC78C5C05C36
  ~~~~~
  'Preferences' is Enabled:
  security.default_personal_cert
  Value:	Ask Every Time
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251548
rule_id: SV-251548r1067552_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 06810F281F578C0914F4654F9C6124808F7ACCD2
  ~~~~~
  'Preferences' is Enabled:
  browser.search.update
  Value:	False
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251549
rule_id: SV-251549r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F793F59E04C568231872AC49A83EE930422DFE9D
  ~~~~~
  'Extension Update' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	ExtensionUpdate
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251550
rule_id: SV-251550r961194_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: FDD7EC120C3A7E53B1B2F0B1FE803C005523274E
  ~~~~~
  None of the extensions in question are configured.


vuln_id: V-251551
rule_id: SV-251551r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9179F895F1390903A0B414F114CDB25AC3EE064D
  ~~~~~
  'Disable Form History' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableFormHistory
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251552
rule_id: SV-251552r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F9A42EA4C5CB40341BAB7120CDF0CA084C1B947E
  ~~~~~
  'Password Manager' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	PasswordManagerEnabled
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251553
rule_id: SV-251553r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025
  ResultHash: D7E7F097AAE9B8E85E5D5E6C0ED9A8811FB0F349
  ~~~~~
  'Block pop-ups from websites' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking
  Name:	Default
  Value:	0x00000001 (1)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Do not allow preferences to be changed' is NOT Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\PopupBlocking
  Name:	Locked (Not found)
  -----------------------------------------------------------------------


vuln_id: V-251554
rule_id: SV-251554r1067554_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 89EC26540C357A3AA17CB6ACC509E10D4B721BD0
  ~~~~~
  'Preferences' is Enabled:
  dom.disable_window_move_resize
  Value:	True
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251555
rule_id: SV-251555r1067556_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3F867D7F319A1124DB9134388A49E4C3A4649CB0
  ~~~~~
  'Preferences' is Enabled:
  dom.disable_window_flip
  Value:	True
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251557
rule_id: SV-251557r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0E7B81B53942ED296D25D3B0AD56B1D1F43C8811
  ~~~~~
  'Allow add-on installs from websites' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\InstallAddonsPermission
  Name:	Default
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251558
rule_id: SV-251558r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 040661501711A5ABA042F5832E27758977494917
  ~~~~~
  'Disable Telemetry' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableTelemetry
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251559
rule_id: SV-251559r961167_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 90A6EC33E50882CBA3EBE554E7AF5D63390EBB52
  ~~~~~
  'Disable Developer Tools' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableDeveloperTools
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251560
rule_id: SV-251560r1067559_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BE8572CFA995924E1F43FC99182513BCB56D8FFB
  ~~~~~
  'Import Enterprise Roots' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Certificates
  Name:	ImportEnterpriseRoots
  Value:	0x00000001 (1)
  Type:	REG_DWORD


  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D73CA91102A2204A36459ED32213B467D7CE97FB
  NotAfter:		12/30/2029
  Installed:		True

  Subject:		CN=DoD Root CA 4, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	B8269F25DBD937ECAFD4C35A9838571723F2D026
  NotAfter:		7/25/2032
  Installed:		True

  Subject:		CN=DoD Root CA 5, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	4ECB5CC3095670454DA1CBD410FC921F46B8564B
  NotAfter:		6/14/2041
  Installed:		True


vuln_id: V-251562
rule_id: SV-251562r987660_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 362C8D39CEA54636B54EDE44E85265E0760AD62A
  ~~~~~
  'Disable Forget Button' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableForgetButton
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251563
rule_id: SV-251563r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1716A2B8F32DBBBA955F230BA2A4829116E25B14
  ~~~~~
  'Disable Private Browsing' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisablePrivateBrowsing
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251564
rule_id: SV-251564r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 13D30FE8309FAA7BBED4E36BCE909B0DCB8BE86C
  ~~~~~
  'Search Suggestions' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	SearchSuggestEnabled
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251565
rule_id: SV-251565r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 803B3356D8C8FF4D18EC5D51E46DA611EEB61D98
  ~~~~~
  'Default autoplay level' is Enabled (Block Audio and Video)

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\Permissions\Autoplay
  Name:	Default
  Value:	block-audio-video
  Type:	REG_SZ


vuln_id: V-251566
rule_id: SV-251566r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D59796A40697A95F2ADCC5402D17E6589778EDDB
  ~~~~~
  'Network Prediction' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	NetworkPrediction
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251567
rule_id: SV-251567r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 93DB1E534853D5D927863B155FF677CECE479B35
  ~~~~~
  'Fingerprinting' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection
  Name:	Fingerprinting
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251568
rule_id: SV-251568r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 225125C6F1FEBB34D2851E8BC02C623024A0126E
  ~~~~~
  'Cryptomining' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EnableTrackingProtection
  Name:	Cryptomining
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251569
rule_id: SV-251569r1067561_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E725D06C78C0EF30FA1C1A483545DBA08A2F0662
  ~~~~~
  'Preferences' is Enabled:
  browser.contentblocking.category
  Value:	strict
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251570
rule_id: SV-251570r1067563_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1DCCA6C1D0AE1733EB9810DD029EFF95B0DE50A2
  ~~~~~
  'Preferences' is Enabled:
  extensions.htmlaboutaddons.recommendations.enabled
  Value:	False
  Status:	locked

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	Preferences
  Value:	{ "security.default_personal_cert": { "Value": "Ask Every Time", "Status": "locked" }, "browser.search.update": { "Value": false, "Status": "locked" }, "dom.disable_window_move_resize": { "Value": true, "Status": "locked" }, "dom.disable_window_flip": { "Value": true, "Status": "locked" }, "dom.event.contextmenu.enabled": { "Value": false, "Status": "locked" }, "browser.contentblocking.category": { "Value": "strict", "Status": "locked" }, "extensions.htmlaboutaddons.recommendations.enabled": { "Value": false, "Status": "locked" } }
  Type:	REG_MULTI_SZ


vuln_id: V-251571
rule_id: SV-251571r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9BF6140C9B6012DC4D44B55CC5D053D3A4051398
  ~~~~~
  'TLS_RSA_WITH_3DES_EDE_CBC_SHA' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DisabledCiphers
  Name:	TLS_RSA_WITH_3DES_EDE_CBC_SHA
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251572
rule_id: SV-251572r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 76273C4D51602AE797EC8B4A2DF97E184CB1427E
  ~~~~~
  'Extension Recommendations' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\UserMessaging
  Name:	ExtensionRecommendations
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251573
rule_id: SV-251573r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C2520890E51B5EE390110B46F587A12434228705
  ~~~~~
  'Search' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	Search
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Top Sites' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	TopSites
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Sponsored Top Sites' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	SponsoredTopSites
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Recommended by Pocket' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	Pocket
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Sponsored Pocket Stories' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	SponsoredPocket
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Download History' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	Highlights
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Snippets' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	Snippets
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Do not allow settings to be changed' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\FirefoxHome
  Name:	Locked
  Value:	0x00000001 (1)
  Type:	REG_DWORD
  -----------------------------------------------------------------------


vuln_id: V-251577
rule_id: SV-251577r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 340547C1C678AC6710D184B1448748B07BCEDF21
  ~~~~~
  'Enabled' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\DNSOverHTTPS
  Name:	Enabled
  Value:	0x00000000 (0)
  Type:	REG_DWORD


vuln_id: V-251578
rule_id: SV-251578r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5BB461DD1BD4963F84A49B3194351D6DFB17D1A0
  ~~~~~
  'Disable Firefox Accounts' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableFirefoxAccounts
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251580
rule_id: SV-251580r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 215D1DC57D9C41DF4EB1AA3912BE2F3D24563D21
  ~~~~~
  'Disable Feedback Commands' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableFeedbackCommands
  Value:	0x00000001 (1)
  Type:	REG_DWORD


vuln_id: V-251581
rule_id: SV-251581r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8A86C7701AAF7AFC10C4A0569A54F6C385B6ACBC
  ~~~~~
  'Enable Encrypted Media Extensions' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions
  Name:	Enabled
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Lock Encrypted Media Extensions' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\EncryptedMediaExtensions
  Name:	Locked
  Value:	0x00000001 (1)
  Type:	REG_DWORD
  -----------------------------------------------------------------------


vuln_id: V-252881
rule_id: SV-252881r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1E64720123BFAF6BC93D8E8F268B629CD52A80CF
  ~~~~~
  'Active Logins' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	Sessions
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Browsing History' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	History
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Cache' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	Cache
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Cookies' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	Cookies
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Download History' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	Downloads
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Form & Search History' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	FormData
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Locked' is Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	Locked
  Value:	0x00000001 (1)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Offline Website Data' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	OfflineApps
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------
  'Site Preferences' is Disabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox\SanitizeOnShutdown
  Name:	SiteSettings
  Value:	0x00000000 (0)
  Type:	REG_DWORD
  -----------------------------------------------------------------------


vuln_id: V-252908
rule_id: SV-252908r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 8A867327746B7399E6826DEF306A3880003E8980
  ~~~~~
  'Disable Pocket' is NOT Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisablePocket (Not found)


vuln_id: V-252909
rule_id: SV-252909r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MozillaFirefox_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 0F84BAE3896E8F989A72D47B4804030157ACD493
  ~~~~~
  'Disable Firefox Studies' is NOT Enabled

  Path:		HKLM:\SOFTWARE\Policies\Mozilla\Firefox
  Name:	DisableFirefoxStudies (Not found)


vuln_id: V-235719
rule_id: SV-235719r1007484_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 24B67EDB262AB5EB02CDB85FCAB97E8D39DB7EBD
  ~~~~~
  'ProxySettings' is Configured properly

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ProxySettings
  Value:		{"ProxyMode": "direct"}
  Type:		REG_SZ


vuln_id: V-235720
rule_id: SV-235720r960852_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C33E388254DDCB5B7A5AA275DCEC3789FA6C6D8C
  ~~~~~
  'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PreventSmartScreenPromptOverride
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235721
rule_id: SV-235721r960852_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 00754A8B44AD87CBB6D5FBC53E664288E16117B4
  ~~~~~
  'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PreventSmartScreenPromptOverrideForFiles
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235722
rule_id: SV-235722r960852_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: EB5A0A0DAE1A60492E5AE5BFF4A4B83F57C94096
  ~~~~~
  'Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings' is Configured

  Allowed domains:
  ===========================
  	msc.navy.mil
  	navy.mil


vuln_id: V-235723
rule_id: SV-235723r960864_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6A26062584CE53C883FDC08AC7C990D375CD472F
  ~~~~~
  'Configure InPrivate mode availability' is Enabled with 'InPrivate mode disabled'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	InPrivateModeAvailability
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235724
rule_id: SV-235724r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A95AA40B6F30C779A0CE892F14BD0215ED60B0AA
  ~~~~~
  'Continue running background apps after Microsoft Edge closes' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BackgroundModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235725
rule_id: SV-235725r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A3DBEC9663EEDC90775D105ED8029C5BC806A409
  ~~~~~
  'Default pop-up window setting' is Enabled with 'Do not allow any site to show pop-ups'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultPopupsSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235726
rule_id: SV-235726r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 859E1524C5E43114ADA3981FB6DFA4354BB11E7A
  ~~~~~

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ManagedSearchEngines
  Value:		[{"allow_search_engine_discovery": false},{"is_default": true,"name": "Microsoft Bing","keyword": "bing","search_url": "https://www.bing.com/search?q={searchTerms}"},{"name": "Google","keyword": "google","search_url": "https://www.google.com/search?q={searchTerms}"}]
  Type:		REG_SZ

  Search URLs
  =======================
  https://www.bing.com/search?q={searchTerms}
  https://www.google.com/search?q={searchTerms}


vuln_id: V-235727
rule_id: SV-235727r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8FC1BA97C73E26DF2F4FFBFA42EEF58E3174020A
  ~~~~~
  'Disable synchronization of data using Microsoft sync services' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SyncDisabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235728
rule_id: SV-235728r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C3B61B9619246C488256EF969782678101E04209
  ~~~~~
  'Enable network prediction' is Enabled with 'Don't predict network actions on any network connection'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	NetworkPredictionOptions
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235729
rule_id: SV-235729r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E3CAF58DF9DE07E23A04EE57FFC5F9C8460C6537
  ~~~~~
  'Enable search suggestions' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SearchSuggestEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235730
rule_id: SV-235730r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F08C62B7F2ABE15A36FB514AA57C9D82DC746279
  ~~~~~
  'Allow importing of autofill form data' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportAutofillFormData
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235731
rule_id: SV-235731r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9C262364743C3FB68606CA959D2E3A2DCA16CB69
  ~~~~~
  'Allow importing of browser settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportBrowserSettings
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235732
rule_id: SV-235732r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 16BF98FC3F0EBB1565C797CB6FFC1D57C15A20D6
  ~~~~~
  'Allow importing of cookies' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportCookies
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235733
rule_id: SV-235733r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 63C9813DC2198C4155927B003A768D2286A93864
  ~~~~~
  'Allow importing of extensions' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportExtensions
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235734
rule_id: SV-235734r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5A369FE00E668F3D5C55ABC808997BA81CD6BF1E
  ~~~~~
  'Allow importing of browsing history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportHistory
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235735
rule_id: SV-235735r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8A5E12CFE2D497A7160E25D907CE340169B6750C
  ~~~~~
  'Allow importing of home page settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportHomepage
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235736
rule_id: SV-235736r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 94DC9B1B6FE2DD930D8E55CE31A926ACC092E032
  ~~~~~
  'Allow importing of open tabs' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportOpenTabs
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235737
rule_id: SV-235737r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4C351B4F0B7E4589FBCAC8225414BBCC72F8003B
  ~~~~~
  'Allow importing of payment info' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportPaymentInfo
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235738
rule_id: SV-235738r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1C95A1EA9C9DCB1DC440C4F491925769F6EA7AD2
  ~~~~~
  'Allow importing of saved passwords' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportSavedPasswords
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235739
rule_id: SV-235739r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BF82D8CD5BAE85B427F586A1EBFE413B23378C4F
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Allow importing of search engine settings' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportSearchEngine
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235740
rule_id: SV-235740r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7F3AD249882C08B8647088E3B2BAE57EC9CB22F2
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Allow importing of shortcuts' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ImportShortcuts
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235741
rule_id: SV-235741r1007485_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7B48931F199FBAC2686E7530ADC669B50010403D
  ~~~~~
  'Allow media autoplay for websites' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutoplayAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235742
rule_id: SV-235742r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 38497FE6B80E6BB81740D721841068941DA03567
  ~~~~~
  'Control use of the WebUSB API' is Enabled with 'Do not allow any site to request access to USB devices via the WebUSB API'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultWebUsbGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235743
rule_id: SV-235743r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1528C14AEEB65CCC54DF466080527EB385DF1760
  ~~~~~
  'Enable Google Cast' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EnableMediaRouter
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235744
rule_id: SV-235744r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 77C9F2CFAD6FB07DF15769E13BF655A14D6EC237
  ~~~~~
  'Control use of the Web Bluetooth API' is Enabled with 'Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultWebBluetoothGuardSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235745
rule_id: SV-235745r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D09B8C1D767D0AF121E2C7FBFDF4C858A96F2B8A
  ~~~~~
  'Enable AutoFill for credit cards' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutofillCreditCardEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235746
rule_id: SV-235746r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B2677DF844BBD760C645DA2D8809408E9415C159
  ~~~~~
  'Enable AutoFill for addresses' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AutofillAddressEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235747
rule_id: SV-235747r961038_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 759AF9B5A64AFD60ADA201529452464B1D8B669F
  ~~~~~
  'Enable online OCSP/CRL checks' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EnableOnlineRevocationChecks
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235748
rule_id: SV-235748r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B9CCB256B27A09591F64025AEF672F537D8DC814
  ~~~~~
  'Allow personalization of ads, search and news by sending browsing history to Microsoft' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PersonalizationReportingEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235749
rule_id: SV-235749r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DBF4B8660CC702E433B75A2A859CD9E4E1FC7B5F
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Content settings/Default geolocation setting' is Enabled with 'Don't allow any site to track users' physical location'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultGeolocationSetting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235750
rule_id: SV-235750r960864_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BB37C332F0F43CE9B237493C3740BF5AFCDB70DB
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AllowDeletingBrowserHistory
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235751
rule_id: SV-235751r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D0C011C3620DE26B3AC5D2A94FE6AC62E823B8E6
  ~~~~~
  'Computer Configuration/Administrative Templates/Microsoft Edge/Control where developer tools can be used' is Enabled with 'Don't allow using the developer tools'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DeveloperToolsAvailability
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235752
rule_id: SV-235752r1106675_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BE3D82589FDCADE0CBAA20C00C665847239339B7
  ~~~~~
  'Allow download restrictions' is Enabled with (1)'BlockDangerousDownloads' or (2)'Block potentially dangerous or unwanted downloads' or (3)'Block all downloads' or (4) 'Block malicious downloads'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DownloadRestrictions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235753
rule_id: SV-235753r1015297_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 2B22006EAC2C6E378F6B50C1F8B1771A4F182111
  ~~~~~
  'Allow pop-up windows on specific sites' is Configured

  Allowed popups:
  ===========================
  	1 = msc.navy.mil
  	2 = navy.mil


vuln_id: V-235754
rule_id: SV-235754r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4097A18D2792A95FE262E20A225523C05426B446
  ~~~~~
  'Control which extensions cannot be installed' is Enabled (With '*' added to the list)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallBlocklist
  Value Name:	1
  Value:		*
  Type:		REG_SZ


vuln_id: V-235755
rule_id: SV-235755r961479_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 97C6AD77B80837E67669FA3E2033C3AB690CBA35
  ~~~~~
  'Allow specific extensions to be installed' is Configured

  Allowed extentions:
  ===========================
  	==========


vuln_id: V-235756
rule_id: SV-235756r961521_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7BCE53DE564BDFF816DA0D34AF460FA8B5561B18
  ~~~~~
  'Enable saving passwords to the password manager' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PasswordManagerEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235758
rule_id: SV-235758r961683_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 8D7A9508CCCA163538DA4C12B9C2AF032E8F3662
  ~~~~~
  Microsoft Edge Version: 141.0.3537.71


vuln_id: V-235760
rule_id: SV-235760r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CDC59BF3B7F9E172DADA2D5A1B99AD5112919D25
  ~~~~~
  'Enable site isolation for every site' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SitePerProcess
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235761
rule_id: SV-235761r1043177_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D729C535227E8041CCECF0203A782A4147B1857A
  ~~~~~
  'Supported authentication schemes' is Enabled with 'ntlm,negotiate'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AuthSchemes
  Value:		ntlm,negotiate
  Type:		REG_SZ


vuln_id: V-235763
rule_id: SV-235763r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0FE1775D93652DFC1E9031585F819F9158C92E5A
  ~~~~~
  'Configure Microsoft Defender SmartScreen' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SmartScreenEnabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235764
rule_id: SV-235764r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AF7BFAF51876CD911EA583D31A1AB2F474242704
  ~~~~~
  'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	SmartScreenPuaEnabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235765
rule_id: SV-235765r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 83E6551EBCA0DB90D3E94FCB2E45DB4FB4E84AAB
  ~~~~~
  'Ask where to save downloaded files' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PromptForDownloadLocation
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235766
rule_id: SV-235766r1051115_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BFB209185613574AFDC8D1FDCE5645138B8F0AF6
  ~~~~~
  'Block tracking of users' web-browsing activity' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	TrackingPrevention
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235767
rule_id: SV-235767r960972_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F85BD56BBF7FAFBC610EBA052F199608B6E3DE06
  ~~~~~
  'Allow websites to query for available payment methods' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	PaymentMethodQueryEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235768
rule_id: SV-235768r1015298_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5FE8B17D491D95624AA3D36520DEE4CABCA519E7
  ~~~~~
  'Suggest similar pages when a webpage can't be found' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	AlternateErrorPagesEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235769
rule_id: SV-235769r960981_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A9C3CB492BC4DCF667581F324F2BF3C87024DD4D
  ~~~~~
  'Allow user feedback' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	UserFeedbackAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235770
rule_id: SV-235770r960984_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2D6CF3DC871908B27103BD2A0AADA788DC08FE5D
  ~~~~~
  'Enable the Collections feature' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	EdgeCollectionsEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235771
rule_id: SV-235771r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AF9F31C9048C1464BABE364BC395F8BF0F0D2874
  ~~~~~
  'Configure the Share experience' is Enabled with 'Don't allow using the Share experience'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ConfigureShare
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-235772
rule_id: SV-235772r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C41C1EBCD929E62126289710DB0512B0C3589702
  ~~~~~
  'Enable guest mode' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BrowserGuestModeEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-235773
rule_id: SV-235773r960993_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B57A03559EAFB980D5E9D52175B1F7A68F888C51
  ~~~~~
  'Notify a user that a browser restart is recommended or required for pending updates' is Enabled with 'Required'

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	RelaunchNotification
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-235774
rule_id: SV-235774r1015299_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B76F0C6311068EC7685D073365C478451F16B7A8
  ~~~~~
  'Use built-in DNS client' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	BuiltInDnsClientEnabled
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-246736
rule_id: SV-246736r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9F96AAF9C4DC4B5A831AA5160BD50D280B3F5EC2
  ~~~~~
  'Allow QUIC protocol' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	QuicAllowed
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-251694
rule_id: SV-251694r960963_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 53EFE8294F1A016100A439E68BDC4A955D8F191C
  ~~~~~
  'Allow media autoplay on specific sites' is Configured

  Allowed sites:
  ===========================


vuln_id: V-260465
rule_id: SV-260465r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 53FFA49DD1A712E9210104CD34E9E68189B1C10A
  ~~~~~
  'Visual search enabled' is NOT Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	VisualSearchEnabled (Not found)


vuln_id: V-260466
rule_id: SV-260466r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 10BE85D529EF219B88B96043C7D923DA31DC7A06
  ~~~~~
  'Show Hubs Sidebar' is NOT Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	HubsSidebarEnabled (Not found)


vuln_id: V-260467
rule_id: SV-260467r960864_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 2E70C5740EF2A6C029713CC109227959D2AC0E3E
  ~~~~~
  'Configure cookies' is NOT Enabled: (Keep cookies for the duration of the session, except ones listed in 'SaveCookiesOnExit')

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	DefaultCookiesSetting (Not found)


vuln_id: V-266981
rule_id: SV-266981r1007489_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-MicrosoftEdge_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 018E9B28DC88EA36CB7CE50745FE3530B5C33958
  ~~~~~
  'Configure the default paste format of URLs copied from Microsoft Edge, and determine if additional formats will be available to users' is NOT Enabled: (The plain URL without any extra information, such as the page's title.)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Edge
  Value Name:	ConfigureFriendlyURLFormat (Not found)


vuln_id: V-223280
rule_id: SV-223280r961050_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 48067347C7A76ADFF02F273DAFA024366DD667FD
  ~~~~~
  Access is not installed so this requirement is NA per the STIG Overview.


vuln_id: V-223284
rule_id: SV-223284r961092_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:25
updated_at: 2026-01-14 17:57:25
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: CD29181397F2AB43C4CCB0FEEC184B9FA25E48FF
  ~~~~~
  'Macro Runtime Scan Scope' is NOT Enabled: (Enable for all documents)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	macroruntimescanscope (Not found)


vuln_id: V-223285
rule_id: SV-223285r1067544_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: B16ADE515E363F887C68C49630239CB917515255
  ~~~~~
  'Protect document metadata for rights managed Office Open XML Files' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	DRMEncryptProperty
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223286
rule_id: SV-223286r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 96CDC01572877ED081B14F7FA86B9AD03B070EC5
  ~~~~~
  'Disable the Office client from polling the SharePoint Server for published links' is NOT Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\portal
  Value Name:	linkpublishingdisabled (Not found)


vuln_id: V-223287
rule_id: SV-223287r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: D7A3C2FCBB825CA5C98C3FDDD47E431EFA116602
  ~~~~~
  'Disable UI extending from documents and templates' is NOT Enabled: (Disallow in Word; Excel; PowerPoint; Access; Outlook; Publisher; Project; Visio; InfoPath)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\access
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\excel
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\infopath
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\outlook
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\powerpoint
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\project
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\publisher
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\visio
  Value Name:	noextensibilitycustomizationfromdocument (Not found)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\toolbars\word
  Value Name:	noextensibilitycustomizationfromdocument (Not found)


vuln_id: V-223288
rule_id: SV-223288r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F514C7A140197E88FA4A733F7619DC87B196355D
  ~~~~~
  'ActiveX Control Initialization' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\Common\Security
  Value Name:	UFIControls (Not found)


vuln_id: V-223289
rule_id: SV-223289r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 9E43BB267DC28C5D3914CBFBB29691C47779E3B8
  ~~~~~
  'Automation Security' is Enabled: (Use application macro security level)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\Common\Security
  Value Name:	AutomationSecurity
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223290
rule_id: SV-223290r1016167_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: CE9FC3D125AF67B46A61CA1175F8B8EDA6E2715A
  ~~~~~
  'Disable all Trust Bar notifications for security issues' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\trustcenter
  Value Name:	trustbar
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223291
rule_id: SV-223291r961128_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 51F7F04A8BE8E239EFB2FA6988635FFCEAD49DBD
  ~~~~~
  'Encryption type for password protected Office 97-2003 files' is Enabled: (Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	defaultencryption12
  Value:		Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256
  Type:		REG_SZ


vuln_id: V-223292
rule_id: SV-223292r961128_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 6F7CCD4C1C3077DDF7BE01E2AC1772ADE732C237
  ~~~~~
  'Encryption type for password protected Office Open XML files' is Enabled: (Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security
  Value Name:	OpenXMLEncryption
  Value:		Microsoft Enhanced RSA and AES Cryptographic Provider,AES 256,256
  Type:		REG_SZ


vuln_id: V-223293
rule_id: SV-223293r961353_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: C6978785DAA1AD95595D1AF476BB273878619C61
  ~~~~~
  'Allow mix of policy and user locations' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\common\security\trusted locations
  Value Name:	allow user locations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223294
rule_id: SV-223294r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F127074E69D3A14AB4B225A7DF706EEC2774F2CA
  ~~~~~
  'Disable Smart Document's use of manifests' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\common\smart tag
  Value Name:	neverloadmanifests
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223295
rule_id: SV-223295r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 852DF74195C553BD82F48E32096BAA7BD65C16F8
  ~~~~~
  'Load Controls in Forms3' is Enabled: (1)

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\vba\security
  Value Name:	LoadControlsInForms
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223296
rule_id: SV-223296r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F76D52B80C6B695F10518FF386F7D2D0343F8DD8
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223297
rule_id: SV-223297r961050_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: FC94CFDB01489BB3DCBE54E95CC9BCDE68B30EF8
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING
  Value Name:	excel.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING
  Value Name:	outlook.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING
  Value Name:	powerpnt.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING
  Value Name:	winword.exe (Not found)


vuln_id: V-223298
rule_id: SV-223298r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 86883C299CEB4DDA8D75ED161C894EC98E916EDD
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223299
rule_id: SV-223299r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: B346E2707A18C4CEAC7F7CC8F68FF239A9FFF94F
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND
  Value Name:	excel.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND
  Value Name:	outlook.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND
  Value Name:	powerpnt.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND
  Value Name:	winword.exe (Not found)


vuln_id: V-223300
rule_id: SV-223300r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 034BAD73C1935D5E39A3D9EED467087D11FA518A
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
  Value Name:	excel.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
  Value Name:	outlook.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
  Value Name:	powerpnt.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
  Value Name:	winword.exe (Not found)


vuln_id: V-223301
rule_id: SV-223301r961050_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: CFCC40024D675A58F96279F54C4DA9512ACD98C5
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING
  Value Name:	excel.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING
  Value Name:	outlook.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING
  Value Name:	powerpnt.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING
  Value Name:	winword.exe (Not found)


vuln_id: V-223302
rule_id: SV-223302r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0463BA8BD367D642A51CBD6B3DCF117235F5F0D5
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223303
rule_id: SV-223303r961050_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: FA0C41E4C183B574FB75BD7F0DAA29210C8FD9C1
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING
  Value Name:	excel.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING
  Value Name:	outlook.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING
  Value Name:	powerpnt.exe (Not found)

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING
  Value Name:	winword.exe (Not found)


vuln_id: V-223304
rule_id: SV-223304r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E728529F1B93A23AE109DD004DC2781CE4999336
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223305
rule_id: SV-223305r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C20D022BECF6D5CFD67677AD59106CD490640B66
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223306
rule_id: SV-223306r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C6F0481A33E55C4C98EB811F59F2A4EED9EC3DC9
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223307
rule_id: SV-223307r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F7D4C9B9F477B6528D04513FC5331EA2DDC86B7A
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223308
rule_id: SV-223308r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: B18DEB451D969E5BBA13B8BDB5F397DE82EDA096
  ~~~~~
  Installed Programs: Excel, Outlook, PowerPoint, Word

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS
  Value Name:	excel.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS
  Value Name:	outlook.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS
  Value Name:	powerpnt.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD

  Registry Path:	HKLM:\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS
  Value Name:	winword.exe
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223309
rule_id: SV-223309r961779_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 4DE737C1BFDFBC891A7FC39E7105A8B39446DF88
  ~~~~~
  'Block Flash activation in Office documents' is NOT Enabled: (Block all activation)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Office\Common\COM Compatibility
  Value Name:	COMMENT (Not found)


vuln_id: V-223310
rule_id: SV-223310r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: DEFCEA87A8A5B389D339BBC920A5DA25BB3907AB
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\trusted locations
  Value Name:	AllowNetworkLocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223311
rule_id: SV-223311r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 48A820BC171F3156C77314E945A7A64A74F38DF5
  ~~~~~
  'VBA macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223312
rule_id: SV-223312r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: BBA5A336D17B95566A0BD1AB5AC8D265C75A0172
  ~~~~~
  'Don't allow Dynamic Data Exchange (DDE) server launch in Excel' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content
  Value Name:	disableddeserverlaunch (Not found)


vuln_id: V-223313
rule_id: SV-223313r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: A09F08C180B9EFDCD3A3332CDC901B2838A136F6
  ~~~~~
  'Don't allow Dynamic Data Exchange (DDE) server lookup in Excel' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\external content
  Value Name:	disableddeserverlookup (Not found)


vuln_id: V-223314
rule_id: SV-223314r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: DECF55378D8719B588E3CDA5894EB38147D19316
  ~~~~~
  'File Block Settings 'dBase III / IV files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	DBaseFiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223315
rule_id: SV-223315r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: FBC0D56C700FFB903ADC7A9ED287D4BB73291E20
  ~~~~~
  'File Block Settings 'Dif and Sylk files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	DifandSylkFiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223316
rule_id: SV-223316r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 3116058A6B0F8D8D95EAB3DF266CF83483CA588E
  ~~~~~
  'File Block Settings 'Excel 2 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL2Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223317
rule_id: SV-223317r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: B3CE734FFF7595C84E86A74BDCF0429EE5C1F1FF
  ~~~~~
  'File Block Settings 'Excel 2 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL2Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223318
rule_id: SV-223318r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 46A4AB4E4DA37377FC1E451A93D2BE0EE23387F5
  ~~~~~
  'File Block Settings 'Excel 3 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL3Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223319
rule_id: SV-223319r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 81F7AAD3FDB684E4695F0023AF17D045E2CC1352
  ~~~~~
  'File Block Settings 'Excel 3 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL3Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223320
rule_id: SV-223320r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 63D656E47CB2C86266E4168A813F39EBF395431D
  ~~~~~
  'File Block Settings 'Excel 4 macrosheets and add-in files'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Macros
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223321
rule_id: SV-223321r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 7815F4D54101C05228C50E827DA80EA38B788FB3
  ~~~~~
  'File Block Settings 'Excel 4 workbooks'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Workbooks
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223322
rule_id: SV-223322r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 90766A0824F54F709EA3F9AEF207A1A0EACD1C86
  ~~~~~
  'File Block Settings 'Excel 4 worksheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL4Worksheets
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223323
rule_id: SV-223323r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: D77698ED1B5C3707DA52B927D395C22DB9837D59
  ~~~~~
  'File Block Settings 'Excel 95 workbooks'' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	xl95workbooks
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223324
rule_id: SV-223324r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 5EDA40DF7442F8EE58DD271634EBB6778E874824
  ~~~~~
  'File Block Settings 'Excel 95-97 workbooks and templates'' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	XL9597WorkbooksandTemplates
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223325
rule_id: SV-223325r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: D0485CE242052AC17400AF8FE202DB5C96018023
  ~~~~~
  'File Block Settings 'Set default file block behavior'' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223326
rule_id: SV-223326r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: C2A4A1AD6E6E8AAA46F7BEB4F9466CCAAE42DC52
  ~~~~~
  'File Block Settings 'Web pages and Excel 2003 XML spreadsheets'' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\fileblock
  Value Name:	htmlandxmlssfiles
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223327
rule_id: SV-223327r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 38E9424B5151905C332CC6086FBF9243B12F05C1
  ~~~~~
  'Do not show data extraction options when opening corrupt workbooks' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	extractdatadisableui
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223328
rule_id: SV-223328r961092_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 6B1D21A6B62673251DABECE80D96C11C72692567
  ~~~~~
  'Ask to update automatic links' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options\binaryoptions
  Value Name:	fupdateext_78_1 (Not found)


vuln_id: V-223329
rule_id: SV-223329r961779_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 7C060C55DCEC0645DCF8620A7C398851A3B4DE19
  ~~~~~
  'Load pictures from Web pages not created in Excel' is NOT Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\internet
  Value Name:	donotloadpictures (Not found)


vuln_id: V-223330
rule_id: SV-223330r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: CF624D913092478981CB1E7B067607F0273F2B4E
  ~~~~~
  'Disable AutoRepublish' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	disableautorepublish (Not found)


vuln_id: V-223331
rule_id: SV-223331r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E4583DFC58A25B096D6AA7DB788706549210B44B
  ~~~~~
  'Do not show AutoRepublish warning alert' is NOT Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\options
  Value Name:	disableautorepublishwarning (Not found)


vuln_id: V-223332
rule_id: SV-223332r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8C79D425D53FDF90DC546882F8D817A99E441BCB
  ~~~~~
  'Force file extension to match file type' is NOT Enabled: (Always match file type)

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	extensionhardening (Not found)


vuln_id: V-223333
rule_id: SV-223333r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 4A8A6ADB8FF8213A02507287859103BF68B75A28
  ~~~~~
  'Scan encrypted macros in Excel Open XML workbooks' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	excelbypassencryptiedmacrosscan (Not found)


vuln_id: V-223334
rule_id: SV-223334r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 356C43AFDCE812F3F52FCE137694D4C0412B5619
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\filevalidation
  Value Name:	enableonload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223335
rule_id: SV-223335r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E69AD2F03D89C6FA7F30136921238A054AC8432F
  ~~~~~
  'WEBSERVICE Function Notification Settings' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	webservicefunctionwarnings (Not found)


vuln_id: V-223336
rule_id: SV-223336r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 692AE32D3A24A5BA3708E204CB2F7BEB71F545C4
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223337
rule_id: SV-223337r1016168_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F817384CE827CB917128598CDEAA0ADD551A6F2F
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223338
rule_id: SV-223338r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 82D7D3AF6527645A597B5902655CF02075B86448
  ~~~~~
  'Always prevent untrusted Microsoft Query files from opening' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\office\16.0\excel\security\external content
  Value Name:	enableblockunsecurequeryfiles (Not found)


vuln_id: V-223339
rule_id: SV-223339r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 0CDB19168E8808FE2E627541B6B3C8867E646865
  ~~~~~
  'Always open untrusted database files in Protected View' is NOT Enabled

  Registry Path:	HKCU:\Software\Policies\Microsoft\Office\16.0\excel\security\protectedview
  Value Name:	enabledatabasefileprotectedview (Not found)


vuln_id: V-223340
rule_id: SV-223340r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: B6AA2152314FB34DED4299BFBEDA6D97F6807915
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableInternetFilesInPV (Not found)


vuln_id: V-223341
rule_id: SV-223341r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: BCFE5FE673BE81F769F3AAF0E44CA3793770E95B
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableUnsafeLocationsInPV (Not found)


vuln_id: V-223342
rule_id: SV-223342r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 0F2DB70326C00FF2291AC4E7E39EFE13737F92B2
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Excel\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223343
rule_id: SV-223343r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 9E35868F505D9B7EF044EBFCB7555F859E5B5B90
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\excel\security\protectedview
  Value Name:	DisableAttachmentsInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223344
rule_id: SV-223344r1043178_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 4509309295E46E18CF4C294C420C55851A7ACF6E
  ~~~~~
  Lync is not installed so this requirement is NA per the STIG Overview.


vuln_id: V-223346
rule_id: SV-223346r961878_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F5146E0EF9944223703A266026E50833A4D2EC0C
  ~~~~~
  'Authentication with Exchange Server' is Enabled: (Kerberos Password Authentication)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	authenticationservice
  Value:		0x00000010 (16)
  Type:		REG_DWORD


vuln_id: V-223347
rule_id: SV-223347r961878_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: EF59F7F2C0DEA9CFFCA75EE400AD4C269DD9219A
  ~~~~~
  'Enable RPC encryption' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\rpc
  Value Name:	enablerpcencryption
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223348
rule_id: SV-223348r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8737D2D54EDB3BA99D8A042A10119FA417273A4D
  ~~~~~
  'Do not allow Outlook object model scripts to run for public folders' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	publicfolderscript
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223349
rule_id: SV-223349r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 622BD34DC9C64608D57450FEDFFBF1A97B714E49
  ~~~~~
  'Do not allow Outlook object model scripts to run for shared folders' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	sharedfolderscript
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223350
rule_id: SV-223350r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 5CC6371388F754400CE2259E6BBC0F88571031CC
  ~~~~~
  'Use Unicode format when dragging e-mail message to file system' is NOT Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\general
  Value Name:	msgformat (Not found)


vuln_id: V-223351
rule_id: SV-223351r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: B559D6629C7F0F5A167B784C458B03694ECDC8F1
  ~~~~~
  'Junk E-mail protection level' is NOT Configured

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	junkmailprotection (Not found)


vuln_id: V-223352
rule_id: SV-223352r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F97A99C3426D2D49F21F519E1B129732C7A8E58B
  ~~~~~
  'Allow Active X One Off Forms' is Enabled: (Load only Outlook Controls)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	allowactivexoneoffforms
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223353
rule_id: SV-223353r961353_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 2A344EC8276D81EF338D1902160D3ECE70AC9FD2
  ~~~~~
  'Prevent users from customizing attachment security settings' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook
  Value Name:	disallowattachmentcustomization
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223354
rule_id: SV-223354r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 479E6BC429BD5183B6CAC013D30CFF3C91847FB7
  ~~~~~
  'Include Internet in Safe Zones for Automatic Picture Download' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	Internet
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223355
rule_id: SV-223355r961863_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E26BF48A222F223BF6AFE43EE4EFFE8F177588D9
  ~~~~~
  'Do not display 'Publish to GAL' button' is NOT Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	publishtogaldisabled (Not found)


vuln_id: V-223356
rule_id: SV-223356r961905_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 51ED0C30D17751569A3D7290804A7CAA73AD9153
  ~~~~~
  'Minimum encryption settings' is Enabled: (Minimum key size (in bits) of '168')

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	minenckey
  Value:		0x000000a8 (168)
  Type:		REG_DWORD


vuln_id: V-223357
rule_id: SV-223357r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 95D1054DF08C3BF8E75C59217FA722AC91F0A403
  ~~~~~
  'Signature Warning' is NOT Enabled: (Always warn about invalid signatures)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	warnaboutinvalid (Not found)


vuln_id: V-223358
rule_id: SV-223358r961893_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: CAC0862021F1CE3A46BC12E6271CF73E336D0607
  ~~~~~
  'Retrieving CRLs (Certificate Revocation Lists)' is Enabled: (When online always retrieve the CRL)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	usecrlchasing
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223359
rule_id: SV-223359r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 4D4C911F63DBC37FCEB01E849C424D2B113902D8
  ~~~~~
  'Outlook Security Mode' is Enabled: (Use Outlook Security Group Policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	adminsecuritymode
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-223360
rule_id: SV-223360r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E30E1F7DE03FE7A54A9A427833B2CCFADF8E6974
  ~~~~~
  'Allow users to demote attachments to Level 2' is NOT Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	allowuserstolowerattachments (Not found)


vuln_id: V-223361
rule_id: SV-223361r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 41D7B63741915C9E849790348F78AD30C2F00495
  ~~~~~
  'Display Level 1 attachments' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	ShowLevel1Attach
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223362
rule_id: SV-223362r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 1605A8C1612A87BB82172E813DF11582FC593FEA
  ~~~~~
  'Remove file extensions blocked as Level 1' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security
  Value Name:	FileExtensionsRemoveLevel1 (Not found)


vuln_id: V-223363
rule_id: SV-223363r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 3359150706AEEC6955B2715BFA52F9775C1CA2BD
  ~~~~~
  'Remove file extensions blocked as Level 2' is Disabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\outlook\security
  Value Name:	FileExtensionsRemoveLevel2 (Not found)


vuln_id: V-223364
rule_id: SV-223364r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 290D06434BADE923ADB9DC85373178CF4C655DAB
  ~~~~~
  'Allow scripts in one-off Outlook forms' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	EnableOneOffFormScripts
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223365
rule_id: SV-223365r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 398F7E965D7BC484A4CD6F3387B9795EF5C41C77
  ~~~~~
  'Set Outlook object model custom actions execution prompt' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomcustomaction
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223366
rule_id: SV-223366r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: BE00F145FB5044FC89C319331CAB046BE75AF3FD
  ~~~~~
  'Outlook object model prompt when accessing an address book' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomaddressbookaccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223367
rule_id: SV-223367r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: A908F49CE8BF06C0F75AA12A391B3BBA9762360A
  ~~~~~
  'Outlook object model prompt When accessing the Formula property of a UserProperty object' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	PromptOOMFormulaAccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223368
rule_id: SV-223368r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 9C78D999BA6E5112B4E4D97A061B1FCE35F60679
  ~~~~~
  'Outlook object model prompt when executing Save As' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomsaveas
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223369
rule_id: SV-223369r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 3CFB873AE566BCAC8E36564818ADB7A294FAE277
  ~~~~~
  'Outlook object model prompt when reading address information' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomaddressinformationaccess
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223370
rule_id: SV-223370r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 72C51A7F58C34C6EBDDD6FA26A7CB1B7B5E133BD
  ~~~~~
  'Outlook object model prompt when responding to meeting and task requests' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoommeetingtaskrequestresponse
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223371
rule_id: SV-223371r961779_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 2C19FE71BBCBB36E69ED3E54BB68EAEEA6933047
  ~~~~~
  'Outlook object model prompt when sending mail' is Enabled: (Automatically Deny)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	promptoomsend
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223372
rule_id: SV-223372r961863_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 7899972D544A1715F338A25915043E9AB0865973
  ~~~~~
  'Allow hyperlinks in suspected phishing e-mail messages' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\options\mail
  Value Name:	JunkMailEnableLinks
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223373
rule_id: SV-223373r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 7ED0DA3544783F504B21115FD198091895C26189
  ~~~~~
  'Security setting for macros' is Enabled: (Warn for signed, disable unsigned)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\outlook\security
  Value Name:	level
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-223374
rule_id: SV-223374r961092_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 1FE0B12DC2964F086861833F1CC86CDE46F2DD9D
  ~~~~~
  Project is not installed so this requirement is NA per the STIG Overview.


vuln_id: V-223377
rule_id: SV-223377r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 695C01367D613236A11E98AF3F14EBE486C3A0E3
  ~~~~~
  'VBA Macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223378
rule_id: SV-223378r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 525EFBF4AB77188A48309CBF94931FAA450BE955
  ~~~~~
  'Run Programs' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	runprograms (Not found)


vuln_id: V-223379
rule_id: SV-223379r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E2BBDE7FE4B84AB263FDD95940FB06D835BD9DD5
  ~~~~~
  'PowerPoint 97-2003 presentations, shows, templates and add-in files' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock
  Value Name:	binaryfiles (Not found)


vuln_id: V-223380
rule_id: SV-223380r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8E6D05A91EA21B699B7F2E127CEE9EFFE121FD17
  ~~~~~
  'Set default file block behavior' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223381
rule_id: SV-223381r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 09ECAE8B938CDF4FA7CE44E41813CC919D214580
  ~~~~~
  'Scan encrypted macros in PowerPoint Open XML presentations' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	PowerPointBypassEncryptedMacroScan (Not found)


vuln_id: V-223382
rule_id: SV-223382r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 16AC53ACBB077110A7706A36B2F8225940C52507
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\filevalidation
  Value Name:	EnableOnLoad
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223383
rule_id: SV-223383r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 6A6A1F901BBD1CCB0D135B69A91687FA4B221A1D
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223384
rule_id: SV-223384r1016170_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8E9AD38984331BBCCF41B6F26047D9B0D44BA994
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223385
rule_id: SV-223385r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8CC339BB941F870F4489121C0371F5FA383293DD
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is NOT Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableInternetFilesInPV (Not found)


vuln_id: V-223386
rule_id: SV-223386r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F7404C4ABF30188455B63AEF73DE7D9F116E0781
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableAttachmentsInPV
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223387
rule_id: SV-223387r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: C26A9112506C3C5AC758F56F9FB9769EB3309EC6
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is NOT Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\protectedview
  Value Name:	DisableUnsafeLocationsInPV (Not found)


vuln_id: V-223388
rule_id: SV-223388r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: BB83D4755F70C287AA859AE88C12B96B7FF2BFC6
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\PowerPoint\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\PowerPoint\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223389
rule_id: SV-223389r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 11BD6198BBF5C200317DDE1B3BDD0B2BAD40E7B7
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\powerpoint\security\trusted locations
  Value Name:	AllowNetworkLocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223390
rule_id: SV-223390r961086_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 1B14783CF63C3D4A579D7EFE45C12D37D30264B3
  ~~~~~
  Publisher is not installed so this requirement is NA per the STIG Overview.


vuln_id: V-223393
rule_id: SV-223393r960963_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: A8A4844569B06E3D9028AFEAFC436F82F1A552AA
  ~~~~~
  Visio is not installed so this requirement is NA per the STIG Overview.


vuln_id: V-223400
rule_id: SV-223400r1016174_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 419843462258497497E74CA2D88F8C1397E5177D
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	notbpromptunsignedaddin
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223401
rule_id: SV-223401r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: D55AB693730EA180137BA4599159E0F027BB30CE
  ~~~~~
  'Disable Trust Bar Notification for unsigned application add-ins and block them' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	WordBypassEncryptedMacroScan (Not found)


vuln_id: V-223402
rule_id: SV-223402r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: EBE624DF2AC6F71FC8A51E45650999D315E29E2F
  ~~~~~
  'Do not open files from the Internet zone in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableinternetfilesinpv (Not found)


vuln_id: V-223403
rule_id: SV-223403r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 39AA2D404B74630552087E659D06325198D6F18E
  ~~~~~
  'Do not open files in unsafe locations in Protected View' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableunsafelocationsinpv (Not found)


vuln_id: V-223404
rule_id: SV-223404r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 4033328D0BBF040F24B833322971B54DDF4C9A95
  ~~~~~
  'Set document behvior if file validateion fails' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Word\security\filevalidation
  Value Name:	openinprotectedview (Not found)

  'Allow edit' is Unchecked

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Office\16.0\Word\security\filevalidation
  Value Name:	DisableEditFromPV
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223405
rule_id: SV-223405r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 940DE327C9C4C8A0F9E788225F66571E4D8AE626
  ~~~~~
  'Turn off Protected View for attachments opened from Outlook' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\protectedview
  Value Name:	disableattachmentsinpv
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223406
rule_id: SV-223406r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E20BB652553112B9D779FDE6ED8A97ED1E0184AA
  ~~~~~
  'Set default file block behavior' is Enabled: (Blocked files are not opened)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	OpenInProtectedView
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223407
rule_id: SV-223407r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 4141B58403170F053F5229FED712713E27134056
  ~~~~~
  'Word 2 and earlier binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	Word2Files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223408
rule_id: SV-223408r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 3E1FC09E630C472154972BE5932D3282C4DE9338
  ~~~~~
  'Word 2000 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	Word2000Files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223409
rule_id: SV-223409r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: A0ADCBF06FD3E6A23DC7487FE033307B7CDD55E8
  ~~~~~
  'Word 2003 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word2003files (Not found)


vuln_id: V-223410
rule_id: SV-223410r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 9301841C7E005CF28AC60D17D27F21CCD22A243C
  ~~~~~
  'Word 2007 and later binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word2007files (Not found)


vuln_id: V-223411
rule_id: SV-223411r961086_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F92AD76657B4329B2D90EBDC6818BB15D18D22F8
  ~~~~~
  'Word 6.0 binary documents and templates' is Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word60files
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-223412
rule_id: SV-223412r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: BE33D318390B449985D2AA79FB456B94ED9E1FF6
  ~~~~~
  'Word 95 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word95files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223413
rule_id: SV-223413r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: E784D1DA5F97CBA1EE0BDA63B7D555DEAE2A907A
  ~~~~~
  'Word 97 binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	word97files
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223414
rule_id: SV-223414r961086_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 80D92FA19465440D3073030D51C998AEF52B5FF7
  ~~~~~
  'Word XP binary documents and templates' is NOT Enabled: (Open/Save blocked, use open policy)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\fileblock
  Value Name:	wordxpfiles
  Value:		0x00000005 (5) [Expected 2]
  Type:		REG_DWORD


vuln_id: V-223415
rule_id: SV-223415r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 261104A8EE4EA15039470FEA66E29686CA3193F4
  ~~~~~
  'Block macros from running in Office files from the Internet' is Enabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	blockcontentexecutionfrominternet
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-223416
rule_id: SV-223416r961092_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: CC97687F7F423BC5EEA52DA559254FC2DE6015E3
  ~~~~~
  'Allow Trusted Locations on the network' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\trusted locations
  Value Name:	allownetworklocations
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-223417
rule_id: SV-223417r960963_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be OPEN on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 1EC453ABE6D5138768991EAE2D9DFC645C0DCD2C
  ~~~~~
  'VBA macro Notification Settings' is NOT Enabled: (Disable all except digitally signed macros)

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security
  Value Name:	vbawarnings
  Value:		0x00000002 (2) [Expected 3 or 4]
  Type:		REG_DWORD


vuln_id: V-223418
rule_id: SV-223418r960921_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Office365_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: F99D7556B8778BB1EF7F0E19536B564736FF1A35
  ~~~~~
  'Turn off file validation' is Disabled

  Registry Path:	HKCU:\software\policies\microsoft\office\16.0\word\security\filevalidation
  Value Name:	enableonload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220697
rule_id: SV-220697r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 435C81AC79C2FECD84A3BE04A4AA7CC245BEF0D7
  ~~~~~
  OS Caption:		Microsoft Windows 10 Enterprise LTSC
  OS Version:		10.0.19044
  OS Architecture:	64-bit


vuln_id: V-220698
rule_id: SV-220698r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 346611FFEC18CA874CE847DB523A17BC711DFFEF
  ~~~~~
  TPM Preset = True
  TPM Ready = True
  TPM Specification Version = 2.0


vuln_id: V-220699
rule_id: SV-220699r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 795D12619CC035A12CE3BE8D046C9DA2FD6AC217
  ~~~~~
  BIOS Mode:	UEFI


vuln_id: V-220700
rule_id: SV-220700r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F00AB6308F2F40793871577252596AC96D27494C
  ~~~~~
  Confirm-SecureBootUEFI = True


vuln_id: V-220702
rule_id: SV-220702r958552_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 374DA62AC80E33993305E73BF38A7CE33E45FF4B
  ~~~~~
  All disk(s) encrypted with BitLocker.

  Mount Point:			C:
  Encryption Method:		XtsAes128
  Volume Type:			OperatingSystem
  Volume Status:		FullyEncrypted
  Protection Status:		On
  Lock Status:			Unlocked
  Encryption %:			100
  Key Protector:			Tpm, RecoveryPassword


vuln_id: V-220703
rule_id: SV-220703r958552_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: A0DEB1E83D788131EFCA0954E181AD87591B969A
  ~~~~~
  BitLocker Network Unlock is not in use.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\FVE
  Value Name:	UseAdvancedStartup
  Value:		0x00000001 (1)
  Value:		REG_DWORD

  TPM Startup PIN Configuration:
  ---------------------------
  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\FVE
  Value Name:	UseTPMPIN
  Value:		0x00000002 (2) [Expected '1']
  Value:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\FVE
  Value Name:	UseTPMKeyPIN
  Value:		0x00000002 (2) [Expected '1']
  Value:		REG_DWORD


vuln_id: V-220704
rule_id: SV-220704r958552_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FC6199A9C32FADB82FFBB308E7C19D62F33E6804
  ~~~~~
  'Configure minimum PIN length for startup' is Enabled: (Minimum characters set to 6 or greater)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\FVE
  Value Name:	MinimumPIN
  Value:		0x00000006 (6)
  Type:		REG_DWORD


vuln_id: V-220705
rule_id: SV-220705r958808_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 49A095DC33B1A3DFEEB7EEB6886E1344EBACC16B
  ~~~~~
  AppLocker is configured but 'Appx' and/or 'Exe' rules are not enabled.  Ensure an application allowlisting solution is in place and configured to a deny-all, permit-by-exception policy.

  AppLocker rules:
  ---------------------------


vuln_id: V-220706
rule_id: SV-220706r1050597_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 43A1582C809B264B02D1678B8CB1FFE0AB4890CA
  ~~~~~
  Operating system is 'Windows 10 Enterprise LTSC 2021 21H2' (10.0.19044)


vuln_id: V-220707
rule_id: SV-220707r1016358_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9F637B38FFA9011906DB3132B81BF7C3A5BDC17C
  ~~~~~
  WMI Namespace:	ROOT/SecurityCenter2
  WMI Class:		AntiVirusProduct
  Display Name:		Trellix Endpoint Security
  Product State:		On


vuln_id: V-220708
rule_id: SV-220708r958472_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3902149AE7346482F89E57F8AC8722F42D01C119
  ~~~~~
  All disk(s) formatted as NTFS.

  Device ID:		C:
  Drive Type:		Local Disk (3)
  Volume Name:		Windows
  File System:		NTFS


vuln_id: V-220709
rule_id: SV-220709r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C6A59B3E1EC7BD525C6D9E3ACE97953F29D0D614
  ~~~~~
  > Windows Boot Loader
    -------------------
    identifier              {current}
    device                  partition=C:
    path                    \windows\system32\winload.efi
    description             Windows 10


vuln_id: V-220710
rule_id: SV-220710r958524_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: FE6E08BCA44D55D33AD47289B0481DA21EA7058A
  ~~~~~
  Only system-created shares exist on this system so this requirement is NA.


vuln_id: V-220711
rule_id: SV-220711r1051018_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 578927A0E4EC2A3AFF257E82B2D49C0A580FAC3B
  ~~~~~
  No enabled accounts found that have not logged on within 35 days.


vuln_id: V-220712
rule_id: SV-220712r958726_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) was unable to determine a Status but found the below configuration on 10/23/2025:
  ResultHash: 3E830C5BCEA1AA12EC57417D52A215ACB2E2E5E1
  ~~~~~
  The following are members of the local Administrators group:
  ==============
  Name:		MONTFORD-POINT\Workstation Administrator Group
  objectClass:	Group
  objectSID:	S-1-5-21-1360995287-4027491577-3040029667-1110

  Name:		MONT-WS-92040\dod_admin
  objectClass:	User
  objectSID:	S-1-5-21-3703204072-2228436765-3422267048-1001

  Name:		MONT-WS-92040\X_Admin
  objectClass:	User
  objectSID:	S-1-5-21-3703204072-2228436765-3422267048-500


vuln_id: V-220713
rule_id: SV-220713r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 704F569EEF94798C36B530B55B2AB7E70E1A8BF8
  ~~~~~
  The local Backup Operators group has no members.


vuln_id: V-220714
rule_id: SV-220714r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5AC5524FFF1F79A06300AD80E1BB81C6CE96823C
  ~~~~~
  The local Hyper-V Administrators group has no members.


  No 3rd-party hypervisors detected.


vuln_id: V-220715
rule_id: SV-220715r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BE4A06A27D52056F100522E435DF42CD00EC9F14
  ~~~~~
  Non-Compliant Accounts:
  ==============
  All local accounts are Built-in (disabled) or administrators.

  Compliant Accounts:
  ==============
  Name:	X_Admin
  SID:		S-1-5-21-3703204072-2228436765-3422267048-500
  Enabled:	False
  Type:	User
  IsAdmin:	True

  Name:	Visitor
  SID:		S-1-5-21-3703204072-2228436765-3422267048-501
  Enabled:	False
  Type:	User
  IsAdmin:	False

  Name:	DefaultAccount
  SID:		S-1-5-21-3703204072-2228436765-3422267048-503
  Enabled:	False
  Type:	User
  IsAdmin:	False

  Name:	WDAGUtilityAccount
  SID:		S-1-5-21-3703204072-2228436765-3422267048-504
  Enabled:	False
  Type:	User
  IsAdmin:	False

  Name:	defaultuser0
  SID:		S-1-5-21-3703204072-2228436765-3422267048-1019
  Enabled:	False
  Type:	User
  IsAdmin:	False

  Name:	dod_admin
  SID:		S-1-5-21-3703204072-2228436765-3422267048-1001
  Enabled:	True
  Type:	User
  IsAdmin:	True


vuln_id: V-220716
rule_id: SV-220716r1051019_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: A4E59D05CF6C07665553DADEA818FA5C10C02969
  ~~~~~
  Failed accounts:
  ---------------------
  Name:			dod_admin
  SID:				S-1-5-21-3703204072-2228436765-3422267048-1001
  Enabled:			True
  Password Expires:	False


vuln_id: V-220717
rule_id: SV-220717r1081048_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A714F391E7F3D0766FDF8D585F34F5911DEF154C
  ~~~~~
  Network access: Let Everyone permissions apply to anonymous users is set to Disabled
  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value		0

  C:\
  ---------------------
  Default permissions are in place.

  Current ACL:
  BUILTIN\Administrators:(OI)(CI)(F)
  NT AUTHORITY\SYSTEM:(OI)(CI)(F)
  BUILTIN\Users:(OI)(CI)(RX)
  NT AUTHORITY\Authenticated Users:(OI)(CI)(IO)(M)
  NT AUTHORITY\Authenticated Users:(AD)
  Mandatory Label\High Mandatory Level:(OI)(NP)(IO)(NW)
  ---------------------

  C:\Program Files
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\TrustedInstaller:(F)
  NT SERVICE\TrustedInstaller:(CI)(IO)(F)
  NT AUTHORITY\SYSTEM:(M)
  NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
  BUILTIN\Administrators:(M)
  BUILTIN\Administrators:(OI)(CI)(IO)(F)
  BUILTIN\Users:(RX)
  BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
  CREATOR OWNER:(OI)(CI)(IO)(F)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  ---------------------

  C:\Program Files (x86)
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\TrustedInstaller:(F)
  NT SERVICE\TrustedInstaller:(CI)(IO)(F)
  NT AUTHORITY\SYSTEM:(M)
  NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
  BUILTIN\Administrators:(M)
  BUILTIN\Administrators:(OI)(CI)(IO)(F)
  BUILTIN\Users:(RX)
  BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
  CREATOR OWNER:(OI)(CI)(IO)(F)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  ---------------------

  C:\windows
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\TrustedInstaller:(F)
  NT SERVICE\TrustedInstaller:(CI)(IO)(F)
  NT AUTHORITY\SYSTEM:(M)
  NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
  BUILTIN\Administrators:(M)
  BUILTIN\Administrators:(OI)(CI)(IO)(F)
  BUILTIN\Users:(RX)
  BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
  CREATOR OWNER:(OI)(CI)(IO)(F)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(RX)
  APPLICATION PACKAGE AUTHORITY\ALL RESTRICTED APPLICATION PACKAGES:(OI)(CI)(IO)(GR,GE)
  ---------------------


vuln_id: V-220718
rule_id: SV-220718r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9909794486C8A4818F6C510A4F518CE94F2C267A
  ~~~~~
  Feature Name:		IIS-WebServerRole
  State:			Disabled

  Feature Name:		IIS-HostableWebCore
  State:			Disabled


vuln_id: V-220719
rule_id: SV-220719r958480_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 057BFFF89AE80F23B6898EEDE6ACB7A2A582F923
  ~~~~~
  Feature Name:		SNMP
  State:			Not an available Windows OS feature

  File 'C:\windows\System32\SNMP.exe' - Does not exist


vuln_id: V-220720
rule_id: SV-220720r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3839C93396402C2D1935C0A79A5EA5F84FD89657
  ~~~~~
  Feature Name:		SimpleTCP
  State:			Disabled

  Service 'simptcp' - Does not exist


vuln_id: V-220721
rule_id: SV-220721r958480_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A81D9B5E938646D417819ED5BF998BADD70640B9
  ~~~~~
  Feature Name:		TelnetClient
  State:			Disabled

  File 'C:\windows\System32\telnet.exe' - Does not exist


vuln_id: V-220722
rule_id: SV-220722r958480_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1E760C41C9A5B472A534793B2607BA02D749FD4A
  ~~~~~
  Feature Name:		TFTP
  State:			Disabled

  File 'C:\windows\System32\TFTP.exe' - Does not exist


vuln_id: V-220723
rule_id: SV-220723r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6D1B1446FB5CC2634D5EADF74C6B8A5903ECB08C
  ~~~~~
  No .p12 or .pfx certificate files found.


vuln_id: V-220724
rule_id: SV-220724r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 42EA5C27D5483DD6040559A5A9C913E4303B2B82
  ~~~~~
  3rd-Party Firewall detected:
  ----------------------------
  WMI Namespace:	ROOT/SecurityCenter2
  WMI Class:		FirewallProduct
  Display Name:		Trellix Endpoint Security
  Product State:		Off

  No 3rd-Party firewall has been found to be enabled.


vuln_id: V-220726
rule_id: SV-220726r958928_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 82C3F1B697DB48695C0120630E2A8ED6B8252DF2
  ~~~~~
  Data Execution Prevention is configured to 'OptIn'


  Windows Boot Loader
  -------------------
  identifier              {current}
  device                  partition=C:
  path                    \windows\system32\winload.efi
  description             Windows 10
  locale                  en-US
  inherit                 {bootloadersettings}
  recoverysequence        {86fa2db6-faa5-11ed-8cb5-f1e0456ab8cf}
  displaymessageoverride  Recovery
  recoveryenabled         Yes
  isolatedcontext         Yes
  allowedinmemorysettings 0x15000075
  osdevice                partition=C:
  systemroot              \windows
  resumeobject            {86fa2db4-faa5-11ed-8cb5-f1e0456ab8cf}
  nx                      OptIn
  bootmenupolicy          Standard


vuln_id: V-220727
rule_id: SV-220727r958928_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: E6502904487C2D388E0134DE9AA5D3378AFB5240
  ~~~~~
  Windows 10 version is 2009 so this requirement is NA.


vuln_id: V-220728
rule_id: SV-220728r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: EF2E777D19D164429E77EB2DEECD9B140F75712C
  ~~~~~
  Feature Name:		MicrosoftWindowsPowerShellV2
  State:			Disabled

  Feature Name:		MicrosoftWindowsPowerShellV2Root
  State:			Disabled


vuln_id: V-220729
rule_id: SV-220729r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C3D9F8A0D5CD58710869EE3531168EDEC3A52D96
  ~~~~~
  The Windows Feature 'SMB1Protocol' is Disabled


vuln_id: V-220730
rule_id: SV-220730r958478_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 7F4B25627DA8CBF9E487087648DD919E3D09FB08
  ~~~~~
  V-220729 is configured so this requirement is NA.


vuln_id: V-220732
rule_id: SV-220732r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F1E9FF02EC916A0AB65DEC2E186472333B1367D3
  ~~~~~
  Secondary Logon service is Disabled and Stopped

  Name:		seclogon
  DisplayName:	Secondary Logon
  StartType:	Disabled
  Status:		Stopped


vuln_id: V-220733
rule_id: SV-220733r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 31FA001D95F799B1779974DAE788547F7248BA04
  ~~~~~
  No unresolved SIDs are assigned any User Right


vuln_id: V-220734
rule_id: SV-220734r958478_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 39551D4D0AF79B59E75A7C1C89B3FFD9CFD2900C
  ~~~~~
  Get-PnpDevice did not return any Bluetooth devices so this requirement is NA.


vuln_id: V-220738
rule_id: SV-220738r958552_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 1704E06411BF37EE4D58AB3BAF279A6FEEAFEA02
  ~~~~~
  System is not virtual so this requirement is NA.

  Manufacturer:	HP
  Model:		HP ProDesk 600 G6 Microtower PC


vuln_id: V-220739
rule_id: SV-220739r958736_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 45DDCAF75C302AFBAF4F0083BDF37443F28A83CC
  ~~~~~
  'Reset account lockout counter after' is Configured

  LockoutDuration: 15


vuln_id: V-220740
rule_id: SV-220740r958388_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 41AA04D471372F76F2904EE0EF5CA66462310C29
  ~~~~~
  'Account lockout threshold' is Configured

  LockoutBadCount: 3


vuln_id: V-220741
rule_id: SV-220741r958388_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C7A0EE0ADBB8B8A24BDEA6EC108E7DA83CCEAB1C
  ~~~~~
  'Reset account lockout counter after' is Configured

  ResetLockoutCount: 15


vuln_id: V-220742
rule_id: SV-220742r1000079_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3D66E73980452DD8BD3CA8FE1C7ACB35BFFBF1E0
  ~~~~~
  'Enforce password history' is Configured

  PasswordHistorySize: 24


vuln_id: V-220743
rule_id: SV-220743r1051020_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DCF0D84A66291D6B08E64E7CDECB346B977B8E44
  ~~~~~
  'Maximum Password Age' is Configured

  MaximumPasswordAge: 60


vuln_id: V-220744
rule_id: SV-220744r1051021_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C0EA9DC4F33916CB6458AECF6144EA38763BD20B
  ~~~~~
  'Minimum Password Age' is Configured

  MinimumPasswordAge: 1


vuln_id: V-220745
rule_id: SV-220745r1051022_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6BE08ACAB8AD3365003019D2702FDF3075E0F32E
  ~~~~~
  'Minimum password length' is Configured

  MinimumPasswordLength: 14


vuln_id: V-220746
rule_id: SV-220746r1051023_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 26F570536C8CEA59E2945B3739F44E08FA2096F8
  ~~~~~
  'Password must meet complexity requirements' is Configured

  PasswordComplexity: 1


vuln_id: V-220747
rule_id: SV-220747r1051024_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0C3874C178BF034376FC830F77095A4B14233118
  ~~~~~
  'Store passwords using reversible encryption' is Disabled

  ClearTextPassword: 0


vuln_id: V-220748
rule_id: SV-220748r991578_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DA7DF341CB41A0B60FB92B392D3AA616EB0F8C60
  ~~~~~
  Credential Validation:	Success and Failure


vuln_id: V-220750
rule_id: SV-220750r958368_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E026B0CB713D941C6AC9CDB0976AD1DDCB8564DE
  ~~~~~
  Security Group Management:	Success


vuln_id: V-220751
rule_id: SV-220751r958368_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3AA7E01468B70DEFA406DABDAF58FAD0F1E7BE63
  ~~~~~
  User Account Management:	Success and Failure


vuln_id: V-220753
rule_id: SV-220753r1051025_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DCA308C4975262F51F29DAED106C291E8960644D
  ~~~~~
  Plug and Play Events:	Success


vuln_id: V-220754
rule_id: SV-220754r1051026_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 812B92C97F6B9D7E16F6294B301DF81AC57720AA
  ~~~~~
  Process Creation:	Success


vuln_id: V-220755
rule_id: SV-220755r991578_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 93A0853E44773D10564D3ED14795A30CC6191C41
  ~~~~~
  Account Lockout:	Failure


vuln_id: V-220756
rule_id: SV-220756r991578_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6318D6520C67CFD4EB30011DEB0BCAC76DCB6CC8
  ~~~~~
  Group Membership:	Success


vuln_id: V-220757
rule_id: SV-220757r958406_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7A950E7532BE5A2E4F09E8A1E67C0FDAF4E8851D
  ~~~~~
  Logoff:	Success


vuln_id: V-220758
rule_id: SV-220758r958406_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6557C8974FEC4237F5E900001DCA960F93582900
  ~~~~~
  Logon:	Success and Failure


vuln_id: V-220760
rule_id: SV-220760r991578_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BA41DFC702C29EE8A4A2E9FCA6F596F4BCEB5161
  ~~~~~
  Special Logon:	Success


vuln_id: V-220761
rule_id: SV-220761r991583_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0455215FA05B68D7636085140D0F6948977838FA
  ~~~~~
  File Share:	Success and Failure


vuln_id: V-220763
rule_id: SV-220763r991583_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 11B3505989ED9CB1A87C28ADEB0006351D13AF0E
  ~~~~~
  Other Object Access Events:	Success and Failure


vuln_id: V-220765
rule_id: SV-220765r991583_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2407B24433D2B954716743C3A3B170CD2F14F60B
  ~~~~~
  Removable Storage:	Success and Failure


vuln_id: V-220767
rule_id: SV-220767r991579_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D7671610543864B4122F2BC729D6BEF505693247
  ~~~~~
  Audit Policy Change:	Success


vuln_id: V-220768
rule_id: SV-220768r958732_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 74E73B7E4CAE038B8D1A0EEE0B6B63A38790EF6E
  ~~~~~
  Authentication Policy Change:	Success


vuln_id: V-220769
rule_id: SV-220769r991579_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2CF193FE8E8629806C5FA0FC4E522752CA150F38
  ~~~~~
  Authorization Policy Change:	Success


vuln_id: V-220770
rule_id: SV-220770r958732_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5ADFCE8D22838148E00425A6936CEA3800FE7AA9
  ~~~~~
  Sensitive Privilege Use:	Success and Failure


vuln_id: V-220772
rule_id: SV-220772r991586_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 632F6B588FA4AF190993D337477F3ECADB75FEC7
  ~~~~~
  IPSec Driver:	Failure


vuln_id: V-220773
rule_id: SV-220773r991579_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 65E40F6B959EF218D68DFC455C5196DC70924EDC
  ~~~~~
  Other System Events:	Success and Failure


vuln_id: V-220775
rule_id: SV-220775r958732_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 74302EBA5C1C13D9FC589EBADB52C502534366D6
  ~~~~~
  Security State Change:	Success


vuln_id: V-220776
rule_id: SV-220776r958732_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7571EDCEC40BA7B892BBFFB7B1A91933D6B26E8D
  ~~~~~
  Security System Extension:	Success


vuln_id: V-220777
rule_id: SV-220777r958732_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BA1B5CB4CECAEB661B4B6DC8FB69F37F5D308239
  ~~~~~
  System Integrity:	Success and Failure


vuln_id: V-220779
rule_id: SV-220779r958752_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F2418B961E1473B9DE2D8AC6A4EDFDC071036AA7
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 32768 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Application
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-220780
rule_id: SV-220780r958752_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 410610951479A93EBAA4D742D6C62B553FFCC5B6
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 1024000 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\Security
  Value Name:	MaxSize
  Value:		0x000fa000 (1024000)
  Type:		REG_DWORD


vuln_id: V-220781
rule_id: SV-220781r958752_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 489B881681D68174887D297A098A37A658C8A4DD
  ~~~~~
  'Specify the maximum log file size (KB)' is Enable: (Maximum Log Size (KB) of 32768 or greater) 

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\EventLog\System
  Value Name:	MaxSize
  Value:		0x00008000 (32768)
  Type:		REG_DWORD


vuln_id: V-220782
rule_id: SV-220782r958434_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4CDBFD3690EC549DDFFFB51C92201C493EF00B4B
  ~~~~~
  C:\windows\System32\Winevt\Logs\Application.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220783
rule_id: SV-220783r958434_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CE8AA1E475C7721743E3AFFD73B09912D17D565D
  ~~~~~
  C:\windows\System32\Winevt\Logs\Security.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220784
rule_id: SV-220784r958434_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 46DB62D699DC003F8072DA5CA34FBB2DDC3ED53D
  ~~~~~
  C:\windows\System32\Winevt\Logs\System.evtx
  ---------------------
  Default permissions are in place.

  Current ACL:
  NT SERVICE\EventLog:(I)(F)
  NT AUTHORITY\SYSTEM:(I)(F)
  BUILTIN\Administrators:(I)(F)
  ---------------------


vuln_id: V-220786
rule_id: SV-220786r958412_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 99F1D6888C196E2A612663A7D9F93227609572AC
  ~~~~~
  Other Policy Change Events:	Success and Failure


vuln_id: V-220787
rule_id: SV-220787r958412_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 83B0324896B9F1E212EC8AFB81C12A2CD071D25B
  ~~~~~
  Other Logon/Logoff Events:	Success and Failure


vuln_id: V-220789
rule_id: SV-220789r958412_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F37A20FF4D47C1504B7346B9B13E691565CAE1C2
  ~~~~~
  Detailed File Share:	Failure


vuln_id: V-220790
rule_id: SV-220790r958412_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A142DF7C7C59B26DC662163C294BF0C37FCA4777
  ~~~~~
  MPSSVC Rule-Level Policy Change:	Success and Failure


vuln_id: V-220792
rule_id: SV-220792r958478_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: 29B8147452F58C3C24F6A9507B138D2C09BDD8F2
  ~~~~~
  No camera detected so this requirement is NA.


vuln_id: V-220794
rule_id: SV-220794r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 936C50F902C44C0D68CF3E394852F5F03D22E703
  ~~~~~
  'Prevent enabling lock screen slide show' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization
  Value Name:	NoLockScreenSlideshow
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220795
rule_id: SV-220795r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D0E96E8C2AE11956B4C7E90C0DC40786616E7C1F
  ~~~~~
  'MSS: (DisableIPSourceRouting IPv6) IP source routing protection level (protects against packet spoofing)' is Highest protection, source routing is completely disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
  Value Name:	DisableIpSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220796
rule_id: SV-220796r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D620CAF8D08A5A7FBCF9811F9BECE656A64EA0E6
  ~~~~~
  'MSS: (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' is Highest protection, source routing is completely disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  Value Name:	DisableIPSourceRouting
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220797
rule_id: SV-220797r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0478878E3F4F00BC13BC64CB667E9AFD673A0682
  ~~~~~
  'MSS: (EnableICMPRedirect) Allow ICMP redirects to override OSPF generated routes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
  Value Name:	EnableICMPRedirect
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220798
rule_id: SV-220798r958902_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C8E96AA0CB60DE462BAA29FCA852ED95506E2C53
  ~~~~~
  'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netbt\Parameters
  Value Name:	NoNameReleaseOnDemand
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220799
rule_id: SV-220799r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:26
updated_at: 2026-01-14 17:57:26
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 30E45018BB7651DB88A5241CEB1F4E1159C948E7
  ~~~~~
  'Apply UAC restrictions to local accounts on network logons' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LocalAccountTokenFilterPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220800
rule_id: SV-220800r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7B07ED3ECA2CAD6E6EF5433B7B0D16EDA4ACD305
  ~~~~~
  'WDigest Authentication (disabling may require KB2871997)' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\Wdigest
  Value Name:	UseLogonCredential
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220801
rule_id: SV-220801r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C33E359580C405646EFE732E9C9A8001CA0E16C3
  ~~~~~
  'Remove "Run as Different User" from context menus' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Classes\batfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\cmdfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\exefile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Classes\mscfile\shell\runasuser
  Value Name:	SuppressionPolicy
  Value:		0x00001000 (4096)
  Type:		REG_DWORD


vuln_id: V-220802
rule_id: SV-220802r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7CFCC9E05DDAF5C85112F200991A5924DE30FA93
  ~~~~~
  'Enable insecure guest logons' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation
  Value Name:	AllowInsecureGuestAuth
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220803
rule_id: SV-220803r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 393FD3F9F314EA17F6A7048A3CFA6AB4DC74E5B8
  ~~~~~
  'Prohibit use of Internet Connection Sharing on your DNS domain network' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Network Connections
  Value Name:	NC_ShowSharedAccessUI
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220805
rule_id: SV-220805r971535_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F3BAF2F37A9EE096EC6D75CCB50F4F80C5A8F612
  ~~~~~
  'ECC Curve Order' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
  Value Name:	EccCurves
  Value:		NistP384 NistP256
  Type:		REG_MULTI_SZ


vuln_id: V-220806
rule_id: SV-220806r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 82B38F374F25481E13FFA8A129DCB132F5069F24
  ~~~~~
  'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy
  Value Name:	fMinimizeConnections (Not found)


vuln_id: V-220807
rule_id: SV-220807r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 429F4252FB8F6699C02681359AE6B1750873B4FF
  ~~~~~
  'Prohibit connection to non-domain networks when connected to domain authenticated network' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WcmSvc\GroupPolicy
  Value Name:	fBlockNonDomain
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220809
rule_id: SV-220809r958422_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: ADD2B1D96AA135BF2C7628C54E9A984DAF42B0E4
  ~~~~~
  'Include command line in process creation events' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Audit
  Value Name:	ProcessCreationIncludeCmdLine_Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220810
rule_id: SV-220810r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0AAE7791EBA4A06C080DFA9A8C60FF5A7E272667
  ~~~~~
  'Remote host allows delegation of non-exportable credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\CredentialsDelegation
  Value Name:	AllowProtectedCreds
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220811
rule_id: SV-220811r1016359_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A35F1C37518BA5BE7F9CEF7DDAAE6530ED947399
  ~~~~~
  RequiredSecurityProperties:		1, 2
  VirtualizationBasedSecurityStatus:	2


vuln_id: V-220812
rule_id: SV-220812r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 83848C949BBF8A4E2EBDBB4A433926F0E07188E0
  ~~~~~
  SecurityServicesRunning:		1


vuln_id: V-220813
rule_id: SV-220813r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 009983E38051D68CB7767AAF4C319EF951391443
  ~~~~~
  'Boot-Start Driver Initialization Policy' is Enabled: (Good, unknown and bad but critical)

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Policies\EarlyLaunch
  Value Name:	DriverLoadPolicy
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-220814
rule_id: SV-220814r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7557CBE1D798DD9C24316EE90023C69521D61C2D
  ~~~~~
  'Configure registry policy processing' is Enabled: (Process even if the Group Policy objects have not changed)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
  Value Name:	NoGPOListChanges
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220815
rule_id: SV-220815r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AD9A7497FE8CD47FB5AF348D0B743C308CD9D65A
  ~~~~~
  'Turn off downloading of print drivers over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers
  Value Name:	DisableWebPnPDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220816
rule_id: SV-220816r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2F9982102A61E5443396DF8FDC770F9E2C20F549
  ~~~~~
  'Turn off Internet download for Web publishing and online ordering wizards' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoWebServices
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220817
rule_id: SV-220817r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7780591C5B701047DBD161609A91B8C491C97280
  ~~~~~
  'Turn off printing over HTTP' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Printers
  Value Name:	DisableHTTPPrinting
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220818
rule_id: SV-220818r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: AE3557015A08DB12E5597F43A4E5F8B4B58E08CE
  ~~~~~
  'Support device authentication using certificate' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters
  Value Name:	DevicePKInitEnabled (Not found)


vuln_id: V-220819
rule_id: SV-220819r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C63F5407FB05305B58DC58070EE19D102A8982C0
  ~~~~~
  'Do not display network selection UI' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	DontDisplayNetworkSelectionUI
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220820
rule_id: SV-220820r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D31C60634D3CC16614EA5BDDF62BF323B5B9A25C
  ~~~~~
  'Enumerate local users on domain-joined computers' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	EnumerateLocalUsers
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220821
rule_id: SV-220821r1051027_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DEF4995148E29A1A9D587055844AEAA407FD7234
  ~~~~~
  'Require a password when a computer wakes (on battery)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51
  Value Name:	DCSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220822
rule_id: SV-220822r1051028_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BFA345F26AABB27839EE8AFC87597A3DDBD162E5
  ~~~~~
  'Require a password when a computer wakes (plugged in)' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51
  Value Name:	ACSettingIndex
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220823
rule_id: SV-220823r958524_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 710AE588AB6A9F5E0B92559BED20BF35AFCB73BE
  ~~~~~
  'Configure Solicited Remote Assistance' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fAllowToGetHelp
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220824
rule_id: SV-220824r971545_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 40E3D085D5C4B8BECD35CFE7A6BA8C4D346FDA19
  ~~~~~
  'Restrict Unauthenticated RPC clients' is Enabled: (Authenticated)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Rpc
  Value Name:	RestrictRemoteClients
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220825
rule_id: SV-220825r991589_rule
status: Not_Applicable
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT APPLICABLE on 10/23/2025
  ResultHash: B25A1A2ECA2675D310A41F0056F41DBFCEAB243E
  ~~~~~
  Operating system is 'Windows 10 Enterprise LTSC 2021' so this requirement is NA.


vuln_id: V-220826
rule_id: SV-220826r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 334CD2718F72D0A72C789D4EC35DDD8F555104A5
  ~~~~~
  'Turn off Inventory Collector' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppCompat
  Value Name:	DisableInventory
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220827
rule_id: SV-220827r958804_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 429F8E88ADA237E5E5322A9AFBD48B8E33D2C07A
  ~~~~~
  'Disallow Autoplay for non-volume devices' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoAutoplayfornonVolume
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220828
rule_id: SV-220828r958804_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 01637DF3E70F327F92A796B403FE836B3C86FDF8
  ~~~~~
  'Set the default behavior for AutoRun' is Enabled: (Do not execute any autorun commands)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	NoAutorun
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220829
rule_id: SV-220829r958804_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 13FD2420C2B8D6429B41A57DD6B60EA04E2990AA
  ~~~~~
  'Turn off AutoPlay' is Enabled: (All Drives)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
  Value Name:	NoDriveTypeAutoRun
  Value:		0x000000ff (255)
  Type:		REG_DWORD


vuln_id: V-220830
rule_id: SV-220830r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CFC843CAA9D6038AF5D5852099DD6A1BB493ED43
  ~~~~~
  'Use enhanced anti-spoofing when available' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Biometrics\FacialFeatures
  Value Name:	EnhancedAntiSpoofing
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220831
rule_id: SV-220831r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: DEA095E45CF9BF8C7FF2F5C4225B750C66E2B6B7
  ~~~~~
  'Turn off Microsoft consumer experiences' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent
  Value Name:	DisableWindowsConsumerFeatures
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220832
rule_id: SV-220832r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7E4F6B9D764BEC43054FB933A76FD46CEFEA5B6C
  ~~~~~
  'Enumerate administrator accounts on elevation' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI
  Value Name:	EnumerateAdministrators
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220833
rule_id: SV-220833r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 675DF5D96893954A753326C4A1C2DE41A7320803
  ~~~~~
  'Limit Enhanced diagnostic data to the minimum required by Windows Analytics' is Enabled: (Enable Windows Analytics collection)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection
  Value Name:	LimitEnhancedDiagnosticDataWindowsAnalytics
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220834
rule_id: SV-220834r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 14B9FBD5EC0F50908A19F2904EB7A05C25CC872E
  ~~~~~
  'Allow Telemetry' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection
  Value Name:	AllowTelemetry
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220835
rule_id: SV-220835r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1B980AE1F7833483336844BAEADF9F0CAF0BD5B9
  ~~~~~
  'Download Mode' is Enabled: (Any option except 'Internet')

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization
  Value Name:	DODownloadMode
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220836
rule_id: SV-220836r958478_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: 40CCA0704784DC82647DD021A5BABBF4C9FBA509
  ~~~~~
  'Configure Windows Defender SmartScreen' is NOT Enabled: (Warn and prevent bypass)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	EnableSmartScreen
  Value:		0x00000000 (0) [Expected 1]
  Type:		REG_DWORD

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	ShellSmartScreenLevel
  Value:		Block
  Type:		REG_SZ


vuln_id: V-220837
rule_id: SV-220837r958928_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4A63DDC6B914A33381BF478DA8F617983D075AE8
  ~~~~~
  'Turn off Data Execution Prevention for Explorer' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoDataExecutionPrevention (Not found)


vuln_id: V-220838
rule_id: SV-220838r958902_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6F4214738B47BDD9718A7512C9266DEA4E4E23C6
  ~~~~~
  'Turn off heap termination on corruption' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Explorer
  Value Name:	NoHeapTerminationOnCorruption (Not found)


vuln_id: V-220839
rule_id: SV-220839r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 980FF0DC97726ACDDD026BE76CF4FA439D23F0E8
  ~~~~~
  'Turn off shell protocol protected mode' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer
  Value Name:	PreXPSP2ShellProtocolBehavior (Not found)


vuln_id: V-220845
rule_id: SV-220845r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 91E44EA4952901ECB9C71FC575E75862091DAFD1
  ~~~~~
  'Enables or disables Windows Game Recording and Broadcasting' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR
  Value Name:	AllowGameDVR
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220846
rule_id: SV-220846r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4CEF5A54871AEE440F7A1BEB6AD066676E445A4E
  ~~~~~
  'Use a hardware security device' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork
  Value Name:	RequireSecurityDevice
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220847
rule_id: SV-220847r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FC6B1CECC3CFAF4C5174B34463A8237556972DF3
  ~~~~~
  'Minimum PIN length' is Enabled: (6 or greater)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity
  Value Name:	MinimumPINLength
  Value:		0x00000006 (6)
  Type:		REG_DWORD


vuln_id: V-220848
rule_id: SV-220848r1051029_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 338BC62939ABE731004ECB8DB57D03CF7B6B5B2E
  ~~~~~
  'Do not allow passwords to be saved' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	DisablePasswordSaving
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220849
rule_id: SV-220849r958524_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 649B63305BF44C135717D4368AF832D0654318E8
  ~~~~~
  'Do not allow drive redirection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fDisableCdm
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220850
rule_id: SV-220850r1051030_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 9543721DB11F02494E7ED66C64CBD374894522C8
  ~~~~~
  'Always prompt for password upon connection' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fPromptForPassword
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220851
rule_id: SV-220851r991554_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 08943A2B448533281BEE2C1020DD339D9FE588C1
  ~~~~~
  'Require secure RPC communication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	fEncryptRPCTraffic
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220852
rule_id: SV-220852r958408_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0C53D2EC2EA676A44E2B9D7BD6678B35A9150095
  ~~~~~
  'Set client connection encryption level' is Enabled: (High Level)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
  Value Name:	MinEncryptionLevel
  Value:		0x00000003 (3)
  Type:		REG_DWORD


vuln_id: V-220853
rule_id: SV-220853r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 3F4C76E881CBB1C19B94AB2CA617139F68420F8A
  ~~~~~
  'Prevent downloading of enclosures' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds
  Value Name:	DisableEnclosureDownload
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220854
rule_id: SV-220854r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 28C293E474B6B66AEE08C24C00A3F7E5499C0F18
  ~~~~~
  'Turn on Basic feed authentication over HTTP' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds
  Value Name:	AllowBasicAuthInClear (Not found)


vuln_id: V-220855
rule_id: SV-220855r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 176D0A2485AF508887C839ACDF2F4D36A9659917
  ~~~~~
  'Allow indexing of encrypted files' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search
  Value Name:	AllowIndexingEncryptedStoresOrItems
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220856
rule_id: SV-220856r1051031_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 591988E36B44158A6B5FD47B3E0A4AAA5E959EBC
  ~~~~~
  'Allow user control over installs' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	EnableUserControl
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220857
rule_id: SV-220857r1051032_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 453F878DFDBD58EA0B57A6EFB51F819380F02365
  ~~~~~
  'Always install with elevated privileges' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	AlwaysInstallElevated
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220858
rule_id: SV-220858r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 25956B5D4AA9F192272A0F7496A999EC40253412
  ~~~~~
  'Prevent Internet Explorer security prompt for Windows Installer scripts' is Not Configured in group policy which is acceptable per the STIG.

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Installer
  Value Name:	SafeForScripting (Not found)


vuln_id: V-220859
rule_id: SV-220859r991591_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 465601DA377FEF10B547A2FE7BE36790D6AFAEF4
  ~~~~~
  'Sign-in last interactive user automatically after a system-initiated restart' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	DisableAutomaticRestartSignOn
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220860
rule_id: SV-220860r958422_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: EB4A265C9E587BD9D606DF1E88D13CF74FE47192
  ~~~~~
  'Turn on PowerShell Script Block Logging' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ScriptBlockLogging
  Value Name:	EnableScriptBlockLogging
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220862
rule_id: SV-220862r958510_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 30889CFD34559B587AF9B23229EE47BF3019880E
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220863
rule_id: SV-220863r958848_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4A4CD99AD9B2D52A3D642DCC31C496CFF4E83E5A
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220865
rule_id: SV-220865r958510_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 05DABD310D5297F9FE1F997D158377A95C402A44
  ~~~~~
  'Allow Basic authentication' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	AllowBasic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220866
rule_id: SV-220866r958848_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4B17B5D6EF94B0E0F37FCDDEEB811EFC975C0103
  ~~~~~
  'Allow unencrypted traffic' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	AllowUnencryptedTraffic
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220867
rule_id: SV-220867r1051033_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1AA481372E4667D4FE24C95C9119B1D501E8D612
  ~~~~~
  'Disallow WinRM from storing RunAs credentials' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Service
  Value Name:	DisableRunAs
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220868
rule_id: SV-220868r958510_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 511153A33523CC0CB3BE2DD4DD561A858B374981
  ~~~~~
  'Disallow Digest authentication' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\WinRM\Client
  Value Name:	AllowDigest
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220869
rule_id: SV-220869r958400_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CD295ABCDFB51D0EE8DA52FAD5F6A33DF8038C9A
  ~~~~~
  'Let Windows apps activate with voice' is NOT configured to 'Enabled' with 'Default for all Apps:' set to 'Force Deny'.
  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy
  Value Name:	(NotFound)
  Value:		(NotFound)
  Type:		(NotFound)

  'Let Windows apps activate with voice while the system is locked' is configured to 'Enabled' with 'Default for all Apps:' set to 'Force Deny'.
  Registry Path:	HKLM:\\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy
  Value Name:	LetAppsActivateWithVoiceAboveLock
  Value:		2
  Type:		REG_DWORD


vuln_id: V-220870
rule_id: SV-220870r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: D02062E8EFA394EFD128CC780304DBFC3EAAE719
  ~~~~~
  'Turn on convenience PIN sign-in' is Disabled

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\System
  Value Name:	AllowDomainPINLogon
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220871
rule_id: SV-220871r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 641D5B0C1E325C0255D6AC4FA357A5C980716995
  ~~~~~
  'Allow Windows Ink Workspace' is Enabled: (On, but disallow access above lock)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace
  Value Name:	AllowWindowsInkWorkspace
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220872
rule_id: SV-220872r958478_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  Username: MONTFORD-POINT\W.Admin
  UserSID: S-1-5-21-1360995287-4027491577-3040029667-1106
  ResultHash: 8C1493AE761559D80F64571BC10E6034D9814EFD
  ~~~~~
  'Do not suggest third-party content in Windows spotlight' is Enabled

  Registry Path:	HKCU:\SOFTWARE\Policies\Microsoft\Windows\CloudContent
  Value Name:	DisableThirdPartySuggestions
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220902
rule_id: SV-220902r958524_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6F076B52FC6C5BE7DBAFCEAD9AD6E65054D1D24D
  ~~~~~
  'Enumeration policy for external devices incompatible with Kernel DMA Protection' is Enabled: (Block All)

  Registry Path:	HKLM:\SOFTWARE\Policies\Microsoft\Windows\Kernel DMA Protection
  Value Name:	DeviceEnumerationPolicy
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220903
rule_id: SV-220903r958448_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1E639BE4EE5A1CDEB45CD6D11961572DC003871E
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D73CA91102A2204A36459ED32213B467D7CE97FB
  NotAfter:		12/30/2029
  Installed:		True

  Subject:		CN=DoD Root CA 4, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	B8269F25DBD937ECAFD4C35A9838571723F2D026
  NotAfter:		7/25/2032
  Installed:		True

  Subject:		CN=DoD Root CA 5, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	4ECB5CC3095670454DA1CBD410FC921F46B8564B
  NotAfter:		6/14/2041
  Installed:		True

  Subject:		CN=DoD Root CA 6, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D37ECF61C0B4ED88681EF3630C4E2FC787B37AEF
  NotAfter:		1/24/2053
  Installed:		True


vuln_id: V-220904
rule_id: SV-220904r958448_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A7C5AB66360003520409137D264A0BD7302B272F
  ~~~~~
  Subject:		CN=ECA Root CA 4, OU=ECA, O=U.S. Government, C=US
  Thumbprint:	73E8BB08E337D6A5A6AEF90CFFDD97D9176CB582
  NotAfter:		12/30/2029
  Installed:		True


vuln_id: V-220905
rule_id: SV-220905r958448_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A2EC40048BA7B0A9F2D0A13E537C545D4F6F79D7
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=DoD Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	49CBE933151872E17C8EAE7F0ABA97FB610F6477
  NotAfter:		11/16/2024
  Installed:		True


vuln_id: V-220906
rule_id: SV-220906r1081051_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A49AC51E65251963BCF59A4603952BF695EF12C6
  ~~~~~
  Subject:		CN=DoD Root CA 3, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=US DoD CCEB Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	9B74964506C7ED9138070D08D5F8B969866560C8
  NotAfter:		7/18/2025
  Installed:		True

  Subject:		CN=DoD Root CA 6, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Issuer:		CN=US DoD CCEB Interoperability Root CA 2, OU=PKI, OU=DoD, O=U.S. Government, C=US
  Thumbprint:	D471CA32F7A692CE6CBB6196BD3377FE4DBCD106
  NotAfter:		7/18/2026
  Installed:		True


vuln_id: V-220907
rule_id: SV-220907r958726_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8A9F5422786D4EFACE58ACD7B0A7BB12DFFE3921
  ~~~~~
  HKLM:\SECURITY
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadPermissions, ChangePermissions
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SOFTWARE
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------

  HKLM:\SYSTEM
  ---------------------
  Default permissions are in place.

  Current ACL:
  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Administrators
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: BUILTIN\Users
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: CREATOR OWNER
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: FullControl
  AccessControlType	: Allow
  IdentityReference	: NT AUTHORITY\SYSTEM
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None

  RegistryRights		: ReadKey
  AccessControlType	: Allow
  IdentityReference	: S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681
  IsInherited		: False
  InheritanceFlags	: ContainerInherit
  PropagationFlags	: None
  ---------------------


vuln_id: V-220908
rule_id: SV-220908r958482_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: ED6509E61BF73EE080EA4058CF1EEF2D90139214
  ~~~~~
  'Accounts: Administrator account status' is Disabled

  EnableAdminAccount: 0


vuln_id: V-220909
rule_id: SV-220909r958504_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 4B36C634C9C40B0094FF0676E2CD029965645B6F
  ~~~~~
  'Accounts: Guest account status' is Disabled

  EnableGuestAccount: 0


vuln_id: V-220910
rule_id: SV-220910r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 11C8987DBFFC9052B48349887397485EE4575B9B
  ~~~~~
  'Accounts: Limit local account use of blank passwords to console logon only' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	LimitBlankPasswordUse
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220911
rule_id: SV-220911r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 938B5D59F6EEE4836658D1458955462833BA0985
  ~~~~~
  'Accounts: Rename administrator account' is Configured

  NewAdministratorName: X_Admin


vuln_id: V-220912
rule_id: SV-220912r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 65D963B5E42EA95D69DDA5CE0A378E6B2420D343
  ~~~~~
  'Accounts: Rename guest account' is Configured

  NewGuestName: Visitor


vuln_id: V-220913
rule_id: SV-220913r958442_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 324AD06F381FD021DAE56A525BB09066ECE5E5CF
  ~~~~~
  'Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	SCENoApplyLegacyAuditPolicy
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220914
rule_id: SV-220914r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C92AC1F7572F9B3171081EB2EEAAF362D261AA1F
  ~~~~~
  'Domain member: Digitally encrypt or sign secure channel data (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	RequireSignOrSeal
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220915
rule_id: SV-220915r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E8105F4A055719C6863012165C512F667D2DC2D5
  ~~~~~
  'Domain member: Digitally encrypt secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	SealSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220916
rule_id: SV-220916r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 685804E6BA9636AF386D9935CF3C842E8E5D1A87
  ~~~~~
  'Domain member: Digitally sign secure channel data (when possible)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	SignSecureChannel
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220917
rule_id: SV-220917r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 8D6ADB1CE377DE42DE0BD6F753A46706DCD5D69D
  ~~~~~
  'Domain member: Disable machine account password changes' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	DisablePasswordChange
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220918
rule_id: SV-220918r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FAE72969A576C11785DDAD15FA1C5F2F963658CF
  ~~~~~
  'Domain member: Maximum machine account password age' is Enabled: (30 or less but not 0)

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	MaximumPasswordAge
  Value:		0x0000001e (30)
  Type:		REG_DWORD


vuln_id: V-220919
rule_id: SV-220919r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A43C9B8CB640DBD916EC75B515875BE22877FB1B
  ~~~~~
  'Domain member: Require strong (Windows 2000 or Later) session key' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
  Value Name:	RequireStrongKey
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220920
rule_id: SV-220920r958402_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 61889039469BEE02CE032563F1503A67C9B510A6
  ~~~~~
  'Interactive logon: Machine inactivity limit' is Enabled: (900 or less but not 0)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	InactivityTimeoutSecs
  Value:		0x00000384 (900)
  Type:		REG_DWORD


vuln_id: V-220921
rule_id: SV-220921r958390_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E8B54A53D42E7E78768CD8651A8875ECA26F3615
  ~~~~~
  'Interactive logon: Message text for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeText
  Value:
  You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.
  By using this IS (which includes any device attached to this IS), you consent to the following conditions:
  -The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.
  -At any time, the USG may inspect and seize data stored on this IS.
  -Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG-authorized purpose.
  -This IS includes security measures (e.g., authentication and access controls) to protect USG interests--not for your personal benefit or privacy.
  -Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.
  Type:		REG_SZ


vuln_id: V-220922
rule_id: SV-220922r958390_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 94854FF1D86F23AA1E8C8DA8BD0A2FDD0916B300
  ~~~~~
  'Interactive logon: Message title for users attempting to log on' is Configured Properly

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	LegalNoticeCaption
  Value:		US Department of Defense Warning Statement
  Type:		REG_SZ


vuln_id: V-220923
rule_id: SV-220923r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C727B8F0E8A8C71CA56259690EAC8B0994E0B55A
  ~~~~~
  'Interactive logon: Number of previous logons to cache (in case domain controller is not available)' is Enabled: (10 or less)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  Value Name:	CachedLogonsCount
  Value:		10
  Type:		REG_SZ


vuln_id: V-220924
rule_id: SV-220924r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2CAAC2074B82986A1F2C53818B9A189E05AD0251
  ~~~~~
  'Interactive logon: Smart card removal behavior' is Lock Workstation or Force Logoff

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
  Value Name:	SCRemoveOption
  Value:		1
  Type:		REG_SZ


vuln_id: V-220925
rule_id: SV-220925r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C5A49E1CFD30A72F3C940AB429BAFD8E14AE6618
  ~~~~~
  'Microsoft network client: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220926
rule_id: SV-220926r987796_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C2C6D190B20781C6F7D78C96826F328EC59F9E7B
  ~~~~~
  'Microsoft network client: Send unencrypted password to third-party SMB servers' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters
  Value Name:	EnablePlainTextPassword
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220927
rule_id: SV-220927r958908_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: BD9225A28377EF999965AC233E0FD3FA86018149
  ~~~~~
  'Microsoft network server: Digitally sign communications (always)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
  Value Name:	RequireSecuritySignature
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220928
rule_id: SV-220928r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: A51800A7EB71E8DB49CCE183B779719692119D7F
  ~~~~~
  'Network access: Allow anonymous SID/Name translation' is Disabled

  LSAAnonymousNameLookup: 0


vuln_id: V-220929
rule_id: SV-220929r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2870C547CA5060B258B072ED5120B1CF7E989A0E
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictAnonymousSAM
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220930
rule_id: SV-220930r958524_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1051CF51ECBB5E3283B3A4B53296BE7627D31DDD
  ~~~~~
  'Network access: Do not allow anonymous enumeration of SAM accounts and shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictAnonymous
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220931
rule_id: SV-220931r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: F31069CC046E2D2CBDAD2721CFEC8E714042ED08
  ~~~~~
  'Network access: Let Everyone permissions apply to anonymous users' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	EveryoneIncludesAnonymous
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220932
rule_id: SV-220932r958524_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 19F7DCB438329890D8ED0ADB49701F95E47913B7
  ~~~~~
  'Network access: Restrict anonymous access to Named Pipes and Shares' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
  Value Name:	RestrictNullSessAccess
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220933
rule_id: SV-220933r1081053_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 7841756A49417E5B640EE51E3343CCEDE3E6FD7F
  ~~~~~
  'Network access: Restrict clients allowed to make remote calls to SAM' is Configured

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	RestrictRemoteSAM
  Value:		O:BAG:BAD:(A;;RC;;;BA)
  Type:		REG_SZ


vuln_id: V-220934
rule_id: SV-220934r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E93E254994B885B4BF73196B1C654A88D7A1CFB2
  ~~~~~
  'Network security: Allow LocalSystem NULL session fallback' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\MSV1_0
  Value Name:	allownullsessionfallback
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220935
rule_id: SV-220935r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1961C65D62E439DD994746E878FF5E58B7D0E689
  ~~~~~
  'Network security: Allow PKU2U authentication requests to this computer to use online identities' is Disabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\LSA\pku2u
  Value Name:	AllowOnlineID
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220936
rule_id: SV-220936r971535_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FA8A28E5C7305C47B185A011067CD50419C4016B
  ~~~~~
  'Network security: Configure encryption types allowed for Kerberos' is Enabled: (AES128_HMAC_SHA1, AES256_HMAC_SHA1, and Future encryption types)

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters
  Value Name:	SupportedEncryptionTypes
  Value:		0x7ffffff8 (2147483640)
  Type:		REG_DWORD


vuln_id: V-220937
rule_id: SV-220937r1051034_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CC740FB3C2FC52E2AA528E6AB393D9E2FB79E3B5
  ~~~~~
  'Network security: Do not store LAN Manager hash value on next password change' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	NoLMHash
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220938
rule_id: SV-220938r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2DB6BD8F09ADE45E5C4D9B0B24BFDBF70E5F49E5
  ~~~~~
  'Network security: LAN Manager authentication level' is Send NTLMv2 response only. Refuse LM & NTLM

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa
  Value Name:	LmCompatibilityLevel
  Value:		0x00000005 (5)
  Type:		REG_DWORD


vuln_id: V-220939
rule_id: SV-220939r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: CA96098204159CD21A974ACB15E4D5505B387F91
  ~~~~~
  'Network security: LDAP client signing requirements' is Negotiate signing

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Services\LDAP
  Value Name:	LDAPClientIntegrity
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220940
rule_id: SV-220940r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C175B6A8BA1223684134D0E2E59E6F7B89B1A067
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) clients' is 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  Value Name:	NTLMMinClientSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-220941
rule_id: SV-220941r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: C1CD32DB87A556AACC0477A01420E1F740E4BE43
  ~~~~~
  'Network security: Minimum session security for NTLM SSP based (including secure RPC) servers' is 'Require NTLMv2 session security' and 'Require 128-bit encryption'

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
  Value Name:	NTLMMinServerSec
  Value:		0x20080000 (537395200)
  Type:		REG_DWORD


vuln_id: V-220942
rule_id: SV-220942r959006_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 1CA705ED667092D89BECAE6AA40B0489C62A8841
  ~~~~~
  'System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy
  Value Name:	Enabled
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220943
rule_id: SV-220943r991589_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 0383A2D7E4FA7F9B6839578C9365C007DDDD1BA2
  ~~~~~
  'System objects: Strengthen default permissions of internal system objects (e.g. Symbolic links)' is Enabled

  Registry Path:	HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager
  Value Name:	ProtectionMode
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220944
rule_id: SV-220944r1051035_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 21BF47E4A5506372B793739D85C957AB1A09D4F2
  ~~~~~
  'User Account Control: Admin Approval Mode for the Built-in Administrator account' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	FilterAdministratorToken
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220945
rule_id: SV-220945r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: E735EC6F33A1169D2A60002C3D8D2515CA86CBC1
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode' is 'Prompt for consent on the secure desktop'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	ConsentPromptBehaviorAdmin
  Value:		0x00000002 (2)
  Type:		REG_DWORD


vuln_id: V-220946
rule_id: SV-220946r958484_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 6ACACB0827264AD5353FC62B6D49CB15E2E3D397
  ~~~~~
  'HKLM:\SOFTWARE\Microsoft\Cryptography\Calais\Readers' exists and is populated.

  'HKLM:\SOFTWARE\Microsoft\Cryptography\Calais\SmartCards' exists and is populated.


vuln_id: V-220947
rule_id: SV-220947r1051036_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 612DE6CC150D65A0C6EAECFD65EDF62CB3A9F23C
  ~~~~~
  'User Account Control: Behavior of the elevation prompt for standard users' is 'Automatically deny elevation requests'

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	ConsentPromptBehaviorUser
  Value:		0x00000000 (0)
  Type:		REG_DWORD


vuln_id: V-220948
rule_id: SV-220948r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 5496C0668A8A09249300A7E7262DFD46DCBE43E5
  ~~~~~
  'User Account Control: Detect application installations and prompt for elevation' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableInstallerDetection
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220949
rule_id: SV-220949r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 64B2C322F7C84A280007770D70BF56965D15C96F
  ~~~~~
  'User Account Control: Only elevate UIAccess applications that are installed in secure locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableSecureUIAPaths
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220950
rule_id: SV-220950r1051037_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: 2D70777D40743C5DBAB3D4DBE4BAFBCFC27BCC28
  ~~~~~
  'User Account Control: Run all administrators in Admin Approval Mode' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableLUA
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220951
rule_id: SV-220951r958518_rule
status: NotAFinding
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be NOT A FINDING on 10/23/2025
  ResultHash: FD7CB37316D10F1E3FED0BDCD0202F2A5CEAD796
  ~~~~~
  'User Account Control: Virtualize file and registry write failures to per-user locations' is Enabled

  Registry Path:	HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
  Value Name:	EnableVirtualization
  Value:		0x00000001 (1)
  Type:		REG_DWORD


vuln_id: V-220952
rule_id: SV-220952r1051038_rule
status: Open
hostname: MONT-WS-92040
host_ip: 164.231.187.72
workflow_status: Open
created_at: 2026-01-14 17:57:27
updated_at: 2026-01-14 17:57:27
finding_details:
  Evaluate-STIG 1.2507.5 (Scan-Windows10_Checks) found this to be OPEN on 10/23/2025
  ResultHash: C5C559038CF7763753A9CF7C4030B47AAC8FE4CB
  ~~~~~
  Enabled local administrator accounts with a password older than 60 days:
  ---------------------------
  Account:			dod_admin
  SID:				S-1-5-21-3703204072-2228436765-3422267048-1001
  Enabled:			True
  Password Last Set:	01/27/2022 19:47:48 (1364 days ago)


  LAPS Configuration:
  ---------------------------
  Policy Name:	Password Settings | Password Complexity
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordComplexity
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | Password Length
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordLength
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]

  Policy Name:	Password Settings | PasswordAge (Days)
  Path:			HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
  Value Name:	PasswordAgeDays
  Value:		(NotFound)
  Value Type:	(NotFound)
  Configured:	False [finding]


