Where to find CIS Benchmarks/Baselines for Windows 10
Hello I am trying to locate CIS benchmarks/compliance baselines specifically targeting Windows 10. This documentation implies that these exist somewhere within the scope of the Azure/Intune/Endpoint/Defender/Security portals: https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-security-baselines?view=o365-worldwide "Security baselines provide support for Center for Internet Security (CIS) benchmarks for Windows 10, Windows 11, and Windows Server 2008 R2 and above, as well as Security Technical Implementation Guides (STIG) benchmarks for Windows 10 and Windows Server 2019" However, I have been unable to locate these. The documentation says: "Go to Vulnerability management > Baselines assessment in the Microsoft 365 Defender portal". However, the menu item "Baselines assessment" does not show at all in my view of that portal using a GA login. I have tried activating a trial which I thought may hold the answer, but this does not appear to have surfaced anything new: https://security.microsoft.com/tvmPremiumTrial180daySolution We're a UK-based CSP customer, if that matters. I would be grateful for any advice as to where we can find these benchmarks and make use of them for our endpoint managed devices. If these benchmarks represent a feature which is yet to be made generally available, any information as to timelines to a release would also be immensely useful. Many thanks in advance, Robert
Strange Baseline behavior version 2020
Hello Everyone! After creating a new baseline, the baseline has a strange behavior: It randomly disappear from the console or appear with strange character in name or incongruent state in Deployed or Status columns. Any suggestion on what to check? Thank you Update: I open a case with the support and they found a SQL query error in SMSProv.log Exception in SMS Provider!~~WIN32 Exception : ACCESS_VIOLATION~Description : The thread tried to read from or write to a virtual address for which it does not have the appropriate access. They're still investigating on this issue.