Configure anti-malware software to automatically scan removable media.
| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CIS-10.4 | Configure Automatic Anti-Malware Scanning of Removable Media | mitigates | T1204.002 | Malicious File |
Comments
Automatic scanning can detect and quarantine a malicious file on removable media before a user opens or executes it. This creates a direct preventive relationship when blocking or quarantine is enforced.
References
|
| CIS-10.4 | Configure Automatic Anti-Malware Scanning of Removable Media | mitigates | T1091 | Replication Through Removable Media |
Comments
Malware commonly uses removable media to move between systems. Automatic scanning can identify and quarantine malicious files when the media is connected, directly reducing the effectiveness of removable-media propagation.
References
|