diff --git a/windows/security/threat-protection/TOC.md b/windows/security/threat-protection/TOC.md index 09f8f4921f..d60b30950a 100644 --- a/windows/security/threat-protection/TOC.md +++ b/windows/security/threat-protection/TOC.md @@ -1022,13 +1022,16 @@ ### [Windows security baselines](windows-security-baselines/windows-security-baselines.md) #### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) #### [Get support](windows-security-baselines/get-support-for-security-baselines.md) -####Windows Security Blog Posts -##### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) -##### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) -##### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) -##### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) -##### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) - +### [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) +#### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) +#### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) +#### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) +###Windows Security Blog Posts +#### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) +#### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +#### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) +#### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) +#### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) ### [MBSA removal and alternatives](mbsa-removal-and-guidance.md) diff --git a/windows/security/threat-protection/images/seccon-framework.png b/windows/security/threat-protection/images/seccon-framework.png new file mode 100644 index 0000000000..5a1c8ce2ad Binary files /dev/null and b/windows/security/threat-protection/images/seccon-framework.png differ diff --git a/windows/security/threat-protection/images/security-control-classification.png b/windows/security/threat-protection/images/security-control-classification.png new file mode 100644 index 0000000000..75467f2098 Binary files /dev/null and b/windows/security/threat-protection/images/security-control-classification.png differ diff --git a/windows/security/threat-protection/images/security-control-deployment-methodologies.png b/windows/security/threat-protection/images/security-control-deployment-methodologies.png new file mode 100644 index 0000000000..4f869474e2 Binary files /dev/null and b/windows/security/threat-protection/images/security-control-deployment-methodologies.png differ diff --git a/windows/security/threat-protection/windows-security-baselines/TOC.md b/windows/security/threat-protection/windows-security-baselines/TOC.md new file mode 100644 index 0000000000..f5a4fbd73a --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/TOC.md @@ -0,0 +1,15 @@ +# [Windows security compliance](windows-security-baselines/windows-security-compliance.md) + +## [Windows security baselines](windows-security-baselines/windows-security-baselines.md) +### [Security Compliance Toolkit](windows-security-baselines/security-compliance-toolkit-10.md) +### [Get support](windows-security-baselines/get-support-for-security-baselines.md) +## [Windows SECCON framework](windows-security-baselines/windows-security-configuration-framework.md) +### [SECCON 5 enterprise security](windows-security-baselines/seccon-5-enterprise-security.md) +### [SECCON 4 enterprise high security](windows-security-baselines/seccon-4-high-enterprise-security.md) +### [SECCON 3 enterprise VIP security](windows-security-baselines/seccon-3-vip-enterprise-security.md) +##Windows Security Blog Posts +### [Sticking with Well-Known and Proven Solutions](windows-security-baselines/sticking-with-well-known-and-proven-solutions.md) +### [Why We’re Not Recommending "FIPS Mode" Anymore](windows-security-baselines/why-were-not-recommending-fips-mode-anymore.md) +### [Configuring Account Lockout](windows-security-baselines/configuring-account-lockout.md) +### [Blocking Remote Use of Local Accounts](windows-security-baselines/blocking-remote-use-of-local-accounts.md) +### [Dropping the “Untrusted Font Blocking” setting](windows-security-baselines/dropping-the-untrusted-font-blocking-setting.md) \ No newline at end of file diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md new file mode 100644 index 0000000000..0ee6bba877 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-3-enterprise-VIP-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 3 Enterprise VIP Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 3 Enterprise VIP Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md new file mode 100644 index 0000000000..18545b8fa1 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-4-enterprise-high-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 4 Enterprise High Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 4 Enterprise High Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md b/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md new file mode 100644 index 0000000000..d7f4409b58 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/seccon-5-enterprise-security.md @@ -0,0 +1,24 @@ +--- +title: SECCON 5 Enterprise Security +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# SECCON 5 Enterprise Security + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md b/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md index 2766b15d05..af866029c2 100644 --- a/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-baselines.md @@ -58,12 +58,12 @@ You can download the security baselines from the [Microsoft Download Center](htt The security baselines are included in the [Security Compliance Toolkit (SCT)](security-compliance-toolkit-10.md), which can be downloaded from the Microsoft Download Center. The SCT also includes tools to help admins manage the security baselines. -[![Security Compliance Toolkit](images/security-compliance-toolkit-1.png)](security-compliance-toolkit-10.md) -[![Get Support](images/get-support.png)](get-support-for-security-baselines.md) +[![Security Compliance Toolkit](./../images/security-compliance-toolkit-1.png)](security-compliance-toolkit-10.md) +[![Get Support](./../images/get-support.png)](get-support-for-security-baselines.md) ## Community -[![Microsoft Security Guidance Blog](images/community.png)](https://blogs.technet.microsoft.com/secguide/) +[![Microsoft Security Guidance Blog](./../images/community.png)](https://blogs.technet.microsoft.com/secguide/) ## Related Videos @@ -73,8 +73,7 @@ You may also be interested in this msdn channel 9 video: ## See Also - [System Center Configuration Manager (SCCM)](https://www.microsoft.com/cloud-platform/system-center-configuration-manager) -- [Operations Management Suite](https://www.microsoft.com/cloud-platform/operations-management-suite) -- [Configuration Management for Nano Server](https://blogs.technet.microsoft.com/grouppolicy/2016/05/09/configuration-management-on-servers/) +- [Azure Monitor](https://docs.microsoft.com/azure/azure-monitor/) - [Microsoft Security Guidance Blog](https://blogs.technet.microsoft.com/secguide/) - [Microsoft Security Compliance Toolkit Download](https://www.microsoft.com/download/details.aspx?id=55319) - [Microsoft Download Center](https://www.microsoft.com/download/details.aspx?id=55319) diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md b/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md new file mode 100644 index 0000000000..6a59458bba --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-compliance.md @@ -0,0 +1,23 @@ +--- +title: Windows security compliance +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Windows security compliance + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 diff --git a/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md new file mode 100644 index 0000000000..fbd3d594b6 --- /dev/null +++ b/windows/security/threat-protection/windows-security-baselines/windows-security-configuration-framework.md @@ -0,0 +1,26 @@ +--- +title: Windows Security Configuration Framework +description: This article, and the articles it links to, describe how to use Windows security baselines in your organization +keywords: virtualization, security, malware +ms.prod: w10 +ms.mktglfcycl: deploy +ms.localizationpriority: medium +ms.author: appcompatguy +author: appcompatguy +manager: dansimp +audience: ITPro +ms.collection: M365-security-compliance +ms.topic: conceptual +ms.date: 04/05/2018 +--- + +# Windows Security Configuration Framework + +**Applies to** + +- Windows 10 +- Windows Server 2016 +- Office 2016 + + +