search

0x6d69636b / windows_hardening

HardeningKitty and Windows Hardening Settings
MIT License
2.35k stars 313 forks source link

SMBv1 Support identifies "DisabledWithPayloadRemoved" as severe? #149

Closed yllekz closed 1 year ago

yllekz commented 1 year ago

Hello, I ran this script in audit mode and was perplexed to have the script identify a "severe" line item for when SMBv1 support is configured "DisabledWithPayloadRemoved" in a Server 2022 CIS L1 Benchmark image. Wouldn't this be more secure than the "Disabled" recommendation?

0x6d69636b commented 1 year ago

Good point, I didn't know that there are other states for disabled. I changed the operator for this finding to 'contains'