SCA wazuh for win2019 - Githubissues

HeyAmigos commented 2 years ago

1 Account Policies

1.1 Password Policy

[ ] 1.1.1 (L1) Ensure 'Enforce password history' is set to '24 or more password(s)' (Scored)
[x] 1.1.2 (L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0' (Scored)
[ ] 1.1.3 (L1) Ensure 'Minimum password age' is set to '1 or more day(s)' (Scored)
[ ] 1.1.4 (L1) Ensure 'Minimum password length' is set to '14 or more character(s)'
[ ] 1.1.5 (L1) Ensure 'Password must meet complexity requirements' is set to 'Enabled' (Scored)
[ ] 1.1.6 (L1) Ensure 'Store passwords using reversible encryption' is set to 'Disabled'(Scored)

HeyAmigos commented 2 years ago

1.1.2 Maximum password age (Scored) - 'not r:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters -> MaximumPasswordAge -> 0' - 'r:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters -> MaximumPasswordAge -> n:^(\d+) compare <= 60'

HeyAmigos commented 2 years ago

I'm busy working with Wazuh right now. Maybe my work will help someone.

HeyAmigos / scaforwindows2019

SCA wazuh for win2019 #1