Wrong check in the control : 18.3.4 - Githubissues

ansible-lockdown / Windows-2019-CIS

CIS Baseline Ansible Role for Windows 2019

MIT License

130 stars 72 forks source link

Wrong check in the control : 18.3.4 #14

Closed Julieeeen closed 3 years ago

Julieeeen commented 3 years ago

In the control the value need to be 0 not 1

name: "SCORED | 18.3.4 | PATCH | L1 Ensure Enable Structured Exception Handling Overwrite Protection SEHOP is set to Enabled" win_regedit: path: HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\kernel name: DisableExceptionChainValidation data: 0 type: dword state: present when:
- rule_18_3_4 tags:
- level1-domaincontroller
- level1-memberserver
- rule_18.3.4
- patch