search

c-bless / reveal

This project contains some PowerShell scripts used to collect system configurations or domain information. Furthermore it has a Flask based web application and API to import and analyze the results of collector scripts. It can export collected data to Excel via the Web-Interface or to JSON via API.
1 stars 1 forks source link

Add check for "SMB signing required" to collector script #80

Closed c-bless closed 3 months ago

c-bless commented 4 months ago

Description: Add checks for SMB signing required to collector scripts.

see also: Policy locations for SMB signing

Microsoft network client: Digitally sign communications (always)
Registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Parameters
Registry value: RequireSecuritySignature
Data Type: REG_DWORD
Data: 0 (disable), 1 (enable)

Microsoft network server: Digitally sign communications (always)
Registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters
Registry value: RequireSecuritySignature
Data Type: REG_DWORD Data: 0 (disable), 1 (enable)