search

dev-sec / chef-windows-hardening

This chef cookbook provides windows hardening configurations for the DevSec Windows baseline profile.
http://dev-sec.io
96 stars 42 forks source link

added powershell hardening #18

Closed MattTunny closed 7 years ago

MattTunny commented 7 years ago

added powershell logging to windows-baseline https://github.com/dev-sec/windows-baseline/pull/9

MattTunny commented 7 years ago

Sorry forgot to add CIS link for these 2 settings: https://benchmarks.cisecurity.org/tools2/windows/CIS_Microsoft_Windows_Server_2012_R2_Benchmark_v2.2.1.pdf

18.9.84 Windows PowerShell 18.9.84.1 (L1) Ensure 'Turn on PowerShell Script Block Logging' is set to 'Disabled' (Scored) - Page 654 18.9.84.2 (L1) Ensure 'Turn on PowerShell Transcription' is set to 'Disabled' (Scored) - Page 656

chris-rock commented 7 years ago

@MattTunny Can you sign-off this commit? git commit --amend -s would do the trick. Once this is done, LGTM

MattTunny commented 7 years ago

ok done

chris-rock commented 7 years ago

Thank you @MattTunny for this great improvement.