fbprogmbh / Audit-Test-Automation

FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.
https://fb-pro.com/audit-test-automation-package-audit-tap/
BSD 3-Clause "New" or "Revised" License
101 stars 31 forks source link

Check for "Remotely accessible registry paths and sub-paths" fails if order of entries is different #604

Closed TuemmlerKelch closed 2 months ago

TuemmlerKelch commented 2 months ago

Operating System

Microsoft Windows Server 2022

Report Name

Microsoft Windows Server 2022

Benchmark and ID (OPTIONAL)

No response

What happened?

When configuration is checked against baseline, a different order will lead to a false status. As order is not important here, we need to normalize and just check if there are more entries than the baseline allows. Every surplus path should then lead to false.

The check I am referring to ist this one: -Path "Registry::HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths" -Name "Machine"

What did you expect?

The check should have been true

Current Version?

I used the latest official release.