scipag / HardeningKitty

HardeningKitty - Checks and hardens your Windows configuration
MIT License
1.27k stars 148 forks source link

Wrong default value for AlwaysInstallElevated #26

Closed v-p-b closed 1 year ago

v-p-b commented 1 year ago

According to the documentation:

"To install a package with elevated (system) privileges, set the AlwaysInstallElevated value to "1" under both of the following registry keys:"

This implies that when these keys are missing, the setting is not the same as if the setting value was 1.

This list (and others) however assume the value to be 1 by default:

https://github.com/scipag/HardeningKitty/blame/7751c3c303ba77f30d9d59362914018800eeb0bb/lists/finding_list_cis_microsoft_windows_10_enterprise_20h2_user.csv#L14

This results in false positive findings.

0x6d69636b commented 1 year ago

Thank you, this issue is fixed in the development repo and will be fixed here in the next update.