PowerSTIG
2.4.0.0
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rules t
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rules that have allowable ranges.
This module is intended to be used by additional automation as a lightweight portable “database” to audit and enforce the parsed STIG data.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
Copyright 2019
Package Details
Author(s)
- Adam Haynes
Tags
DSC DesiredStateConfiguration STIG PowerStig
Functions
Get-OrgSettingsObject Get-DomainName Get-StigList New-StigCheckList
DSCResources
Browser DotNetFramework FireFox IisServer IisSite Office OracleJRE SqlServer WindowsClient WindowsDnsServer WindowsFirewall WindowsServer
Dependencies
-
- AccessControlDsc (= 1.2.0)
- AuditPolicyDsc (= 1.2.0)
- FileContentDsc (= 1.1.0.108)
- PolicyFileEditor (= 3.0.1)
- SecurityPolicyDsc (= 2.4.0)
- SqlServerDsc (= 12.1.0)
- WindowsDefenderDsc (= 1.0.0)
- xDnsServer (= 1.11.0)
- xPSDesiredStateConfiguration (= 8.3.0)
- xWebAdministration (= 2.3.0)
- xWinEventLog (= 1.2.0)
Release Notes
* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#246](https://github.com/Microsoft/PowerStig/issues/246): IIS Server rule V-76737 contains an incorrect value
* Fixed [#225](https://github.com/Microsoft/PowerStig/issues/225): Update PowerStig integration tests to consolidate duplicate code.
* Fixed [#160](https://github.com/Microsoft/PowerStig/issues/160): PowerStig.Convert needs to handle new registry rules without affecting existing code
* Fixed [#201](https://github.com/Microsoft/PowerStig/issues/201): Update PowerStig integration tests to account for skips and exceptions.
* Fixed [#260](https://github.com/Microsoft/PowerStig/issues/260): FireFox Composite Resource configuration applies correctly, but never passes a Test-DscConfiguration.
* Fixed [#244](https://github.com/Microsoft/PowerStig/issues/244): IIS Server rule V-76727.b org setting test fails
* Fixed [#265](https://github.com/Microsoft/PowerStig/issues/265): Fixed UserRightsAssignment split rule bug.
* Fixed [#267](https://github.com/Microsoft/PowerStig/issues/267): Fixed winlogon registry path parser bug.
* Fixed [#238](https://github.com/Microsoft/PowerStig/issues/238): Adds regex tracker for RegistryRule regex's.
* Fixed [#274](https://github.com/Microsoft/PowerStig/issues/274): UserRightsAssignment composite resource does not leverage the Force Parameter.
* Fixed [#280](https://github.com/Microsoft/PowerStig/issues/280): HKEY_CURRENT_USER is not needed with the cAdministrativeTemplateSetting composite resource.
* Windows Server 2012R2 Fixes
* V-36707 is now an org setting
* (DC only) V-2376 - V-2380 are migrated from manual to account policy rules.
* Added the following STIGs
* SQL Server 2016 Instance V1R3 [#186](https://github.com/Microsoft/PowerStig/issues/186)
* Windows Defender Antivirus V1R4 [#236](https://github.com/microsoft/PowerStig/issues/236)
* Mozilla Firefox V4R24 [#261](https://github.com/Microsoft/PowerStig/issues/261)
* Windows Server 2016 V1R6 [#169](https://github.com/Microsoft/PowerStig/issues/169)
* Windows Server 2016 V1R7 [#251](https://github.com/Microsoft/PowerStig/issues/251)
* SQL Server 2012 Database V1R18 [#263](https://github.com/Microsoft/PowerStig/issues/263)
* Windows Server 2012R2 DC V2R15 [#267](https://github.com/Microsoft/PowerStig/issues/267)
* Windows 10 V1R16 [#269](https://github.com/Microsoft/PowerStig/issues/269)
* IIS Server 8.5 V1R6 [#256](https://github.com/Microsoft/PowerStig/issues/266)
* Windows Server 2016 V1R6 [#169](https://github.com/Microsoft/PowerStig/issues/169)
* Windows Server 2016 V1R7 [#251](https://github.com/Microsoft/PowerStig/issues/251)
* Windows Server 2012R2 DNS V1R11 STIG [#265](https://github.com/Microsoft/PowerStig/issues/265)
* AD Domain V2R12 [#270](https://github.com/Microsoft/PowerStig/issues/270)
FileList
- PowerStig.nuspec
- PowerStig.psd1
- PowerStig.psm1
- README.md
- LICENSE
- DSCResources\helper.psm1
- DSCResources\stigdata.usersettings.ps1
- DSCResources\Browser\Browser.psd1
- DSCResources\Browser\Browser.schema.psm1
- DSCResources\DotNetFramework\DotNetFramework.psd1
- DSCResources\DotNetFramework\DotNetFramework.schema.psm1
- DSCResources\FireFox\FireFox.psd1
- DSCResources\FireFox\FireFox.schema.psm1
- DSCResources\IisServer\IisServer.psd1
- DSCResources\IisServer\IisServer.schema.psm1
- DSCResources\IisSite\IisSite.psd1
- DSCResources\IisSite\IisSite.schema.psm1
- DSCResources\Office\Office.psd1
- DSCResources\Office\Office.schema.psm1
- DSCResources\OracleJRE\OracleJRE.psd1
- DSCResources\OracleJRE\OracleJRE.schema.psm1
- DSCResources\Resources\firefox.ReplaceText.ps1
- DSCResources\Resources\oraclejre.KeyValuePairFile.ps1
- DSCResources\Resources\readme.md
- DSCResources\Resources\SqlServer.ScriptQuery.ps1
- DSCResources\Resources\windows.AccessControl.ps1
- DSCResources\Resources\windows.AccountPolicy.ps1
- DSCResources\Resources\windows.AuditPolicySubcategory.ps1
- DSCResources\Resources\windows.cAdministrativeTemplateSetting.ps1
- DSCResources\Resources\windows.ProcessMitigation.ps1
- DSCResources\Resources\windows.Script.RootHint.ps1
- DSCResources\Resources\windows.Script.skip.ps1
- DSCResources\Resources\windows.Script.wmi.ps1
- DSCResources\Resources\windows.SecurityOption.ps1
- DSCResources\Resources\windows.UserRightsAssignment.ps1
- DSCResources\Resources\windows.WindowsFeature.ps1
- DSCResources\Resources\windows.xDnsServerSetting.ps1
- DSCResources\Resources\windows.xIisLogging.ps1
- DSCResources\Resources\windows.xIisMimeTypeMapping.ps1
- DSCResources\Resources\windows.xRegistry.ps1
- DSCResources\Resources\windows.xService.ps1
- DSCResources\Resources\windows.xWebAppPool.ps1
- DSCResources\Resources\windows.xWebConfigProperty.ps1
- DSCResources\Resources\windows.xWebSite.ps1
- DSCResources\Resources\windows.xWinEventLog.ps1
- DSCResources\SqlServer\SqlServer.psd1
- DSCResources\SqlServer\SqlServer.schema.psm1
- DSCResources\WindowsClient\WindowsClient.psd1
- DSCResources\WindowsClient\WindowsClient.schema.psm1
- DSCResources\WindowsDnsServer\WindowsDnsServer.psd1
- DSCResources\WindowsDnsServer\WindowsDnsServer.schema.psm1
- DSCResources\WindowsFirewall\WindowsFirewall.psd1
- DSCResources\WindowsFirewall\WindowsFirewall.schema.psm1
- DSCResources\WindowsServer\WindowsServer.psd1
- DSCResources\WindowsServer\WindowsServer.schema.psm1
- StigData\Processed\Mozilla-All-FireFox-4.23.org.default.xml
- StigData\Processed\Mozilla-All-FireFox-4.23.xml
- StigData\Processed\Mozilla-All-FireFox-4.24.org.default.xml
- StigData\Processed\Mozilla-All-FireFox-4.24.xml
- StigData\Processed\SqlServer-2012-Database-1.17.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.17.xml
- StigData\Processed\SqlServer-2012-Database-1.18.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.18.xml
- StigData\Processed\SqlServer-2012-Instance-1.16.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.16.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.xml
- StigData\Processed\Windows-10-Client-1.15.org.default.xml
- StigData\Processed\Windows-10-Client-1.15.xml
- StigData\Processed\Windows-10-Client-1.16.org.default.xml
- StigData\Processed\Windows-10-Client-1.16.xml
- StigData\Processed\Windows-2012R2-DC-2.14.org.default.xml
- StigData\Processed\Windows-2012R2-DC-2.14.xml
- StigData\Processed\Windows-2012R2-DC-2.15.org.default.xml
- StigData\Processed\Windows-2012R2-DC-2.15.xml
- StigData\Processed\Windows-2012R2-DNS-1.10.org.default.xml
- StigData\Processed\Windows-2012R2-DNS-1.10.xml
- StigData\Processed\Windows-2012R2-DNS-1.11.org.default.xml
- StigData\Processed\Windows-2012R2-DNS-1.11.xml
- StigData\Processed\Windows-2012R2-IISServer-1.5.org.default.xml
- StigData\Processed\Windows-2012R2-IISServer-1.5.xml
- StigData\Processed\Windows-2012R2-IISServer-1.6.org.default.xml
- StigData\Processed\Windows-2012R2-IISServer-1.6.xml
- StigData\Processed\Windows-2012R2-IISSite-1.2.org.default.xml
- StigData\Processed\Windows-2012R2-IISSite-1.2.xml
- StigData\Processed\Windows-2012R2-IISSite-1.5.org.default.xml
- StigData\Processed\Windows-2012R2-IISSite-1.5.xml
- StigData\Processed\Windows-2012R2-MS-2.13.org.default.xml
- StigData\Processed\Windows-2012R2-MS-2.13.xml
- StigData\Processed\Windows-2012R2-MS-2.14.org.default.xml
- StigData\Processed\Windows-2012R2-MS-2.14.xml
- StigData\Processed\Windows-2016-DC-1.6.md
- StigData\Processed\Windows-2016-DC-1.6.org.default.xml
- StigData\Processed\Windows-2016-DC-1.6.xml
- StigData\Processed\Windows-2016-DC-1.7.org.default.xml
- StigData\Processed\Windows-2016-DC-1.7.xml
- StigData\Processed\Windows-2016-MS-1.6.md
- StigData\Processed\Windows-2016-MS-1.6.org.default.xml
- StigData\Processed\Windows-2016-MS-1.6.xml
- StigData\Processed\Windows-2016-MS-1.7.org.default.xml
- StigData\Processed\Windows-2016-MS-1.7.xml
- StigData\Processed\Windows-All-ADDomain-2.10.org.default.xml
- StigData\Processed\Windows-All-ADDomain-2.10.xml
- StigData\Processed\Windows-All-ADDomain-2.9.org.default.xml
- StigData\Processed\Windows-All-ADDomain-2.9.xml
- StigData\Processed\Windows-All-ADForest-2.7.org.default.xml
- StigData\Processed\Windows-All-ADForest-2.7.xml
- StigData\Processed\Windows-All-ADForest-2.8.org.default.xml
- StigData\Processed\Windows-All-ADForest-2.8.xml
- StigData\Processed\Windows-All-Domain-2.11.org.default.xml
- StigData\Processed\Windows-All-Domain-2.11.xml
- StigData\Processed\Windows-All-Domain-2.12.org.default.xml
- StigData\Processed\Windows-All-Domain-2.12.xml
- StigData\Processed\Windows-All-DotNet4-1.4.org.default.xml
- StigData\Processed\Windows-All-DotNet4-1.4.xml
- StigData\Processed\Windows-All-DotNet4-1.6.org.default.xml
- StigData\Processed\Windows-All-DotNet4-1.6.xml
- StigData\Processed\Windows-All-Excel2013-1.7.org.default.xml
- StigData\Processed\Windows-All-Excel2013-1.7.xml
- StigData\Processed\Windows-All-FW-1.6.org.default.xml
- StigData\Processed\Windows-All-FW-1.6.xml
- StigData\Processed\Windows-All-IE11-1.15.org.default.xml
- StigData\Processed\Windows-All-IE11-1.15.xml
- StigData\Processed\Windows-All-IE11-1.16.org.default.xml
- StigData\Processed\Windows-All-IE11-1.16.xml
- StigData\Processed\Windows-All-OracleJRE8-1.5.org.default.xml
- StigData\Processed\Windows-All-OracleJRE8-1.5.xml
- StigData\Processed\Windows-All-Outlook2013-1.12.org.default.xml
- StigData\Processed\Windows-All-Outlook2013-1.12.xml
- StigData\Processed\Windows-All-Outlook2013-1.13.org.default.xml
- StigData\Processed\Windows-All-Outlook2013-1.13.xml
- StigData\Processed\Windows-All-PowerPoint2013-1.6.org.default.xml
- StigData\Processed\Windows-All-PowerPoint2013-1.6.xml
- StigData\Processed\Windows-All-Word2013-1.6.org.default.xml
- StigData\Processed\Windows-All-Word2013-1.6.xml
- StigData\Processed\Windows-Defender-Antivirus-1.4.org.default.xml
- StigData\Processed\Windows-Defender-Antivirus-1.4.xml
- Module\Common\Common.psm1
- Module\Common\Data.ps1
- Module\Common\Function.Helper.ps1
- Module\Common\Function.RangeConversion.ps1
- Module\Common\Function.Xccdf.ps1
- Module\STIG\STIG.psm1
- Module\STIG.Checklist\Functions.ps1
- Module\STIG.Checklist\STIG.Checklist.psm1
- Module\Stig.Main\Functions.ps1
- Module\Stig.Main\Stig.Main.psm1
- Module\Stig.OrganizationalSetting\Data.ps1
- Module\Stig.OrganizationalSetting\Methods.ps1
- Module\Stig.OrganizationalSetting\Stig.OrganizationalSetting.psm1
- Module\Stig.SkippedRule\Stig.SkippedRule.psm1
- Module\Stig.SkippedRuleType\Stig.SkippedRuleType.psm1
- Module\Stig.StigException\Stig.StigException.psm1
- Module\Stig.StigProperty\Stig.StigProperty.psm1
- Module\Stig.TechnologyRole\Stig.TechnologyRole.psm1
- Module\Stig.TechnologyVersion\Stig.TechnologyVersion.psm1
Version History
Version | Downloads | Last updated |
---|---|---|
4.24.0 | 874 | 12/9/2024 |
4.23.0 | 5,366 | 9/30/2024 |
4.22.0 | 8,156 | 5/31/2024 |
4.21.0 | 6,362 | 3/1/2024 |
4.20.0 | 3,031 | 1/12/2024 |
4.19.0 | 1,338 | 12/22/2023 |
4.18.0 | 3,538 | 9/5/2023 |
4.17.0 | 2,061 | 6/27/2023 |
4.16.0 | 3,384 | 3/16/2023 |
4.15.0 | 1,934 | 12/29/2022 |
4.14.0 | 2,964 | 9/14/2022 |
4.13.1 | 1,834 | 6/27/2022 |
4.13.0 | 221 | 6/16/2022 |
4.12.1 | 1,141 | 3/23/2022 |
4.12.0 | 70 | 3/18/2022 |
4.11.0 | 2,444 | 12/13/2021 |
4.10.1 | 4,754 | 8/31/2021 |
4.10.0 | 216 | 8/20/2021 |
4.9.1 | 3,271 | 6/3/2021 |
4.9.0 | 247 | 6/1/2021 |
4.8.0 | 2,561 | 3/1/2021 |
4.7.1 | 698 | 1/22/2021 |
4.7.0 | 567 | 12/17/2020 |
4.6.0 | 660 | 12/1/2020 |
4.5.1 | 893 | 10/12/2020 |
4.5.0 | 424 | 9/1/2020 |
4.4.2 | 1,192 | 7/7/2020 |
4.3.0 | 1,717 | 3/27/2020 |
4.2.0 | 1,296 | 12/20/2019 |
4.1.1 | 622 | 10/31/2019 |
4.0.0 | 693 | 9/20/2019 |
3.3.0 | 549 | 8/12/2019 |
3.2.0 | 952 | 5/25/2019 |
3.1.0 | 915 | 4/1/2019 |
3.0.1 | 186 | 3/12/2019 |
3.0.0 | 120 | 3/1/2019 |
2.4.0.0 (current version) | 3,485 | 2/7/2019 |
2.3.2.0 | 664 | 12/18/2018 |
2.3.1.0 | 220 | 12/7/2018 |
2.3.0.0 | 56 | 11/30/2018 |
2.2.0.0 | 914 | 10/10/2018 |
2.1.0.0 | 1,467 | 9/5/2018 |
2.0.0.0 | 2,713 | 8/17/2018 |
1.1.1.0 | 616 | 8/13/2018 |
1.1.0.0 | 621 | 7/29/2018 |
1.0.0.0 | 1,473 | 5/31/2018 |
0.9.3.0 | 527 | 1/8/2018 |
0.9.2.8 | 74 | 12/7/2017 |
0.9.2.7 | 89 | 11/3/2017 |