SecurityPosture
0.9
Currently the script detects the status of:
Operating System
TPM
Bitlocker
UEFI
SecureBoot
Defender
Cloud Protection Service (MAPS for Defender)
Block at first Sight
Defender for Endpoint
Application Guard
Windows Sandbox
Currently the script detects the status of:
Operating System
TPM
Bitlocker
UEFI
SecureBoot
Defender
Cloud Protection Service (MAPS for Defender)
Block at first Sight
Defender for Endpoint
Application Guard
Windows Sandbox
Credential Guard
Device Guard
Attack Surface Reduction Rules
Controlled Folder Access
AppLocker
Application Control
Each area listed above can be called as individual functions or every function in the script can be called utilizing the -All switch.
The script will write entries to a log file residing at the client (C:\Windows\Temp\Client-SecurityPosture.log)
which preferably is read using CMTrace or OneTrace.
Installation Options
Owners
Package Details
Author(s)
- @0fflineDocs
Tags
Functions
SecPos Help Write-LogEntry Get-OperatingSystem Get-TPMStatus Get-Bitlocker Get-UefiSecureBoot Get-Defender Get-DefenderforEndpoint Get-MAPS Get-BAFS Get-ApplicationGuard Get-Sandbox Get-CredentialGuardPreReq Get-CredentialGuard Get-DeviceGuard Get-AttackSurfaceReduction Get-ControlledFolderAccess Get-Applocker Get-ApplicationControl
Dependencies
This script has no dependencies.
Release Notes
0.9 - Added Attack Surface Reduction Rules, AppLocker, Application Control.
FileList
- SecurityPosture.nuspec
- SecurityPosture.ps1