The PowerStig module provides a set of PowerShell classes to access DISA STIG settings extracted from the xccdf. The module provides a unified way to access the parsed STIG data by enabling the concepts of: 1. Exceptions (overriding and auto-documenting) 2. Ignoring a single or entire class of rules (auto-documenting) 3. Organization... More info

Contains functions to set Active Directory STIG requirements that are not configurable through a GPO.

The Stig-Repo module leverages PowerSTIG and Desired State Configuration to build and drive the STIG Compliance Automation Repository (SCAR) - an automated Infrastructure as Code framework for Security Technical Implementation Guide (STIG) Compliance. SCAR accelerates Azure readiness and ATO/CCRI processes through automated STIG complian... More info

Automates completing the Windows Server 2012 DNS STIG. Does not include DNSSEC related checks.

Builds a secure ESAE Forest from which to manage other AD Forests. Can also be used to build a standalone secure forest. Includes all DISA STIGs as GPOs for Windows 8.1, Server 2012 R2, and more.

DISA STIG Automation for SQL Server

DISA STIG Automation for IIS

Configures all of the settings required by the SQL 2014 Draft STIG excluding the Logon Trigger requirement (I find this to essentially break everytime) and TDE. Run both the Set-SQLInstanceStigItems and Set-SQLDatabaseStigItems to completely STIG the Instance. Requires some prior setup for SQL Agent Operators and Windows and/or Local Groups.

Download STIG benchmark files