Files
atap/ATAPAuditor/Reports/Microsoft Windows 11 Stand-alone.ps1
T
2026-05-11 09:15:08 +02:00

103 lines
3.9 KiB
PowerShell

[Report] @{
Title = "Windows 11 Stand-alone Report"
ModuleName = "ATAPAuditor"
BasedOn = @(
"CIS Microsoft Windows 11 Stand-alone Benchmark, Version: 2.0.0, Date: 2023-05-04"
"BSI Configuration Recommendations for Hardening of Windows 10 Using Built-in Functionalities: Version 1.3, Date: 2021-05-03"
"BSI SiSyPHuS Recommendations for Telemetry Components: Version 1.2, Date: 2019-07-31"
"FB Pro recommendations 'Ciphers Protocols and Hashes Benchmark', Version 1.2.1, Date: 2023-11-03"
"FB Pro recommendations 'Enhanced settings', Version 1.2.1, Date: 2023-11-03"
)
Sections = @(
[ReportSection] @{
Title = "CIS Stand-alone Benchmarks"
Description = "This section contains all CIS recommendations"
SubSections = @(
[ReportSection] @{
Title = 'Account Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#AccountPolicies"
}
[ReportSection] @{
Title = 'Advanced Audit Policy Configuration'
AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#AuditPolicies"
}
[ReportSection] @{
Title = 'Registry Settings/Group Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#RegistrySettings"
}
[ReportSection] @{
Title = 'Security Options'
AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#SecurityOptions"
}
[ReportSection] @{
Title = 'User Rights Assignment'
AuditInfos = Test-AuditGroup "Microsoft Windows 11-Stand-alone-CIS-2.0.0#UserRights"
}
)
}
[ReportSection] @{
Title = 'BSI Benchmarks SiSyPHuS Logging'
Description = 'This section contains all BSI logging recommendations'
SubSections = @(
[ReportSection] @{
Title = 'Registry Settings/Group Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#RegistrySettings"
}
[ReportSection] @{
Title = 'Advanced Audit Policy Configuration'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS Logging-BSI-1.3#AuditPolicies"
}
)
}
[ReportSection] @{
Title = 'BSI Benchmarks SiSyPHus-BSI'
Description = 'This section contains all BSI telemetry recommendations'
SubSections = @(
[ReportSection] @{
Title = 'Registry Settings/Group Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHus-Telemetrie-BSI-V1.2#RegistrySettings"
}
)
}
[ReportSection] @{
Title = 'BSI Benchmarks SiSyPHuS NE'
Description = 'This section contains all BSI NE recommendations'
SubSections = @(
[ReportSection] @{
Title = 'Registry Settings/Group Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#RegistrySettings"
}
[ReportSection] @{
Title = 'User Rights Assignment'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#UserRights"
}
[ReportSection] @{
Title = 'Account Policies'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#AccountPolicies"
}
[ReportSection] @{
Title = 'Security Options'
AuditInfos = Test-AuditGroup "Microsoft Windows 10 SiSyPHuS NE-BSI-1.3#SecurityOptions"
}
)
}
[ReportSection] @{
Title = 'FB Pro recommendations'
Description = "This section contains all FB Pro recommendations"
SubSections = @(
[ReportSection] @{
Title = 'Ciphers Suites and Hashes'
AuditInfos = Test-AuditGroup "CiphersProtocolsHashesBenchmark-FBPro-1.2.1#RegistrySettings"
}
[ReportSection] @{
Title = 'Enhanced security settings - Registry Settings'
AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#RegistrySettings"
}
[ReportSection] @{
Title = 'Enhanced security settings - User Rights'
AuditInfos = Test-AuditGroup "Microsoft Windows Enhanced Security Settings-FB Pro GmbH-1.2.1#UserRights"
}
)
}
)
}