windows-baseline icon indicating copy to clipboard operation
windows-baseline copied to clipboard

DevSec Windows Baseline - InSpec Profile

Results 5 windows-baseline issues
Sort by recently updated
recently updated
newest added

Looking at control windows-019 i noticed this is using: SeSystemtimePrivilege and not: SeTimeZonePrivilege https://github.com/dev-sec/windows-baseline/blob/82fc617a0c482846c4cc3b96a0b5f03b60a2c6f8/controls/local_policies.rb#L222 https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

In a new w2019 server, im having many errors because of w10, w2012 issues (mainly Windos Registry stuff). So im having 500 errors, 944 passed. **Describe the solution you'd like**...

I'm not certain but this does not make sense to me. Setting the registry entries to 0 disables module logging and transcription logging. I would want these enabled by default......

This test: https://github.com/dev-sec/windows-baseline/blob/c093ac4531631236e09972d31f606c682e17ff54/controls/user_rights.rb#L41-L50 ..currently allows for other users to be present. This is potentially necessary, if the server is a web server or SQL server, but is not secure by...

### Description Window-011 check is failing due to an array ordering problem ![Screenshot 2022-11-15 at 12 57 17 PM](https://user-images.githubusercontent.com/109251274/202013572-7c927b3e-80d0-480b-9870-b868fe6a71df.png) It is looking for `expected: ["S-1-5-9", "S-1-5-32-544"]` but is finding `got:...

bug