HardeningLens

1.3.0

Data/Baselines/Workstation.json

{
  "$schema": "../../Schema/baseline.schema.json",
  "schemaVersion": "1.0",
  "name": "Workstation",
  "displayName": "Windows Workstation",
  "version": "1.2.0",
  "description": "Opinionated posture profile for enterprise Windows 10/11 workstations managed through Group Policy, Intune, or equivalent controls.",
  "sourceBasis": [
    "Microsoft Security Compliance Toolkit and current Microsoft Windows security guidance",
    "Operational security telemetry and recoverability practices"
  ],
  "supportedRoles": [
    "Workstation"
  ],
  "controls": [
    {
      "id": "HL-ACC-001"
    },
    {
      "id": "HL-UAC-001"
    },
    {
      "id": "HL-UAC-002"
    },
    {
      "id": "HL-UAC-003"
    },
    {
      "id": "HL-LSA-001"
    },
    {
      "id": "HL-CRED-001"
    },
    {
      "id": "HL-CRED-002"
    },
    {
      "id": "HL-LAPS-001"
    },
    {
      "id": "HL-LAPS-002"
    },
    {
      "id": "HL-LAPS-003"
    },
    {
      "id": "HL-ANON-001"
    },
    {
      "id": "HL-ANON-002"
    },
    {
      "id": "HL-FW-001"
    },
    {
      "id": "HL-FW-002"
    },
    {
      "id": "HL-SMB-001"
    },
    {
      "id": "HL-SMB-002"
    },
    {
      "id": "HL-SMB-003"
    },
    {
      "id": "HL-SMB-004"
    },
    {
      "id": "HL-SMB-005"
    },
    {
      "id": "HL-RDP-001"
    },
    {
      "id": "HL-WINRM-001"
    },
    {
      "id": "HL-WINRM-002"
    },
    {
      "id": "HL-NET-001"
    },
    {
      "id": "HL-SVC-001"
    },
    {
      "id": "HL-NTLM-001"
    },
    {
      "id": "HL-DEF-001"
    },
    {
      "id": "HL-DEF-002"
    },
    {
      "id": "HL-DEF-003"
    },
    {
      "id": "HL-DEF-004"
    },
    {
      "id": "HL-DEF-005"
    },
    {
      "id": "HL-DEF-006"
    },
    {
      "id": "HL-DEF-007"
    },
    {
      "id": "HL-DEF-008"
    },
    {
      "id": "HL-DEF-009"
    },
    {
      "id": "HL-ASR-001"
    },
    {
      "id": "HL-PS-001"
    },
    {
      "id": "HL-PSLOG-001"
    },
    {
      "id": "HL-PSLOG-002"
    },
    {
      "id": "HL-PSLOG-003"
    },
    {
      "id": "HL-AUD-001"
    },
    {
      "id": "HL-AUD-002"
    },
    {
      "id": "HL-AUD-003"
    },
    {
      "id": "HL-AUD-004"
    },
    {
      "id": "HL-AUD-005"
    },
    {
      "id": "HL-AUD-006"
    },
    {
      "id": "HL-AUD-007"
    },
    {
      "id": "HL-LOG-001",
      "parameters": {
        "minimumSizeBytes": 536870912
      }
    },
    {
      "id": "HL-LOG-002",
      "parameters": {
        "minimumSizeBytes": 134217728
      }
    },
    {
      "id": "HL-LOG-003",
      "parameters": {
        "minimumSizeBytes": 67108864
      }
    },
    {
      "id": "HL-BIT-001"
    },
    {
      "id": "HL-BOOT-001"
    },
    {
      "id": "HL-SMART-001"
    },
    {
      "id": "HL-AUTORUN-001"
    },
    {
      "id": "HL-RA-001"
    },
    {
      "id": "HL-VBS-001"
    },
    {
      "id": "HL-SUDO-001"
    },
    {
      "id": "HL-TLS-001"
    },
    {
      "id": "HL-TLS-002"
    },
    {
      "id": "HL-KERB-001"
    },
    {
      "id": "HL-LDAP-001"
    },
    {
      "id": "HL-WDAC-001"
    }
  ],
  "notes": [
    "Hardware- or licensing-dependent controls can return Unknown or NotApplicable. Handle deliberate deviations through time-bound exceptions."
  ]
}