Resources/Baseline/DeviceGuard.json

[
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "EnableVirtualizationBasedSecurity",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "EnableVirtualizationBasedSecurity-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-deviceguard?WT.mc_id=Portal-fx#enablevirtualizationbasedsecurity",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            99
        ],
        "ID": "019a8dfa-23ea-725f-bd56-4e950531e3be"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "RequirePlatformSecurityFeatures",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "RequirePlatformSecurityFeatures-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-deviceguard?WT.mc_id=Portal-fx#requireplatformsecurityfeatures",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            99
        ],
        "ID": "019a8dfa-23ea-72ce-bd09-c1449ceb9760"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "HypervisorEnforcedCodeIntegrity",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "HypervisorEnforcedCodeIntegrity-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology?WT.mc_id=Portal-fx#hypervisorenforcedcodeintegrity",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            99
        ],
        "ID": "019a8dfa-23eb-72a7-b7c8-300d431d1764"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "HVCIMATRequired",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "HVCIMATRequired-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-VirtualizationBasedTechnology?WT.mc_id=Portal-fx#requireuefimemoryattributestable",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            99
        ],
        "ID": "019a8dfa-23eb-725c-ba52-1a60427c2cdb"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "LsaCfgFlags",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "LsaCfgFlags-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-deviceguard?WT.mc_id=Portal-fx#lsacfgflags",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            99
        ],
        "ID": "019a8dfa-23eb-7e47-88bc-35a0b0de60b4"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "MachineIdentityIsolation",
        "Type": 4,
        "Size": 4,
        "Data": "AgAAAA==",
        "RegValue": "2",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "MachineIdentityIsolation-DeviceGuard",
        "URL": "",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            3,
            4,
            5
        ],
        "ID": "019a8dfa-23eb-7979-9da3-570a9ca6ef80"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "ConfigureSystemGuardLaunch",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "ConfigureSystemGuardLaunch-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-deviceguard?WT.mc_id=Portal-fx#configuresystemguardlaunch",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            3,
            4,
            5
        ],
        "ID": "019a8dfa-23ec-7473-a7d6-12adcc248de7"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\DeviceGuard",
        "ValueName": "ConfigureKernelShadowStacksLaunch",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "ConfigureKernelShadowStacksLaunch-DeviceGuard",
        "URL": "",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            2,
            3,
            4,
            5
        ],
        "ID": "019a8dfa-23ec-7373-af59-6f30f347ac16"
    },
    {
        "Source": 0,
        "KeyName": "SOFTWARE\\Policies\\Microsoft\\Windows\\System",
        "ValueName": "RunAsPPL",
        "Type": 4,
        "Size": 4,
        "Data": "AQAAAA==",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "RunAsPPL-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/client-management/mdm/policy-csp-lsa#configurelsaprotectedprocess",
        "Category": 8,
        "SubCategory": null,
        "DefaultRegValue": null,
        "DeviceIntents": [
            2,
            3,
            4,
            5
        ],
        "ID": "019a8dfa-23ec-7e1d-961c-ac701dfa9f74"
    },
    {
        "Source": 1,
        "KeyName": "SYSTEM\\CurrentControlSet\\Control\\DeviceGuard",
        "ValueName": "Mandatory",
        "Type": 4,
        "Size": 4,
        "Data": "",
        "RegValue": "1",
        "Hive": 0,
        "PolicyAction": 0,
        "FriendlyName": "Mandatory-DeviceGuard",
        "URL": "https://learn.microsoft.com/windows/security/hardware-security/enable-virtualization-based-protection-of-code-integrity?tabs=reg",
        "Category": 8,
        "SubCategory": 3,
        "DefaultRegValue": null,
        "DeviceIntents": [
            4,
            5
        ],
        "ID": "019a8dfa-23ed-7941-9ed8-f90fba3713bc"
    }
]