DSCResources/Resources/windows.ProcessMitigation.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
# Copyright (c) Microsoft Corporation. All rights reserved.
# Licensed under the MIT License.

$rules = $stig.RuleList | Select-Rule -Type ProcessMitigationRule
$mitigationTargets = $rules.MitigationTarget | Select-Object -Unique

foreach ($target in $mitigationTargets)
{
    $targetRules = $rules | Where-Object {$_.MitigationTarget -eq "$target"}
    $mitigationTypes = $targetRules.MitigationType | Select-Object -Unique

    foreach ($type in $mitigationTypes)
    {
        $typeRules = $targetRules | Where-Object {$_.MitigationType -eq "$type"}
        $mitigationNames = $typeRules.MitigationName | Select-Object -Unique

        foreach ($name in $mitigationNames)
        {
            $nameRules = $typeRules | Where-Object {$_.MitigationName -eq "$name"}

            ProcessMitigation "$target-$type-$name-$($nameRules.id)"
            {
                MitigationTarget = $target
                MitigationType   = $type
                MitigationName   = $name
                MitigationValue  = $nameRules.MitigationValue
            }
        }
    }
}