PowerSTIG
4.2.0
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rule
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rules that have allowable ranges.
This module is intended to be used by additional automation as a lightweight portable “database” to audit and enforce the parsed STIG data.
Minimum PowerShell version
5.1
Installation Options
Author(s)
Microsoft Corporation
Copyright
Copyright 2019
Package Details
Owners
Tags
DSC DesiredStateConfiguration STIG PowerStig
Functions
Get-DomainName Get-Stig New-StigCheckList
DSCResources
DotNetFramework FireFox IisServer IisSite InternetExplorer Office OracleJRE SqlServer WindowsClient WindowsDefender WindowsDnsServer WindowsFirewall WindowsServer
Dependencies
-
- AccessControlDsc (= 1.4.0)
- AuditPolicyDsc (= 1.2.0)
- AuditSystemDsc (= 1.1.0)
- ComputerManagementDsc (= 6.2.0)
- FileContentDsc (= 1.1.0.108)
- GPRegistryPolicyDsc (= 1.0.1)
- PSDscResources (= 2.10.0)
- SecurityPolicyDsc (= 2.4.0)
- SqlServerDsc (= 12.1.0)
- WindowsDefenderDsc (= 1.0.0)
- xDnsServer (= 1.11.0)
- xWebAdministration (= 2.5.0)
Release Notes
* Update PowerSTIG parsing for IIS 8.5 STIG - Ver 1, Rel 9: [#530](https://github.com/microsoft/PowerStig/issues/530)
* Update PowerSTIG to successfully parse Microsoft .Net Framework STIG 4.0 STIG - Ver 1, Rel 9: [535](https://github.com/microsoft/PowerStig/issues/535)
* Update PowerSTIG to successfully parse MS Internet Explorer 11 STIG - Ver 1, Rel 18: [#538](https://github.com/microsoft/PowerStig/issues/538)
* Update PowerSTIG to successfully parse Mozilla Firefox STIG - Ver 4, Rel 27: [#540](https://github.com/microsoft/PowerStig/issues/540)
* Update PowerSTIG to successfully parse Microsoft Windows 10 STIG - Ver 1, Rel 19: [533](https://github.com/microsoft/PowerStig/issues/533)
* Update PowerSTIG to parse/convert the Windows Server 2012 R2 MS/DC V2R17/V2R18 Respectively: [531](https://github.com/microsoft/PowerStig/issues/531)
* Update PowerSTIG to successfully parse Microsoft SQL Server 2016 Instance STIG - Ver 1, Rel 7: [#542](https://github.com/microsoft/PowerStig/issues/542)
* Update PowerSTIG to parse and apply OfficeSystem 2013 STIG V1R9 / 2016 V1R1: [#551](https://github.com/microsoft/PowerStig/issues/551)
* Update PowerSTIG to parse and apply Windows Server 2019 V1R2 STIG: [#554](https://github.com/microsoft/PowerStig/issues/554)
* Fixed [#428](https://github.com/microsoft/PowerStig/issues/428): Updated JRE rule V-66941.a to be a Organizational setting
* Fixed [#427](https://github.com/microsoft/PowerStig/issues/427): Windows 10 Rule V-63373 fails to apply settings to system drive
* Fixed [#514](https://github.com/microsoft/PowerStig/issues/514): Feature request: additional support for servicerule properties
* Fixed [#521](https://github.com/microsoft/PowerStig/issues/521): Organizational setting warning should include Stig name
* Fixed [#443](https://github.com/microsoft/PowerStig/issues/443): Missing cmdlet Get-StigXccdfBenchmark function
* Fixed [#528](https://github.com/microsoft/PowerStig/issues/528): New-StigChecklist should not require a ManualCheckFile
* Fixed [#545](https://github.com/microsoft/PowerStig/issues/545): Need a test to verify the conversionstatus="fail" does not exist in processed STIGs
* Fixed [#517](https://github.com/microsoft/PowerStig/issues/520): Need a test to verify the module version in the module manifest matches the DscResources.
FileList
- PowerSTIG.nuspec
- PowerStig.psd1
- PowerStig.psm1
- README.md
- LICENSE
- DSCResources\ActiveDirectory.md
- DSCResources\helper.psm1
- DSCResources\DotNetFramework\DotNetFramework.psd1
- DSCResources\DotNetFramework\DotNetFramework.schema.psm1
- DSCResources\FireFox\FireFox.psd1
- DSCResources\FireFox\FireFox.schema.psm1
- DSCResources\IisServer\IisServer.psd1
- DSCResources\IisServer\IisServer.schema.psm1
- DSCResources\IisSite\IisSite.psd1
- DSCResources\IisSite\IisSite.schema.psm1
- DSCResources\InternetExplorer\InternetExplorer.psd1
- DSCResources\InternetExplorer\InternetExplorer.schema.psm1
- DSCResources\Office\Office.psd1
- DSCResources\Office\Office.schema.psm1
- DSCResources\OracleJRE\OracleJRE.psd1
- DSCResources\OracleJRE\OracleJRE.schema.psm1
- DSCResources\Resources\firefox.ReplaceText.ps1
- DSCResources\Resources\oraclejre.KeyValuePairFile.ps1
- DSCResources\Resources\readme.md
- DSCResources\Resources\SqlServer.ScriptQuery.ps1
- DSCResources\Resources\windows.AccessControl.ps1
- DSCResources\Resources\windows.AccountPolicy.ps1
- DSCResources\Resources\windows.AuditPolicySubcategory.ps1
- DSCResources\Resources\windows.AuditSetting.ps1
- DSCResources\Resources\windows.ProcessMitigation.ps1
- DSCResources\Resources\windows.RefreshRegistryPolicy.ps1
- DSCResources\Resources\windows.Registry.ps1
- DSCResources\Resources\windows.Script.RootHint.ps1
- DSCResources\Resources\windows.Script.skip.ps1
- DSCResources\Resources\windows.SecurityOption.ps1
- DSCResources\Resources\windows.Service.ps1
- DSCResources\Resources\windows.UserRightsAssignment.ps1
- DSCResources\Resources\windows.WindowsEventLog.ps1
- DSCResources\Resources\windows.WindowsFeature.ps1
- DSCResources\Resources\windows.WindowsOptionalFeature.ps1
- DSCResources\Resources\windows.xDnsServerSetting.ps1
- DSCResources\Resources\windows.xIisLogging.ps1
- DSCResources\Resources\windows.xIisMimeTypeMapping.ps1
- DSCResources\Resources\windows.xSslSettings.ps1
- DSCResources\Resources\windows.xWebAppPool.ps1
- DSCResources\Resources\windows.xWebConfigProperty.ps1
- DSCResources\Resources\windows.xWebSite.ps1
- DSCResources\SqlServer\SqlServer.psd1
- DSCResources\SqlServer\SqlServer.schema.psm1
- DSCResources\WindowsClient\WindowsClient.psd1
- DSCResources\WindowsClient\WindowsClient.schema.psm1
- DSCResources\WindowsDefender\WindowsDefender.psd1
- DSCResources\WindowsDefender\WindowsDefender.schema.psm1
- DSCResources\WindowsDnsServer\WindowsDnsServer.psd1
- DSCResources\WindowsDnsServer\WindowsDnsServer.schema.psm1
- DSCResources\WindowsFirewall\WindowsFirewall.psd1
- DSCResources\WindowsFirewall\WindowsFirewall.schema.psm1
- DSCResources\WindowsServer\WindowsServer.psd1
- DSCResources\WindowsServer\WindowsServer.schema.psm1
- StigData\Processed\ActiveDirectory-All-Domain-2.11.org.default.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.11.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.12.org.default.xml
- StigData\Processed\ActiveDirectory-All-Domain-2.12.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.7.org.default.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.7.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.8.org.default.xml
- StigData\Processed\ActiveDirectory-All-Forest-2.8.xml
- StigData\Processed\DotNetFramework-4-1.8.org.default.xml
- StigData\Processed\DotNetFramework-4-1.8.xml
- StigData\Processed\DotNetFramework-4-1.9.org.default.xml
- StigData\Processed\DotNetFramework-4-1.9.xml
- StigData\Processed\FireFox-All-4.26.org.default.xml
- StigData\Processed\FireFox-All-4.26.xml
- StigData\Processed\FireFox-All-4.27.org.default.xml
- StigData\Processed\FireFox-All-4.27.xml
- StigData\Processed\IISServer-8.5-1.7.org.default.xml
- StigData\Processed\IISServer-8.5-1.7.xml
- StigData\Processed\IISServer-8.5-1.9.org.default.xml
- StigData\Processed\IISServer-8.5-1.9.xml
- StigData\Processed\IISSite-8.5-1.8.org.default.xml
- StigData\Processed\IISSite-8.5-1.8.xml
- StigData\Processed\IISSite-8.5-1.9.org.default.xml
- StigData\Processed\IISSite-8.5-1.9.xml
- StigData\Processed\InternetExplorer-11-1.17.org.default.xml
- StigData\Processed\InternetExplorer-11-1.17.xml
- StigData\Processed\InternetExplorer-11-1.18.org.default.xml
- StigData\Processed\InternetExplorer-11-1.18.xml
- StigData\Processed\Office-Excel2013-1.7.org.default.xml
- StigData\Processed\Office-Excel2013-1.7.xml
- StigData\Processed\Office-Excel2016-1.2.org.default.xml
- StigData\Processed\Office-Excel2016-1.2.xml
- StigData\Processed\Office-Outlook2013-1.12.org.default.xml
- StigData\Processed\Office-Outlook2013-1.12.xml
- StigData\Processed\Office-Outlook2013-1.13.org.default.xml
- StigData\Processed\Office-Outlook2013-1.13.xml
- StigData\Processed\Office-Outlook2016-1.2.org.default.xml
- StigData\Processed\Office-Outlook2016-1.2.xml
- StigData\Processed\Office-PowerPoint2013-1.6.org.default.xml
- StigData\Processed\Office-PowerPoint2013-1.6.xml
- StigData\Processed\Office-PowerPoint2016-1.1.org.default.xml
- StigData\Processed\Office-PowerPoint2016-1.1.xml
- StigData\Processed\Office-System2013-1.9.org.default.xml
- StigData\Processed\Office-System2013-1.9.xml
- StigData\Processed\Office-System2016-1.1.org.default.xml
- StigData\Processed\Office-System2016-1.1.xml
- StigData\Processed\Office-Word2013-1.6.org.default.xml
- StigData\Processed\Office-Word2013-1.6.xml
- StigData\Processed\Office-Word2016-1.1.org.default.xml
- StigData\Processed\Office-Word2016-1.1.xml
- StigData\Processed\OracleJRE-8-1.5.org.default.xml
- StigData\Processed\OracleJRE-8-1.5.xml
- StigData\Processed\SqlServer-2012-Database-1.18.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.18.xml
- StigData\Processed\SqlServer-2012-Database-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.19.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.3.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.xml
- StigData\Processed\WindowsClient-10-1.18.org.default.xml
- StigData\Processed\WindowsClient-10-1.18.xml
- StigData\Processed\WindowsClient-10-1.19.org.default.xml
- StigData\Processed\WindowsClient-10-1.19.xml
- StigData\Processed\WindowsDefender-All-1.5.org.default.xml
- StigData\Processed\WindowsDefender-All-1.5.xml
- StigData\Processed\WindowsDefender-All-1.6.org.default.xml
- StigData\Processed\WindowsDefender-All-1.6.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.11.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.11.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.xml
- StigData\Processed\WindowsFirewall-All-1.6.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.6.xml
- StigData\Processed\WindowsFirewall-All-1.7.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.7.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.17.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.17.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.xml
- StigData\Processed\WindowsServer-2016-DC-1.8.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.8.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.xml
- StigData\Processed\WindowsServer-2016-MS-1.8.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.8.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.xml
- Module\Common\Common.psm1
- Module\Common\Function.Xccdf.ps1
- Module\Common\Functions.Helper.ps1
- Module\Rule\Rule.LoadFactory.psm1
- Module\Rule\Rule.psm1
- Module\Rule.AccountPolicy\AccountPolicyRule.psm1
- Module\Rule.AuditPolicy\AuditPolicyRule.psm1
- Module\Rule.AuditSetting\AuditSettingRule.psm1
- Module\Rule.DnsServerRootHint\DnsServerRootHintRule.psm1
- Module\Rule.DnsServerSetting\DnsServerSettingRule.psm1
- Module\Rule.Document\DocumentRule.psm1
- Module\Rule.FileContent\FileContentRule.psm1
- Module\Rule.Group\GroupRule.psm1
- Module\Rule.IISLogging\IISLoggingRule.psm1
- Module\Rule.Manual\ManualRule.psm1
- Module\Rule.MimeType\MimeTypeRule.psm1
- Module\Rule.Permission\PermissionRule.psm1
- Module\Rule.ProcessMitigation\ProcessMitigationRule.psm1
- Module\Rule.Registry\RegistryRule.psm1
- Module\Rule.SecurityOption\SecurityOptionRule.psm1
- Module\Rule.Service\ServiceRule.psm1
- Module\Rule.Skip\Skip.psm1
- Module\Rule.SqlScriptQuery\SqlScriptQueryRule.psm1
- Module\Rule.SslSettings\SslSettingsRule.psm1
- Module\Rule.UserRight\UserRightRule.psm1
- Module\Rule.WebAppPool\WebAppPoolRule.psm1
- Module\Rule.WebConfigurationProperty\WebConfigurationPropertyRule.psm1
- Module\Rule.WindowsFeature\WindowsFeatureRule.psm1
- Module\Rule.WinEventLog\WinEventLogRule.psm1
- Module\STIG\Functions.Checklist.ps1
- Module\STIG\Functions.DomainName.ps1
- Module\STIG\STIG.psm1
Version History
Version | Downloads | Last updated |
---|---|---|
4.12.1 | 733 | 3/23/2022 |
4.12.0 | 49 | 3/18/2022 |
4.11.0 | 1,861 | 12/13/2021 |
4.10.1 | 4,041 | 8/31/2021 |
4.10.0 | 203 | 8/20/2021 |
4.9.1 | 2,048 | 6/3/2021 |
4.9.0 | 234 | 6/1/2021 |
4.8.0 | 2,549 | 3/1/2021 |
4.7.1 | 664 | 1/22/2021 |
4.7.0 | 556 | 12/17/2020 |
4.6.0 | 411 | 12/1/2020 |
4.5.1 | 877 | 10/12/2020 |
4.5.0 | 392 | 9/1/2020 |
4.4.2 | 1,180 | 7/7/2020 |
4.3.0 | 1,705 | 3/27/2020 |
4.2.0 (current version) | 1,276 | 12/20/2019 |
4.1.1 | 613 | 10/31/2019 |
4.0.0 | 680 | 9/20/2019 |
3.3.0 | 539 | 8/12/2019 |
3.2.0 | 940 | 5/25/2019 |
3.1.0 | 905 | 4/1/2019 |
3.0.1 | 176 | 3/12/2019 |
3.0.0 | 111 | 3/1/2019 |
2.4.0.0 | 3,165 | 2/7/2019 |
2.3.2.0 | 655 | 12/18/2018 |
2.3.1.0 | 210 | 12/7/2018 |
2.3.0.0 | 46 | 11/30/2018 |
2.2.0.0 | 890 | 10/10/2018 |
2.1.0.0 | 1,457 | 9/5/2018 |
2.0.0.0 | 2,700 | 8/17/2018 |
1.1.1.0 | 606 | 8/13/2018 |
1.1.0.0 | 609 | 7/29/2018 |
1.0.0.0 | 1,461 | 5/31/2018 |
0.9.3.0 | 517 | 1/8/2018 |
0.9.2.8 | 64 | 12/7/2017 |
0.9.2.7 | 79 | 11/3/2017 |