PowerSTIG
4.3.0
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rule
1. Exceptions (overriding and auto-documenting)
2. Ignoring a single or entire class of rules (auto-documenting)
3. Organizational settings to address STIG rules that have allowable ranges.
This module is intended to be used by additional automation as a lightweight portable “database” to audit and enforce the parsed STIG data.
Minimum PowerShell version
5.1
Installation Options
Owners
Copyright
Copyright 2020
Package Details
Author(s)
- Microsoft Corporation
Tags
DSC DesiredStateConfiguration STIG PowerStig
Functions
Get-DomainName Get-Stig New-StigCheckList Get-StigRuleList Get-StigVersionNumber Get-PowerStigFilelist Split-BenchmarkId
DSCResources
Adobe DotNetFramework FireFox IisServer IisSite InternetExplorer McAfee Office OracleJRE SqlServer WindowsClient WindowsDefender WindowsDnsServer WindowsFirewall WindowsServer
Dependencies
-
- AccessControlDsc (= 1.4.0)
- AuditPolicyDsc (= 1.2.0)
- AuditSystemDsc (= 1.1.0)
- ComputerManagementDsc (= 6.2.0)
- FileContentDsc (= 1.1.0.108)
- GPRegistryPolicyDsc (= 1.2.0)
- PSDscResources (= 2.10.0)
- SecurityPolicyDsc (= 2.4.0)
- SqlServerDsc (= 13.3.0)
- WindowsDefenderDsc (= 1.0.0)
- xDnsServer (= 1.11.0)
- xWebAdministration (= 2.5.0)
Release Notes
* Update PowerSTIG to Expand .NET STIG Automation: [#591](https://github.com/microsoft/PowerStig/issues/591)
* Update PowerSTIG to parse and apply McAfee VirusScan 8.8 Local Client STIG V5R16: [#588](https://github.com/microsoft/PowerStig/issues/588)
* Update PowerSTIG to successfully parse Microsoft SQL Server 2016 Instance STIG - Ver 1, Rel 8: [#586](https://github.com/microsoft/PowerStig/issues/586)
* Update PowerSTIG to parse and apply Windows Server 2019 V1R3 STIG: [#584](https://github.com/microsoft/PowerStig/issues/584)
* Update PowerSTIG to parse/convert the Windows Server 2016 V2R10: [#582](https://github.com/microsoft/PowerStig/issues/582)
* Update PowerSTIG to parse/convert the Windows Server 2012 DNS STIG V1R13: [#580](https://github.com/microsoft/PowerStig/issues/580)
* Update PowerSTIG to to parse/convert the Windows Server 2012 R2 DC V2R19: [#578](https://github.com/microsoft/PowerStig/issues/578)
* Update PowerSTIG to parse/convert the Windows Defender STIG V1R7: [#576](https://github.com/microsoft/PowerStig/issues/576)
* Update PowerSTIG to successfully parse Mozilla Firefox STIG - Ver 4, Rel 28: [#573](https://github.com/microsoft/PowerStig/issues/573)
* Update PowerSTIG to parse and apply Adobe Acrobat Reader Version 1, Release 6: [#562](https://github.com/microsoft/PowerStig/issues/562)
* Update PowerSTIG release process to include STIG Coverage markdown wiki automation: [#560](https://github.com/microsoft/PowerStig/issues/560)
* Update to PowerSTIG to show duplicate rule status matching in a checklist: [#257](https://github.com/microsoft/PowerStig/issues/257)
* Fixed [#589](https://github.com/microsoft/PowerStig/issues/589): Update module manifest to leverage GPRegistryPolicyDsc v1.2.0
* Fixed [#569](https://github.com/microsoft/PowerStig/issues/569): Update SqlServerDsc module version references
* Fixed [#259](https://github.com/microsoft/PowerStig/issues/259): Checklist .ckl file fails XML validation in Stig Viewer 2.8.
* Fixed [#527](https://github.com/microsoft/PowerStig/issues/527): Checklist is not using manualcheckfile when using DscResult.
* Fixed [#548](https://github.com/microsoft/PowerStig/issues/548): Target/host data is blank when creating a new checklist.
* Fixed [#546](https://github.com/microsoft/PowerStig/issues/546): Typecast causing an issue when trying to generate checklist using New-StigChecklist function.
* Fixed [#401](https://github.com/microsoft/PowerStig/issues/401): Checklists generated by New-StigChecklist do not provide finding details.
* Fixed [#593](https://github.com/microsoft/PowerStig/issues/593): Update PowerSTIG Convert naming conventions of output STIGs
FileList
- PowerSTIG.nuspec
- PowerStig.psd1
- PowerStig.psm1
- README.md
- LICENSE
- DSCResources\ActiveDirectory.md
- DSCResources\helper.psm1
- DSCResources\Adobe\Adobe.psd1
- DSCResources\Adobe\Adobe.schema.psm1
- DSCResources\DotNetFramework\DotNetFramework.psd1
- DSCResources\DotNetFramework\DotNetFramework.schema.psm1
- DSCResources\FireFox\FireFox.psd1
- DSCResources\FireFox\FireFox.schema.psm1
- DSCResources\IisServer\IisServer.psd1
- DSCResources\IisServer\IisServer.schema.psm1
- DSCResources\IisSite\IisSite.psd1
- DSCResources\IisSite\IisSite.schema.psm1
- DSCResources\InternetExplorer\InternetExplorer.psd1
- DSCResources\InternetExplorer\InternetExplorer.schema.psm1
- DSCResources\McAfee\McAfee.psd1
- DSCResources\McAfee\McAfee.schema.psm1
- DSCResources\Office\Office.psd1
- DSCResources\Office\Office.schema.psm1
- DSCResources\OracleJRE\OracleJRE.psd1
- DSCResources\OracleJRE\OracleJRE.schema.psm1
- DSCResources\Resources\firefox.ReplaceText.ps1
- DSCResources\Resources\oraclejre.KeyValuePairFile.ps1
- DSCResources\Resources\readme.md
- DSCResources\Resources\SqlServer.ScriptQuery.ps1
- DSCResources\Resources\windows.AccessControl.ps1
- DSCResources\Resources\windows.AccountPolicy.ps1
- DSCResources\Resources\windows.AuditPolicySubcategory.ps1
- DSCResources\Resources\windows.AuditSetting.ps1
- DSCResources\Resources\windows.ProcessMitigation.ps1
- DSCResources\Resources\windows.RefreshRegistryPolicy.ps1
- DSCResources\Resources\windows.Registry.ps1
- DSCResources\Resources\windows.Script.RootHint.ps1
- DSCResources\Resources\windows.Script.skip.ps1
- DSCResources\Resources\windows.SecurityOption.ps1
- DSCResources\Resources\windows.Service.ps1
- DSCResources\Resources\windows.UserRightsAssignment.ps1
- DSCResources\Resources\windows.WindowsEventLog.ps1
- DSCResources\Resources\windows.WindowsFeature.ps1
- DSCResources\Resources\windows.WindowsOptionalFeature.ps1
- DSCResources\Resources\windows.xDnsServerSetting.ps1
- DSCResources\Resources\windows.xIisLogging.ps1
- DSCResources\Resources\windows.xIisMimeTypeMapping.ps1
- DSCResources\Resources\windows.xSslSettings.ps1
- DSCResources\Resources\windows.xWebAppPool.ps1
- DSCResources\Resources\windows.xWebConfigProperty.ps1
- DSCResources\Resources\windows.xWebSite.ps1
- DSCResources\SqlServer\SqlServer.psd1
- DSCResources\SqlServer\SqlServer.schema.psm1
- DSCResources\WindowsClient\WindowsClient.psd1
- DSCResources\WindowsClient\WindowsClient.schema.psm1
- DSCResources\WindowsDefender\WindowsDefender.psd1
- DSCResources\WindowsDefender\WindowsDefender.schema.psm1
- DSCResources\WindowsDnsServer\WindowsDnsServer.psd1
- DSCResources\WindowsDnsServer\WindowsDnsServer.schema.psm1
- DSCResources\WindowsFirewall\WindowsFirewall.psd1
- DSCResources\WindowsFirewall\WindowsFirewall.schema.psm1
- DSCResources\WindowsServer\WindowsServer.psd1
- DSCResources\WindowsServer\WindowsServer.schema.psm1
- StigData\Processed\Adobe-AcrobatReader-1.6.org.default.xml
- StigData\Processed\Adobe-AcrobatReader-1.6.xml
- StigData\Processed\DotNetFramework-4-1.8.org.default.xml
- StigData\Processed\DotNetFramework-4-1.8.xml
- StigData\Processed\DotNetFramework-4-1.9.org.default.xml
- StigData\Processed\DotNetFramework-4-1.9.xml
- StigData\Processed\FireFox-All-4.27.org.default.xml
- StigData\Processed\FireFox-All-4.27.xml
- StigData\Processed\FireFox-All-4.28.org.default.xml
- StigData\Processed\FireFox-All-4.28.xml
- StigData\Processed\IISServer-8.5-1.7.org.default.xml
- StigData\Processed\IISServer-8.5-1.7.xml
- StigData\Processed\IISServer-8.5-1.9.org.default.xml
- StigData\Processed\IISServer-8.5-1.9.xml
- StigData\Processed\IISSite-8.5-1.8.org.default.xml
- StigData\Processed\IISSite-8.5-1.8.xml
- StigData\Processed\IISSite-8.5-1.9.org.default.xml
- StigData\Processed\IISSite-8.5-1.9.xml
- StigData\Processed\InternetExplorer-11-1.17.org.default.xml
- StigData\Processed\InternetExplorer-11-1.17.xml
- StigData\Processed\InternetExplorer-11-1.18.org.default.xml
- StigData\Processed\InternetExplorer-11-1.18.xml
- StigData\Processed\McAfee-8.8-VirusScan-5.16.org.default.xml
- StigData\Processed\McAfee-8.8-VirusScan-5.16.xml
- StigData\Processed\Office-Excel2013-1.7.org.default.xml
- StigData\Processed\Office-Excel2013-1.7.xml
- StigData\Processed\Office-Excel2016-1.2.org.default.xml
- StigData\Processed\Office-Excel2016-1.2.xml
- StigData\Processed\Office-Outlook2013-1.12.org.default.xml
- StigData\Processed\Office-Outlook2013-1.12.xml
- StigData\Processed\Office-Outlook2013-1.13.org.default.xml
- StigData\Processed\Office-Outlook2013-1.13.xml
- StigData\Processed\Office-Outlook2016-1.2.org.default.xml
- StigData\Processed\Office-Outlook2016-1.2.xml
- StigData\Processed\Office-PowerPoint2013-1.6.org.default.xml
- StigData\Processed\Office-PowerPoint2013-1.6.xml
- StigData\Processed\Office-PowerPoint2016-1.1.org.default.xml
- StigData\Processed\Office-PowerPoint2016-1.1.xml
- StigData\Processed\Office-System2013-1.9.org.default.xml
- StigData\Processed\Office-System2013-1.9.xml
- StigData\Processed\Office-System2016-1.1.org.default.xml
- StigData\Processed\Office-System2016-1.1.xml
- StigData\Processed\Office-Word2013-1.6.org.default.xml
- StigData\Processed\Office-Word2013-1.6.xml
- StigData\Processed\Office-Word2016-1.1.org.default.xml
- StigData\Processed\Office-Word2016-1.1.xml
- StigData\Processed\OracleJRE-8-1.5.org.default.xml
- StigData\Processed\OracleJRE-8-1.5.xml
- StigData\Processed\SqlServer-2012-Database-1.18.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.18.xml
- StigData\Processed\SqlServer-2012-Database-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Database-1.19.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.17.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.org.default.xml
- StigData\Processed\SqlServer-2012-Instance-1.19.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.7.xml
- StigData\Processed\SqlServer-2016-Instance-1.8.org.default.xml
- StigData\Processed\SqlServer-2016-Instance-1.8.xml
- StigData\Processed\WindowsClient-10-1.18.org.default.xml
- StigData\Processed\WindowsClient-10-1.18.xml
- StigData\Processed\WindowsClient-10-1.19.org.default.xml
- StigData\Processed\WindowsClient-10-1.19.xml
- StigData\Processed\WindowsDefender-All-1.6.org.default.xml
- StigData\Processed\WindowsDefender-All-1.6.xml
- StigData\Processed\WindowsDefender-All-1.7.org.default.xml
- StigData\Processed\WindowsDefender-All-1.7.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.12.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.13.org.default.xml
- StigData\Processed\WindowsDnsServer-2012R2-1.13.xml
- StigData\Processed\WindowsFirewall-All-1.6.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.6.xml
- StigData\Processed\WindowsFirewall-All-1.7.org.default.xml
- StigData\Processed\WindowsFirewall-All-1.7.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.18.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.19.org.default.xml
- StigData\Processed\WindowsServer-2012R2-DC-2.19.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.16.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.org.default.xml
- StigData\Processed\WindowsServer-2012R2-MS-2.17.xml
- StigData\Processed\WindowsServer-2016-DC-1.10.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.10.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-DC-1.9.xml
- StigData\Processed\WindowsServer-2016-MS-1.10.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.10.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.org.default.xml
- StigData\Processed\WindowsServer-2016-MS-1.9.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-DC-1.2.xml
- StigData\Processed\WindowsServer-2019-DC-1.3.org.default.xml
- StigData\Processed\WindowsServer-2019-DC-1.3.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.org.default.xml
- StigData\Processed\WindowsServer-2019-MS-1.2.xml
- StigData\Processed\WindowsServer-2019-MS-1.3.org.default.xml
- StigData\Processed\WindowsServer-2019-MS-1.3.xml
- Module\Common\Common.psm1
- Module\Common\Function.Xccdf.ps1
- Module\Common\Functions.Helper.ps1
- Module\Common\Functions.XccdfXml.ps1
- Module\Rule\Rule.LoadFactory.psm1
- Module\Rule\Rule.psm1
- Module\Rule.AccountPolicy\AccountPolicyRule.psm1
- Module\Rule.AuditPolicy\AuditPolicyRule.psm1
- Module\Rule.AuditSetting\AuditSettingRule.psm1
- Module\Rule.DnsServerRootHint\DnsServerRootHintRule.psm1
- Module\Rule.DnsServerSetting\DnsServerSettingRule.psm1
- Module\Rule.Document\DocumentRule.psm1
- Module\Rule.FileContent\FileContentRule.psm1
- Module\Rule.Group\GroupRule.psm1
- Module\Rule.IISLogging\IISLoggingRule.psm1
- Module\Rule.Manual\ManualRule.psm1
- Module\Rule.MimeType\MimeTypeRule.psm1
- Module\Rule.Permission\PermissionRule.psm1
- Module\Rule.ProcessMitigation\ProcessMitigationRule.psm1
- Module\Rule.Registry\RegistryRule.psm1
- Module\Rule.SecurityOption\SecurityOptionRule.psm1
- Module\Rule.Service\ServiceRule.psm1
- Module\Rule.Skip\Skip.psm1
- Module\Rule.SqlScriptQuery\SqlScriptQueryRule.psm1
- Module\Rule.SslSettings\SslSettingsRule.psm1
- Module\Rule.UserRight\UserRightRule.psm1
- Module\Rule.WebAppPool\WebAppPoolRule.psm1
- Module\Rule.WebConfigurationProperty\WebConfigurationPropertyRule.psm1
- Module\Rule.WindowsFeature\WindowsFeatureRule.psm1
- Module\Rule.WinEventLog\WinEventLogRule.psm1
- Module\STIG\Functions.Checklist.ps1
- Module\STIG\Functions.DomainName.ps1
- Module\STIG\STIG.psm1
Version History
Version | Downloads | Last updated |
---|---|---|
4.23.0 | 3,411 | 9/30/2024 |
4.22.0 | 8,128 | 5/31/2024 |
4.21.0 | 6,326 | 3/1/2024 |
4.20.0 | 3,028 | 1/12/2024 |
4.19.0 | 1,338 | 12/22/2023 |
4.18.0 | 3,533 | 9/5/2023 |
4.17.0 | 2,056 | 6/27/2023 |
4.16.0 | 3,384 | 3/16/2023 |
4.15.0 | 1,933 | 12/29/2022 |
4.14.0 | 2,948 | 9/14/2022 |
4.13.1 | 1,825 | 6/27/2022 |
4.13.0 | 221 | 6/16/2022 |
4.12.1 | 1,141 | 3/23/2022 |
4.12.0 | 70 | 3/18/2022 |
4.11.0 | 2,444 | 12/13/2021 |
4.10.1 | 4,726 | 8/31/2021 |
4.10.0 | 216 | 8/20/2021 |
4.9.1 | 3,267 | 6/3/2021 |
4.9.0 | 247 | 6/1/2021 |
4.8.0 | 2,561 | 3/1/2021 |
4.7.1 | 698 | 1/22/2021 |
4.7.0 | 567 | 12/17/2020 |
4.6.0 | 660 | 12/1/2020 |
4.5.1 | 893 | 10/12/2020 |
4.5.0 | 424 | 9/1/2020 |
4.4.2 | 1,192 | 7/7/2020 |
4.3.0 (current version) | 1,717 | 3/27/2020 |
4.2.0 | 1,296 | 12/20/2019 |
4.1.1 | 622 | 10/31/2019 |
4.0.0 | 693 | 9/20/2019 |
3.3.0 | 549 | 8/12/2019 |
3.2.0 | 951 | 5/25/2019 |
3.1.0 | 915 | 4/1/2019 |
3.0.1 | 186 | 3/12/2019 |
3.0.0 | 120 | 3/1/2019 |
2.4.0.0 | 3,479 | 2/7/2019 |
2.3.2.0 | 664 | 12/18/2018 |
2.3.1.0 | 220 | 12/7/2018 |
2.3.0.0 | 56 | 11/30/2018 |
2.2.0.0 | 914 | 10/10/2018 |
2.1.0.0 | 1,467 | 9/5/2018 |
2.0.0.0 | 2,713 | 8/17/2018 |
1.1.1.0 | 616 | 8/13/2018 |
1.1.0.0 | 621 | 7/29/2018 |
1.0.0.0 | 1,473 | 5/31/2018 |
0.9.3.0 | 527 | 1/8/2018 |
0.9.2.8 | 74 | 12/7/2017 |
0.9.2.7 | 89 | 11/3/2017 |