Work / Collection

STIG remediations

PowerShell scripts that bring a system into line with DISA STIG controls. Each script fixes one finding, and each fix is confirmed with a Tenable rescan.

Scripts
Benchmark
Windows 11 STIG V2R8
Language
PowerShell

Scripts

STIG IDWhat it enforcesPlatformLinks

How I work a finding

  1. Run a Tenable compliance audit against the benchmark and export the failures.
  2. Read the control and work out the registry key, policy, or setting it checks.
  3. Write a script that makes the change and can be run again safely.
  4. Rescan to confirm the finding is closed.