ScriptShare

This script fixes the windows CIS Benchmark check 18.10.9.2.6: "Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'."

This script fixes the windows CIS Benchmark check 9.2.6: "Ensure 'Windows Firewall: Private: Logging: Log dropped packets' is set to 'Yes'."

The script ensures that the registry key for logging dropped packets in the Private profile of the Windows Firewall is set to 'Yes' (value 1). It also verifies the setting after remediation and reports the result.

Notes

• This script must be run with administrative privileges.
• Compatible with PowerShell 5.1 and later.