7
2
9
0
This script fixes the windows CIS Benchmark check 18.10.43.5: "Ensure 'Configure Microsoft Defender Application Guard clipboard settings: Clipboard behavior setting' is set to 'Enabled: Enable clipboard operation from an isolated session to the host'."
This script fixes the windows CIS Benchmark check 18.10.9.3.7: "Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'."
This script fixes the windows CIS Benchmark check 18.10.9.2.3: "Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'."
This script fixes the windows CIS Benchmark check 18.10.9.1.5: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key' or higher."
This script fixes the windows CIS Benchmark check 18.10.9.1.4: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password' or higher."
This script fixes the windows CIS Benchmark check 18.10.9.1.3: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'."
This script fixes the windows CIS Benchmark check 9.3.7: "Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'."
This script fixes the windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."
This script fixes the windows CIS Benchmark check 17.6.3: "Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'."
This script fixes the windows CIS Benchmark check 17.6.4: "Ensure 'Audit Removable Storage' is set to 'Success and Failure'."
The script uses the auditpol.exe command to configure and check the audit policy. It ensures the CIS check for 'Audit Removable Storage' passes by setting it to 'Success and Failure'.