Adds additional Windows 11 STIGs

plus3it · Aug 19, 2024 · dd8cd7a · dd8cd7a
1 parent 998ceb7
commit dd8cd7a
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/ash-windows/stig/Windows_11/init.sls b/ash-windows/stig/Windows_11/init.sls
@@ -1 +1,9 @@
-#No additional stig requirements
+SV-253283r828933_rule - Data Execution Prevention (DEP) must be configured to at least OptOut:
+  cmd.run:
+    - name: BCDEDIT /set "{current}" nx OptOut
+    - shell: powershell
+
+SV-253285r828939_rule - The Windows PowerShell 2.0 feature must be disabled on the system:
+  cmd.run:
+    - name: Disable-WindowsOptionalFeature -Online -NoRestart -FeatureName MicrosoftWindowsPowerShellV2Root
+    - shell: powershell