PowerStig is a PowerShell module that contains several components to automate different DISA Security Technical Implementation Guides (STIGs) where possible.

1. A module to extract settings from check-content elements of the xccdf
2. Parsed Stig data that can be used by other components of this module or additional automation
3. A module with PowerShell classes to provide a way of retrieving the parsed STIG data and documenting deviations
   1. Provides a method to apply exceptions to a setting
   2. Provides a method to exclude a rule
   3. Provides a method to exclude an entire class of rules
4. Windows PowerShell Desired State Configuration (DSC) composite resources to manage the configurable items
5. A module to create checklists and other types of documentation (Coming soon)

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.

Branch	Status	Description
master		Ccontains the latest release - no contributions should be made directly to this branch.
dev		Where contributions should be proposed by contributors as pull requests. This branch is merged into the master branch, and be released to PowerShell Gallery.

To see the released PowerStig module, go to the PowerShell Gallery. We recommend that you use PowerShellGet to install PowerStig:

For example:

Install-Module -Name PowerStig

To update a previously installed module use this command:

Update-Module -Name PowerStig

• Browser: Provides a mechanism to manage Browser STIG settings.

• DotNetFramework: Provides a mechanism to manage .Net Framework STIG settings.

• SqlServer: Provides a mechanism to manage SqlServer STIG settings.

• WindowsDnsServer: Provides a mechanism to manage Windows DNS Server STIG settings.

• WindowsFirewall: Provides a mechanism to manage the Windows Firewall STIG settings.

• WindowsServer: Provides a mechanism to manage the Windows Server STIG settings.

You are more than welcome to contribute to the development of PowerStig. There are several different ways you can help. You can create new convert modules, add test automation, improve documentation, fix existing issues, or open new ones. See our contributing guide for more info on how to become a contributor. If you would like to contribute to a Composite Resource, please check out common DSC Resources contributing guidelines.

Thank you to everyone that has reviewed the project and provided feedback through issues. We are especially thankful for those who have contributed pull requests to the code and documentation.

• @athaynes (Adam Haynes)
• @bgouldman (Brian Gouldman)
• @camusicjunkie
• @chasewilson (Chase Wilson)
• @clcaldwell (Coby Caldwell)
• @jcwalker (Jason Walker)
• @ldillonel
• @mcollera
• @nehrua (Nehru Ali)
• @regedit32 (Reggie Gibson)

• Merged PowerStigDsc into PowerStig so there is only one module to maintain
  • Replaced PowerStig Technology Class with Enumeration
  • Added script module back to manifest
  • Added DotNetFramework composite resource

Update IIS Server STIG V-76723.a with correct value

Replaced Technology class with enumeration. This breaks PowerStigDsc < 1.1.0.0

Added the following STIGs:

• IIS 8.5 Server STIG V1R3

Updates

• Updated SQL STIG code to account for SQL STIGS being added in PowerStigDsc
• Update to PowerStig.psm1 to fix issue were StigData class was not accessible to PowerStigDsc

Added the following STIGs:

• Windows Server 2012R2 MS STIG V2R12
• Windows Server 2012R2 DC STIG V2R12
• Windows Server DNS V1R9
• Windows AD Domain V2R9
• IE11 V1R15