Search - ScriptShare

Search Results

Sets the registry key to disable Watson events for Windows Defender and verifies the change.

This script fixes the windows CIS Benchmark check 18.10.42.12.1: "Ensure 'Configure Watson events' is set to 'Disabled'."

This function modifies the registry to ensure 'Configure Watson events' is disabled as per CIS benchmark requirements. It creates the registry key if it does not exist, sets the specified value, and then verifies that the value is correctly set.

Example(s)

Set-CisWatsonEventsDisabled

XXeroSec

6mo ago

v1PowerShell Windows

18.10.42.13.2 cis_win11_enterprise

Fix Ensure 'Scan removable drives' is set to 'Enabled'.

This script fixes the windows CIS Benchmark check 18.10.42.13.2: "Ensure 'Scan removable drives' is set to 'Enabled'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.42.16

Fix Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'.

This script fixes the windows CIS Benchmark check 18.10.42.16: "Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.43.1

Fix Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'.

This script fixes the windows CIS Benchmark check 18.10.43.1: "Ensure 'Allow auditing events in Microsoft Defender Application Guard' is set to 'Enabled'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.43.2

Fix Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'.

This script fixes the windows CIS Benchmark check 18.10.43.2: "Ensure 'Allow camera and microphone access in Microsoft Defender Application Guard' is set to 'Disabled'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.43.3

Fix Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'.

This script fixes the windows CIS Benchmark check 18.10.43.3: "Ensure 'Allow data persistence for Microsoft Defender Application Guard' is set to 'Disabled'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.43.4

Fix Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'.

This script fixes the windows CIS Benchmark check 18.10.43.4: "Ensure 'Allow files to download and save to the host operating system from Microsoft Defender Application Guard' is set to 'Disabled'."

XXeroSec

6mo ago

v1PowerShell Windows

cis_win11_enterprise 18.10.43.6

This script sets the registry key to enable 'Turn on Microsoft Defender Application Guard in Managed Mode' as per CIS recommendations.

This script fixes the windows CIS Benchmark check 18.10.43.6: "Ensure 'Turn on Microsoft Defender Application Guard in Managed Mode' is set to 'Enabled: 1'."

The script checks and sets the registry value at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI\AllowAppHVSI_ProviderSet to 1 (DWORD). It verifies the setting after application and reports the result.