Stig, from TG, was this pilot that never talked and had a good number of cousins all over the world. Among his characteristics, he was a very good pilot in every kind of race and with every kind of track. Do you think he was always the same pilot?
A big part of the DISA STIGs are the Exploit Protection settings. But if you use Windows 10 1809 LTSC (aka Windows 10 Enterprise 2019) in your environment like we do, there is a bug in the ProccessMitigations module that prevents the policies from working correctly. For example, if your policy file has an entry for "excel.exe" but the actual executable is "EXCEL.EXE," it will not apply the policy to the image "EXCEL.EXE" when it runs.
Also, if you are using Tenable/Nessus to check compliance, the checks will fail as well if the case-ness of the executable doesn't exactly match that of the plug-in. Beat my head against the wall on that one; "Acrobat.exe" in the plug-in but "acrobat.exe" on the C: drive... it's there!! What's your problem??!?
When trying to set values manually with set-processmitigations, you may also receive the error. "Destination array was not long enough. Check destIndex and length, and the array's lower bounds"
The answer is to manually upgrade 1809's ProcessMitigations PowerShell module to the one that came with 1909 (non-LTSC), but no higher; 2004 introduced new functionality that 1809 doesn't know about, thus causing the dreaded yellow and red text when run on 1809. I mean, it would probably work...
We tried to script this entire thing, but had problems with the file ownership part; no matter what command-line method we used, it was hit-and-miss on changing the ownership of all files and folders every time. So for consistent results, the folder copying, ownership, etc. is done via GUI, in our case Dameware Remote Support, which is why there are references to that in our procedure (we also use it for remote CMD). We had less than 2 dozen physical machines to hit and the rest were VDI clones so it wasn't a huge undertaking for us.
Yeah, it's a quick-n-dirty solution, but it got us over the hump while doing a few dozen other things simultaneously. If we had had a less extreme deadline for compliance, we could have gotten a full scripted process lined out and working; we didn't. We ended up using a combination of Lansweeper (which has a handy option to run remote commands as SYSTEM), Dameware, and elbow grease to get it all done; YMMV. An enterprising admin, who has DISA STIG compliance looming but has received something resembling advance notice, could probably take it in from here for the touchdown. We're too tired at this point to make the effort.
In a nutshell, you are going to rename the original ProcessMitigations folder, c
... keep reading on reddit ➡Yeah I’m still trying to figure out the best stigs for her since I don’t have her signature set or weapon yet. I am still pulling for her weapon but looking for stig alternatives for using her as a Dps and support.
Birb is too much fun.
Ok we saw Control get pressed last year, anyone hear rumours of a pressing of the LIMBO soundtrack?
Hi, I am new to using Nessus and hoping you can help me.
When conducting a STIG's compliance scan on a Windows 10 target I get the following error: WMI_Error_Connect: an error happened while connecting to the WMI namespace
I assume this is due to the hardening process that has occurred.
Does anyone know why this is occurring and what changes I need to make to allow the compliance scan to run successfully?
I have tried the steps listed here https://community.tenable.com/s/article/Verifying-SMB-via-wbemtest
And also everything here https://community.tenable.com/s/article/Troubleshooting-Credential-scanning-on-Windows and we get a pass.
I have tried all the troubleshooting steps here and they pass! I am stumped as to what it could be!
Thanks again for any tips or tricks.
I have Shuijing TB and FuHua Margrave MB. I can finish one of the sets from the collectors shop since I have a ticket but I don’t know which one I should go for. SA never leaves my physical team and obviously AE gets frequent use in abyss, though Phoenix(whom I also heavily use) can use margrave as well. Could anyone give me some advice?
do you have any ideas on how to modify the stig rally car with just a few parts?
