1.9 KiB
1.9 KiB
Device Compliance
Get-BitLocker
- Detection: Checks if BitLocker is enabled.
- Remediation: Enables BitLocker if it is disabled.
Get-CredentialGuard
- Detection: Checks if CredentialGuard is enabled.
- Remediation: Enables CredentialGuard if it is disabled.
Get-CustomCompliance-Registry
- Detection: Checks for an existing Registry File, considered required for "Compliance" in your environment.
- Remediation: Creates the Registry File specified if the detection cannot find the mentioned registry key.
Get-CustomCompliance-File
- Detection: Checks for an existing File in a File Path, considered required for "Compliance" in your environment.
- Remediation: Creates the File (and Path) specified if the detection cannot find the mentioned file.
Get-DeviceGuard
- Detection: Checks if DeviceGuard is enabled.
- Remediation: Enables DeviceGuard if it is disabled.
Get-Firewall
- Detection: Checks if any Firewall profiles are disabled.
- Remediation: Enables the Firewall profiles if they are disabled.
Get-SecureBoot
- Detection: Checks if SecureBoot is enabled.
- Remediation: Enables SecureBoot if it is disabled. (This will require a reboot)