Home

Awesome

Automate the .NET Framework STIG

Sponsor VirusTotal Scan

Applying the .NET STIG is definitely not straightforward. For many administrators it can take hours to fully implement on a single system. This script applies the required registry changes and modifies the machine.config file to implement FIPS and other controls as required.

Notes:

This script can not and will not ever get the .NET stig to 100% compliance. Right now, as is, it stands to complete roughly 75% of the checks and does go back and complete the applicable checks on all previous .NET versions.

Manual intervention is required for any .NET application or IIS Site.

Ansible:

We now offer a playbook collection for this script. Please see the following:

Requirements:

STIGS/SRGs Applied:

Sources:

Download the required files

You may download the required files from the GitHub Repository

How to run the script

The script may be launched from the extracted GitHub download like this:

How to run the script

Manual Install:

If manually downloaded, the script must be launched from an administrative powershell in the directory containing all the files from the GitHub Repository

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Get-ChildItem -Recurse *.ps1 | Unblock-File
.\sos-.net-4-stig.ps1

Automated Install:

Use this one-liner to automatically download, unzip all supporting files, and run the latest version of the script.

iwr -useb 'https://simeononsecurity.ch/scripts/sosdotnet.ps1'|iex
<a href="https://simeononsecurity.ch" target="_blank" rel="noopener noreferrer">   <h2>Explore the World of Cybersecurity</h2> </a> <a href="https://simeononsecurity.ch" target="_blank" rel="noopener noreferrer">   <img src="https://simeononsecurity.ch/img/banner.png" alt="SimeonOnSecurity Logo" width="300" height="300"> </a>

Links: