Skip to content

Update PowerStig to parse/apply Microsoft Windows 10 STIG - Ver 3, Rel 5 - #1519

Merged
Jerry Martin (MrAutomater) merged 2 commits into
4.28.0from
MrAutomater#1512
Dec 4, 2025
Merged

Jerry Martin (MrAutomater) merged 2 commits into
4.28.0from
MrAutomater#1512

Conversation

@MrAutomater

Copy link
Copy Markdown
Collaborator

Pull Request (PR) description:
Update PowerStig to parse/apply Microsoft Windows 10 STIG - Ver 3, Rel 5

This Pull Request (PR) fixes the following issues:

This fixes #
#1512
Task list:

  • Change details added to Unreleased section of CHANGELOG.md (Not required for Convert modules)?
  • Added/updated documentation, comment-based help and descriptions where appropriate?
  • Examples appropriately updated?
  • New/changed code adheres to Style Guidelines?
  • Unit and (optional) Integration tests created/updated where possible?

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates PowerStig to parse and apply the Microsoft Windows 10 STIG Version 3, Release 5, upgrading from Version 3, Release 3.

Key Changes:

  • Updated STIG version metadata from 3.3 to 3.5 with new benchmark date and filename
  • Removed rule V-220726 (Data Execution Prevention configuration)
  • Added 8 new audit policy rules (V-278918 through V-278925) for File System, Handle Manipulation, Registry, and Sensitive Privilege Use auditing
  • Split several rules into sub-rules (V-220718, V-220728, V-220906) to handle multiple related checks
  • Various corrections to descriptions, instructions, and formatting

Reviewed changes

Copilot reviewed 3 out of 5 changed files in this pull request and generated no comments.

File Description
source/StigData/Processed/WindowsClient-10-3.5.xml Main STIG configuration file updated with version 3.5 metadata, rule additions/removals, and text corrections
source/StigData/Processed/WindowsClient-10-3.5.org.default.xml Updated version to 3.5 and split V-220906 organizational setting into two entries (.a and .b)
source/StigData/Archive/Windows.Client/U_MS_Windows_10_STIG_V3R5_Manual-xccdf.log Conversion log documenting rule transformations and corrections applied during STIG processing
CHANGELOG.md Added entry documenting this update with issue reference #1512
Comments suppressed due to low confidence (6)

source/StigData/Processed/WindowsClient-10-3.5.xml:6493

  • Grammar improvement - changed 'high level' to 'high-level' with hyphen for proper compound adjective usage.
    source/StigData/Processed/WindowsClient-10-3.5.xml:1694
  • Extra space removed after 'system.' - the original had two spaces before '</VulnDiscussion>', now it has one. This is a spelling/formatting correction.
    source/StigData/Processed/WindowsClient-10-3.5.xml:1899
  • Grammar improvement - changed from 'the "Advanced" button' to 'then select "Advanced"' for better clarity and consistency.
    source/StigData/Processed/WindowsClient-10-3.5.xml:1999
  • Grammar improvement - changed from 'the "Advanced" button' to 'then select "Advanced"' for better clarity and consistency.
    source/StigData/Processed/WindowsClient-10-3.5.xml:2103
  • Grammar improvement - changed from 'the "Advanced" button' to 'then select "Advanced"' for better clarity and consistency.
    source/StigData/Processed/WindowsClient-10-3.5.xml:5216
  • Abbreviation simplified - changed 'Security Account Manager (SAM)' to just 'SAM' since the acronym is well-established in this context.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@MrAutomater
Jerry Martin (MrAutomater) merged commit b00560d into 4.28.0 Dec 4, 2025
1 of 3 checks passed
@MrAutomater
Jerry Martin (MrAutomater) deleted the MrAutomater#1512 branch December 5, 2025 23:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants