This script fixes the windows CIS Benchmark check 18.10.9.2.3: "Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'."

This script fixes the windows CIS Benchmark check 18.10.9.1.5: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit recovery key' or higher."

This script fixes the windows CIS Benchmark check 18.10.9.1.4: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48-digit recovery password' or higher."

This script fixes the windows CIS Benchmark check 18.10.9.1.3: "Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'."

This script fixes the windows CIS Benchmark check 9.3.7: "Ensure 'Windows Firewall: Public: Logging: Size limit (KB)' is set to '16,384 KB or greater'."

This script fixes the windows CIS Benchmark check 17.5.5: "Ensure 'Audit Other Logon/Logoff Events' is set to 'Success and Failure'."

This script fixes the windows CIS Benchmark check 17.6.3: "Ensure 'Audit Other Object Access Events' is set to 'Success and Failure'."

This script fixes the windows CIS Benchmark check 17.6.4: "Ensure 'Audit Removable Storage' is set to 'Success and Failure'."

The script uses the auditpol.exe command to configure and check the audit policy. It ensures the CIS check for 'Audit Removable Storage' passes by setting it to 'Success and Failure'.

Notes

• This script must be run with administrative privileges.
• Compatible with PowerShell 5.1 and later.
• Uses auditpol.exe, a standard Windows tool.

This script fixes the windows CIS Benchmark check 17.7.4: "Ensure 'Audit MPSSVC Rule-Level Policy Change' is set to 'Success and Failure'."

The script uses the auditpol.exe command to configure and check the audit policy. It must be run with administrative privileges.

This script fixes the windows CIS Benchmark check 17.8.1: "Ensure 'Audit Sensitive Privilege Use' is set to 'Success and Failure'."