Rethink Security Base Data Section #760
Description
Description
While there are a lot of settings that should definitely be configured, there are other settings, especially PowerShell related that should rather be an Information.
For example Script Block Logging for PowerShell is something that comes with it's pros and cons and usually only gets activated on demand for debug purposes. This setting has downsides like possible information disclosure and cluttering the disk.
I suggest we go through the settings and decide which settings we only report a status for and which we really mark as failed/True
What are the benefits?
A more fair approach for these settings
Acceptance Criteria!
Each setting is assessed and implemented accordingly
Linked Issues?
No response
Additional Information!
No response