add section 18.9.48

aquasecurity · Dec 7, 2023 · e95dc65 · e95dc65
1 parent 6410a3b
commit e95dc65
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/cfg/2.0.0/definitions.yaml b/cfg/2.0.0/definitions.yaml
@@ -4018,3 +4018,21 @@ groups:
           To establish the recommended configuration via GP, set the following UI path to 'Disabled':
              Computer Configuration\Policies\Administrative Templates\System\Troubleshooting and Diagnostics\Windows Performance PerfTrack\Enable/Disable PerfTrack
         scored: true
+      - id: 18.9.48.1
+        description: "Ensure 'Turn off the advertising ID' is set to 'Enabled' (Automated)"
+        audittype: powershell
+        audit:
+          cmd:
+            DomainController: Get-ItemPropertyValue 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo' DisabledByGroupPolicy
+            MemberServer: Get-ItemPropertyValue 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo' DisabledByGroupPolicy
+        tests:
+          test_items:
+            - flag: ""
+              compare:
+                op: eq
+                value: "1"
+              set: true
+        remediation: >
+          To establish the recommended configuration via GP, set the following UI path to 'Enabled':
+             Computer Configuration\Policies\Administrative Templates\System\User Profiles\Turn off the advertising ID
+        scored: true