SYS-24
: Added new check to search for a specific file and report on any results.
SEC-18
: Removed the patch checking as there were multiple possible values. Registry checking still exists.
SEC-20
: Added check to makes sure you are not using LMHashes.
SEC-19
: Added new check for finding any unquoted service paths
- GUI changes to the input form. It's now sizable for the list and checkbox views.
- It was easier than I thought to convert from COM- to TOL-. Your settings files will be automatically converted if you use the QASCT. If you use the compiler manually, it will read in both the new and old versions.
- Renamed Compliance section to Tooling. This is only a label change, all your settings and configuration will remain intact. I'll rename the checks from COM- to TOL- at a later date.
- Minor changes to the QASCT to enable links in check descriptions
SEC-18
: Added new check for the Spectre issue
- Added 7 news checks for SQL server scanning. The PowerShell module SQLPS must be installed on the server you are scanning for these to work
COM-04
: Bug fix for getting server names
COM-12
: Added ignore for domain controllers (also updateden-GB.ini
)SEC-04
: Bug fix for wrong registry keySYS-12
: Added check for missing/empty registry key
- Initial Version 4 Upload