Forum Discussion
New CIS Microsoft Windows 10 Enterprise Benchmarks Summary...
will it work for Windows 10 pro OS version?
Where the settings exist on Pro it should work fine. For the enterprise only features those items will probably need to be tweaked.
I would try running it as-is and review the results. From there you can modify or remove checks that don't apply. You also might need to make some adjustments to the filtering check at the top that tests the platform applicability.
- Approved
Thanks for your reply. While selecting win 10 Enterprise CIS audit file for Win 10 Pro PC, it's showing "NOTE: Nessus has not identified that the chosen audit applies to the target device." in the audit tab.
What I am doing here that, I set up a scanner in another PC in the same network, then from the cloud dashboard, configured the target PC with the required credential, select the CIS audit file and run command for scanning.
Appreciate if you can share any specific solution or guide me how to do.
- Approved
Look for the following 2 checks at the top of the audit
<condition type:"AND">
<custom_item>
type : REGISTRY_SETTING
description : "Windows 10 is installed"
value_type : POLICY_TEXT
value_data : "^[Ww][Ii][Nn][Dd][Oo][Ww][Ss] 10.+$"
reg_key : "HKLM\Software\Microsoft\Windows Nt\Currentversion"
reg_item : "ProductName"
check_type : CHECK_REGEX
</custom_item>
<custom_item>
type : REGISTRY_SETTING
description : "Check Windows Release"
value_type : POLICY_TEXT
value_data : "(1909|19[1-9][0-9]|[2-9][0-9][0-9][0-9])"
reg_key : "HKLM\Software\Microsoft\Windows Nt\Currentversion"
reg_item : "ReleaseId"
check_type : CHECK_REGEX
</custom_item>
</condition>
Most likely you'll need to collect the value of ReleaseId from HKLM\Software\Microsoft\Windows Nt\Currentversion from the target device and update the value_data regex to match the release ID value for Win 10 Pro.
You also could just comment out the second check which should let the audit run on any target with a ProductName value of "Windows 10..."
If you need a copy of the audit file they can be found on the Tenable Downloads site.
