Workstation Policy & Logging Check
Logging and hardening settings a reviewer asks about first.
What it is
Reads the logging and hardening settings a reviewer asks about: which events are logged and how long the logs last, PowerShell logging, Defender's attack-surface rules and tamper setting, Remote Desktop's sign-in check, the Guest account, local admin password management and Wi-Fi auto-connect. Nothing is changed.
When something goes wrong, the first question is what the logs show. On many small-business computers the Security log is tiny and overwrites itself in days, PowerShell runs unrecorded, and Remote Desktop accepts a password guess before anyone signs in. This check reads those settings, which examiners and insurers ask about first, and tells you which to change.
What it checks
- Object-access and policy-change audit policy, and the size and retention of the Security, System and Application logs
- PowerShell script-block, module and transcription logging
- Defender attack-surface-reduction rules and tamper protection
- Remote Desktop's network-level authentication, the Guest account and local administrator password management (LAPS)
- Saved Wi-Fi networks set to auto-connect to open networks
Who it is for
- A business whose examiner, insurer or client asks for its logging and hardening settings
- A contractor or practice that must show how long its logs are kept
- An office that has turned on Remote Desktop for working from home
Price
$29 one-time. Also a member of 7 Industries bundle(s): Healthcare Practice Hardening Bundle; Financial Services Hardening Bundle; Defense Contractor Readiness Bundle; Manufacturing Plant Hardening Bundle; Law Firm Hardening Bundle; Public Office Hardening Bundle; School & Campus Hardening Bundle.
What it never does
It never changes a setting, installs anything, tries a password or signs in to an account. Where a check reads inside files it reports counts only — never a value, a file name or a path. Nothing is exploited and no credential is guessed. Your own answers are recorded as yours and never upgraded into something the scan observed.