docker-admxlint

Sun, 26 May 2024 00:00:00 +0000

docker-admxlint packages the C++ admx-lint validator tool into a lightweight, CI/CD-ready Docker image. This container allows system administrators and policy engineers to validate custom Administrative Templates (.admx) and language resource files (.adml) against official Microsoft XML Schema Definitions (XSD) without having to manually build or run dependencies locally.

It is particularly useful for pipeline automation when building custom GPO baselines.

Key Use Cases & Features

Schema Compliance: Verifies namespace structures, element definitions, and category mappings against official Group Policy schemas.
Pipeline Integration: Easily integrate ADMX lint checks into GitHub Actions, GitLab CI, or custom DevSecOps pipelines.
Zero Local Setup: Eliminates the need to configure build environments or C++ compilers on local development workstations.

Quick Usage

Run the linter on your ADMX files by mounting your templates folder into the container:

docker run --rm -v $(pwd)/policies:/workspace harvester57/docker-admxlint:latest /workspace

exploit-protection-policy

Wed, 22 May 2024 00:00:00 +0000

Exploit-Protection-policy provides a production-hardened Exploit Protection (EP) policy tailored for Windows 10 and Windows 11 systems. It combines multiple industry-standard security baselines with advanced restrictions to maximize security without breaking compatibility with everyday applications.

This policy has been tested in air-gapped systems to protect endpoints from advanced threat vectors while maintaining productivity.

Merged Security Baselines

DISA STIG Exploit Protection v3.
Microsoft Security Baseline Exploit Protection policy (specifically aligned for enterprise systems).
milgradesec’s custom Exploit Protection rule configurations.

Key Protections Enforced