Puppet Class: secure_windows::stig::v73521

Defined in:
manifests/stig/v73521.pp

Overview

V-73521 Early Launch Antimalware, Boot-Start Driver Initialization Policy must prevent boot drivers identified as bad.

Parameters:

  • enforced (Boolean) (defaults to: false)
  • driverloadpolicy (Enum['1','3','8']) (defaults to: '1') 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
# File 'manifests/stig/v73521.pp', line 3

class secure_windows::stig::v73521 (
  Boolean $enforced = false,
  Enum['1','3','8'] $driverloadpolicy = '1',
) {

  if $enforced {

    $driverloadpolicyval = $driverloadpolicy ? {
      '1' => '0x00000001',
      '3' => '0x00000003',
      '8' => '0x00000008',
    }

    registry::value { 'v73521':
      key   => 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch',
      value => 'DriverLoadPolicy',
      type  => 'dword',
      data  => $driverloadpolicyval,
    }

  }

}