Apotrope — Security Posture Report

Security Score

/ 100

D Poor

56 checks evaluated

Executive Summary

35 passed 3 failed 4 warnings 14 info

The security posture of WORKSTATION-07 has been assessed as Poor with an overall score of 69/100 (D) across 56 security checks. 1 high-severity finding should be addressed promptly. Of the checks performed, 3 checks failed and 4 checks issued warnings. The primary areas of concern are Firewall, File Sharing and PowerShell. Remediation should be prioritized by severity, addressing critical and high-severity findings first.

Result Distribution56

PASS35

FAIL3

WARN4

INFO14

Category Scores14 areas

⚑ Top Issues Prioritized remediation · 4

HIGH FAIL

Public Profile Inbound

Fix: Set the Public profile default inbound action to Block.

HIGH WARN

RDP Network Level Authentication

Fix: Require NLA for all RDP connections.

MEDIUM FAIL

SMB Signing Required

Fix: Enable 'Microsoft network server: Digitally sign communications (always)'.

MEDIUM FAIL

Script Block Logging

Fix: Enable Script Block Logging via Administrative Templates.

Access Control !1 ✓3 98/100 A

Accounts !1 ✓4 i1 98/100 A

Antivirus ✓3 i1 100/100 A

Encryption ✓1 100/100 A

Firewall ✗1 ✓5 90/100 A

Hardening ✓4 i1 100/100 A

Network ✓3 i2 100/100 A

Patching !1 ✓1 i1 98/100 A

Persistence ✓1 i1 100/100 A

PowerShell ✗1 ✓4 95/100 A

Remote Access !1 i1 95/100 A

Services ✓2 100/100 A

System ✓2 i6 100/100 A

For authorized security assessment use only · No data left this machine · CIS Benchmark v5.0.0 apotrope.sh · github.com/hexorcist404/apotrope · MIT