This compliance profile utilizes tests based upon CIS Benchmark for Microsoft Windows Server 2016 RTM
This Compliance Profile requires InSpec for execution:
$ git clone [email protected]:cjbischoff/inspec-cis-windows2016rtm-level1-memberserver.git
$ inspec exec inspec-cis-windows2016rtm-level1-memberserver
$ inspec exec https://github.com/cjbischoff/inspec-cis-windows2016rtm-level1-memberserver -t winrm://Administrator@windowshost --password 'your-password'
Within inspec.yml
file add a depends:
depends:
- name: inspec-cis-windows2016rtm-level1-memberserver
git: https://github.com/cjbischoff/inspec-cis-windows2016rtm-level1-memberserver
Within the controls
directory add a place folder to include the profile and any excluisions from the standard that are not relevant
create the control file cis_windows2016rtm_level1_memberserver.rb
with the following contents:
include_controls 'windows-cis_windows2016rtm_level1_memberserver'
Within that control file you can also dynamicing modify specfics of the control and explicily include/excdie controls via profile inheritance