DISA STIG automation module for SQL Server
Install-Module dbadisa -Scope CurrentUser
# Detect version and create appropriate audit from DISA, output to DATA\Stig\, shutdown on failulre
Install-DbsAudit -SqlInstance sql2017, sql2016, sql2012
# Detect version and create appropriate audit from DISA, output to C:\temp, continue on failulre
Install-DbsAudit -SqlInstance sql2017 -Path C:\temp -OnFaiure Continue
# Set permissions for the default data, log and backups on sql2017, sql2016, sql2012 by adding
# appropriate permissions for the "AD\SQL Admins" group as well as the SQL Server service accounts.
Set-DbsAcl -SqlInstance sql2017, sql2016, sql2012 -Account "AD\SQL Admins"
# Create a DISA documentation template for 2016
New-DbsDocTemplate -FilePath C:\temp\sql2016.md
# Parse DISA XML and return checklsits for database and instance for SQL Server 2014 and 2016
Get-DbsStig
Get more help
Get-Help Install-DbsAudit -Detailed
- dbatools - For working with SQL
- PSFramework - For PowerShell goodness
- dbachecks - For checking your work
- Pester - Included in dbachecks