Update PowerSTIG to parse the IIS 8.5 1.9 Site and Server STIGs

[erjenkin]

Pull Request (PR) description:
Adding Updated IIS Site and Server STIGS V1R9

This Pull Request (PR) fixes the following issues:

This fixes #530

Task list:

• Change details added to Unreleased section of CHANGELOG.md (Not required for Convert modules)?
• Added/updated documentation, comment-based help and descriptions where appropriate?
• Examples appropriately updated?
• New/changed code adheres to Style Guidelines?
• Unit and (optional) Integration tests created/updated where possible?

---

This change is 

[bcwilhite]

Reviewed 12 of 12 files at r1.
Reviewable status: complete! all files reviewed, all discussions resolved (waiting on @jcwalker)

[stevehose]

Reviewable status: all files reviewed, 2 unresolved discussions (waiting on @erjenkin and @jcwalker)

---

Module/Rule.WebAppPool/Convert/Methods.ps1, line 111 at r1 (raw file):

        { $PsItem -match 'idleTimeout' }
        {
            return "[TimeSpan]{0} -le [TimeSpan]'00:20:00' -and [TimeSpan]{0} -ne [TimeSpan]'00:00:00'"

FYI, perhaps a better trap would be -gt 0 instead of -ne 0.

---

StigData/Archive/Web Server/U_MS_IIS_8-5_Server_STIG_V1R9_Manual-xccdf.log, line 2 at r1 ([raw file](https://github.com/microsoft/powerstig/blob/ea5fae154880c1b0ecd575ab7a6031292c8d0d6c/StigData/Archive/Web Server/U_MS_IIS_8-5_Server_STIG_V1R9_Manual-xccdf.log#L2)):

V-76695::This check does not apply to service account IDs utilized by automated services necessary to process, manage, and store log files::If an account associated with roles other than auditors
V-76759::*::HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server'; ValueData = 0; ValueName = 'DisabledByDefault'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server'; ValueData = 0; ValueName = 'DisabledByDefault'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server'; ValueData = 1; ValueName = 'DisabledByDefault'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server'; ValueData = 1; ValueName = 'DisabledByDefault'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server'; ValueData = 1; ValueName = 'DisabledByDefault'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.0\Server'; ValueData = 0; ValueName = 'Enabled'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 2.0\Server'; ValueData = 0; ValueName = 'Enabled'; ValueType = 'DWORD'}<splitRule>HardCodedRule(RegistryRule)@{DscResource = 'Registry'; Ensure = 'Present'; Key = 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\SSL 3.0\Server'; ValueData = 0; ValueName = 'Enabled'; ValueType = 'DWORD'}

Looks perfect.

---

StigData/Processed/IISServer-8.5-1.9.org.default.xml, line 9 at r1 (raw file):

-->
<OrganizationalSettings fullversion="1.9">
  <!-- Ensure ''V-76727.b'' -le '00:20:00'-->

Minor. Should update to match the test for -ne 0.

---

StigData/Processed/IISSite-8.5-1.9.xml, line 847 at r1 (raw file):

      <Key>idleTimeout</Key>
      <OrganizationValueRequired>True</OrganizationValueRequired>
      <OrganizationValueTestString>[TimeSpan]{0} -le [TimeSpan]'00:20:00' -and [TimeSpan]{0} -ne [TimeSpan]'00:00:00'</OrganizationValueTestString>

FYI. Again, recommend -gt 0.

[erjenkin]

---

StigData/Processed/IISServer-8.5-1.9.org.default.xml, line 9 at r1 (raw file):

Previously, stevehose (Steve Hose) wrote…

Minor. Should update to match the test for -ne 0.

this is a different rule that states 20 mins or less only

[erjenkin]

---

Module/Rule.WebAppPool/Convert/Methods.ps1, line 111 at r1 (raw file):

Previously, stevehose (Steve Hose) wrote…

FYI, perhaps a better trap would be -gt 0 instead of -ne 0.

Updated thanks

[erjenkin]

---

StigData/Processed/IISSite-8.5-1.9.xml, line 847 at r1 (raw file):

Previously, stevehose (Steve Hose) wrote…

FYI. Again, recommend -gt 0.

Updated thanks

[erjenkin]

---

StigData/Archive/Web Server/U_MS_IIS_8-5_Server_STIG_V1R9_Manual-xccdf.log, line 2 at r1 ([raw file](https://github.com/microsoft/powerstig/blob/ea5fae154880c1b0ecd575ab7a6031292c8d0d6c/StigData/Archive/Web Server/U_MS_IIS_8-5_Server_STIG_V1R9_Manual-xccdf.log#L2)):

Previously, stevehose (Steve Hose) wrote…

Looks perfect.

Done.