inspec.yml

name: microsoft-iis-8.5-server-stig-baseline
title: Microsoft IIS 8.5 Server Security Technical Implementation Guide :: Version 2, Release 7 :: Benchmark Date:  25 Oct 2023
maintainer: MITRE SAF Team
copyright: MITRE
copyright_email: saf@groups.mitre.org
license: Apache-2.0
summary: InSpec profile aligned to DISA STIG for Microsoft IIS 8.5 Server Security Technical Implementation Guide
description: null
version: 2.7.1
supports: []
depends: []
inspec_version: "~>6.0"

inputs:
  # SV-214409
  - name: is_proxy
    description: 'Set to true if this system is running as a proxy server'
    value: false

  # SV-214400
  - name: log_fileds
    description: 'List of fields to be included in Web Server Logging Configuration'
    type: array
    value: ['Date', 'Time', 'ClientIP', 'UserName', 'Method', 'UriQuery', 'HttpStatus', 'Referer']

  # SV-214431
  - name: authorized_users
    description: 'A list of authorized users'
    type: array
    value: ['VAGRANT-IFT3JLA\vagrant']
    sensitive: true

  # SV-214411
  - name: minimal_local_users
    description: 'Minimum number of users required for server to operate'
    type: array
    value: ['Administrator', 'Guest', 'vagrant']

  # SV-214430
  - name: log_directory
    description: 'IIS site log directory'
    type: string
    value: '%SystemDrive%\inetpub\logs\LogFiles'

  # SV-214410, SV-214416
  - name: disable_slow_controls
    description: 'Disable slow running controls V-76705 and V-76717'
    value: false