{"id":20472,"date":"2024-11-22T18:18:56","date_gmt":"2024-11-22T22:18:56","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=20472"},"modified":"2024-11-22T18:18:56","modified_gmt":"2024-11-22T22:18:56","slug":"sql-stigmonitor","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/","title":{"rendered":"SQL STIGMonitor"},"content":{"rendered":"
\"\"<\/a>
End the STIG(ma)<\/figcaption><\/figure>\n

Seriously, dream on!\u00a0 End the STIGma is a good thing, but STIGs can be a burden.\u00a0 Hit the easy button, if you’re not already using it.\u00a0 Contact your SQL Data and AI Cloud Solutions Architect for the latest SQL STIG Monitor 2024 Q4 build!<\/p>\n

\n

 <\/p>\n

Latest SQL STIG monitor 31 Oct 2024 release includes<\/strong><\/h3>\n

DISA UPDATES – see link<\/a>
\nMS SQL Server 2016 Instance STIG, V3R2:<\/p>\n

(NOTE: DISA has been contacted to remove related CCI STIGID for AzureSQLDB that was overlooked: ASQL-00-010700)<\/p>\n

POWERSHELL MODULE
\nUpdated version to 1.23
\nAdded STIGID parameter to Invoke-StigMonitor allowing granular control over STIGID scanning.<\/p>\n

DATABASE CHANGES
\nUpdated Checklist Templates for Q4 Revisions.
\nUpdated Instance & Database STIG for Q4 benchmark date.
\nScript updates include:<\/p>\n

CNTNMIXDB: Not A Finding if using Windows Auth
\nFORCENRYPT: NA if using Windows Auth
\nPWDCMPLX: Updated Finding to remove OS STIG reference
\nAZDBPERMISS: Revised script with new version.
\nDBPERMISS: Revised script with new version.
\nENFCACCSS: Revised script with new version.
\nPSERRPERM: Revised script with new version.
\nUNQSVCACC: Removed code stripping out port number.
\nAZAUDITSTATE: Properly returns No Finding when audit setup is correct.
\nFixed bug in vDocumentation view causing POAMs to not display custom comment in exported documentation.
\nAdded usp_RemoveInstance stored procedure to easily clean up a specific Instance from StigMonitor that no longer exists.<\/p>\n

DOCUMENTS
\nUpdated checklist templates, Approvals scripts, and Documentation Templates for Q4 Revisions.
\nRemoved Set-CEIPRegKeys.ps1, Set-FIPSCompliance.ps1, and Set-SqlRegKey.ps1 in favor of Module commands.
\nUpdated InfoPage with new StigMonitor logo and text references.
\nDocumentation updated with new examples of Invoke-StigMonitor STIGID parameter.
\nUpdated documentation to add Azure DB Permission for MS_SecurityDefinitionReader.
\nAdded DatabaseName to CSV Export of Export-StigDocumentation.<\/p>\n

REPORTS
\nUpdated Report banner to display new StigMonitor logo and latest report versions.
\nRemoved Adhoc scanning to Policy Management Report in favor of Invoke-StigMonitor parameter.
\nRemoved references to Sunset 2012 and 2014 STIGs.
\nAdded AzureSQLMI for future use.
\nCombined NF and Approved in Total Findings summary
\nReduced Recent Scans to latest 6.<\/p>\n

Also please send us your feedback if you get a chance to check this out.
\nIf you want to be added\/removed from this, click here (Subscribe \/Unsubscribe) or send us an email.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Seriously, dream on!\u00a0 End the STIGma is a good thing, but STIGs can be a burden.\u00a0 Hit the easy button, if you’re not already using it.\u00a0 Contact your SQL Data and AI Cloud Solutions Architect for the latest SQL STIG Monitor 2024 Q4 build!   Latest SQL STIG monitor 31 Oct 2024 release includes DISA … Continue reading “SQL STIGMonitor”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,567,3,5,545,530,502,556,1,742],"tags":[920,917,919,241,511,893,410,648,918],"class_list":["post-20472","post","type-post","status-publish","format-standard","hentry","category-administration","category-authoring","category-azure","category-best-practice","category-powershell","category-scom","category-security","category-sql","category-uncategorized","category-windows","tag-azure-sql-db","tag-disa-stig","tag-hardening-sql","tag-monitoring","tag-mssql","tag-mssqlserver","tag-sql","tag-stig","tag-stig-monitor"],"yoast_head":"\nSQL STIGMonitor - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL STIGMonitor - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-22T22:18:56+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"686\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"SQL STIGMonitor\",\"datePublished\":\"2024-11-22T22:18:56+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/\"},\"wordCount\":369,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/EndTheStigma-300x206.jpg\",\"keywords\":[\"Azure SQL DB\",\"DISA STIG\",\"hardening SQL\",\"monitoring\",\"MSSQL\",\"MSSQLServer\",\"sql\",\"STIG\",\"STIG Monitor\"],\"articleSection\":{\"0\":\"Administration\",\"1\":\"Authoring\",\"2\":\"Azure\",\"3\":\"Best Practice\",\"4\":\"PowerShell\",\"5\":\"SCOM\",\"6\":\"Security\",\"7\":\"SQL\",\"9\":\"Windows\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/\",\"name\":\"SQL STIGMonitor - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/EndTheStigma-300x206.jpg\",\"datePublished\":\"2024-11-22T22:18:56+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/EndTheStigma.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/EndTheStigma.jpg\",\"width\":1000,\"height\":686,\"caption\":\"End the STIG(ma)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2024\\\/11\\\/22\\\/sql-stigmonitor\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL STIGMonitor\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL STIGMonitor - Kevin Justin's Blog","description":"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/","og_locale":"en_US","og_type":"article","og_title":"SQL STIGMonitor - Kevin Justin's Blog","og_description":"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.","og_url":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2024-11-22T22:18:56+00:00","og_image":[{"width":1000,"height":686,"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma.jpg","type":"image\/jpeg"}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"SQL STIGMonitor","datePublished":"2024-11-22T22:18:56+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/"},"wordCount":369,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma-300x206.jpg","keywords":["Azure SQL DB","DISA STIG","hardening SQL","monitoring","MSSQL","MSSQLServer","sql","STIG","STIG Monitor"],"articleSection":{"0":"Administration","1":"Authoring","2":"Azure","3":"Best Practice","4":"PowerShell","5":"SCOM","6":"Security","7":"SQL","9":"Windows"},"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/","url":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/","name":"SQL STIGMonitor - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma-300x206.jpg","datePublished":"2024-11-22T22:18:56+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"This is a good introduction to use SQL STIG monitor to manage STIG compliance on your SQL database servers on your networks.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2024\/11\/EndTheStigma.jpg","width":1000,"height":686,"caption":"End the STIG(ma)"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2024\/11\/22\/sql-stigmonitor\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"SQL STIGMonitor"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=20472"}],"version-history":[{"count":3,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20472\/revisions"}],"predecessor-version":[{"id":20476,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/20472\/revisions\/20476"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=20472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=20472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=20472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}