API Reference
SecurityCoreSummary
Security posture summary derived from effective policy for a single scope. Values are best‑effort and based on already parsed data (no extra registry reads).
Inheritance
- Object
- SecurityCoreSummary
Constructors
public SecurityCoreSummary() #Inherited Methods
Properties
public String DomainName { get; set; } #Domain DNS name.
public String DistinguishedName { get; set; } #Distinguished Name of the evaluated object.
public String Scope { get; set; } #Scope label (Computer or User).
public Nullable<Boolean> SmbSigningServerRequired { get; set; } #True when SMB server signing is required, false when explicitly disabled, null when unknown.
public Nullable<Boolean> SmbSigningClientRequired { get; set; } #True when SMB client signing is required, false when explicitly disabled, null when unknown.
public Nullable<Boolean> RdpNlaRequired { get; set; } #True when NLA is required for RDP, null when unknown.
public Nullable<Boolean> RdpInboundAllowed { get; set; } #True when an inbound RDP allow rule is present; null unknown.
public Nullable<Boolean> LsaProtectionEnabled { get; set; } #True when LSA protection (RunAsPPL) is enabled; null unknown.
public Nullable<Boolean> NtlmV1Disabled { get; set; } #True when NTLMv1 is effectively disabled; null unknown.
public Nullable<Boolean> WDigestDisabled { get; set; } #True when WDigest UseLogonCredential is disabled; null unknown.
public Nullable<Boolean> LapsConfigured { get; set; } #True when Windows LAPS policy is present; null unknown.
public Nullable<Boolean> WsusConfigured { get; set; } #True when WSUS is configured, otherwise null/false.
public Nullable<Boolean> WsusHttpsOnly { get; set; } #True when WSUS endpoints are HTTPS‑only; null unknown.
public Nullable<Boolean> UseWUServer { get; set; } #True when UseWUServer is set; null unknown.
public Nullable<Boolean> DefenderAsrRulesEnabled { get; set; } #True when Defender ASR rules are enabled; null unknown.
public Int32 DefenderExclusionExtensions { get; set; } #Count of Defender exclusion extensions.
public Int32 DefenderExclusionPaths { get; set; } #Count of Defender exclusion paths.
public Int32 DefenderExclusionProcesses { get; set; } #Count of Defender exclusion processes.
public Int32 AppLockerRuleCount { get; set; } #Total AppLocker rules across applied GPOs.
public String[] Notes { get; set; } #Optional notes captured during evaluation.