Allen Houchins 3c8bf05fa3 Add security policies and reports to Workstations (#43457) ... Add multiple endpoint security policies and telemetry reports and wire them into the workstations fleet manifest. New macOS policies: firewall, Gatekeeper, SIP (critical), Remote Login disabled, screen-lock inactivity, and local-admin count; new Windows policies: Secure Boot, Remote Desktop disabled, interactive screen-lock timeout; new Linux policy: sshd PermitRootLogin restriction. Added cross-platform reports for disk encryption (includes BitLocker), local user/admin inventory, USB devices, listening ports, and Chromium-family browser extensions. These changes improve compliance and detection coverage (SOC2/ISO mappings included) and enable more comprehensive fleet monitoring. <!-- This is an auto-generated comment: release notes by coderabbit.ai --> ## Summary by CodeRabbit * **New Features** * Added device compliance checks: macOS firewall, Gatekeeper, SIP, local admin count, Windows Secure Boot, and Linux SSH root-login restriction * Disabled high-risk remote access: macOS Remote Login and Windows Remote Desktop checks * Added screen-lock inactivity checks for macOS and Windows * New inventory reports: local user accounts, connected USB devices, open listening ports, and browser extensions (Safari, Firefox, Chromium-family) <!-- end of auto-generated comment: release notes by coderabbit.ai --> --------- Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>		2026-04-29 11:00:42 -05:00
..
check-fleet-desktop-extension-enabled.yml	Updated script and policy for OpenSUSE support (#32779)	2025-09-09 14:11:56 -05:00
disk-encryption-check.yml	Converted to webhooks_and_tickets_enabled key for policies (#42950)	2026-04-02 21:09:30 -05:00
disk-space-check.yml	Add disk space check policies for workstations (#41212)	2026-03-07 19:52:02 -06:00
sshd-permitrootlogin-restricted.yml	Add security policies and reports to Workstations (#43457)	2026-04-29 11:00:42 -05:00