126 lines
13 KiB
XML
126 lines
13 KiB
XML
<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="640" viewBox="0 0 1200 640" font-family="Inter, 'Segoe UI', Arial, sans-serif">
|
|
<defs>
|
|
<marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#4A4A50"/></marker>
|
|
<marker id="arrow-start" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="7" markerHeight="7" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="#4A4A50"/></marker>
|
|
</defs>
|
|
<rect x="0" y="0" width="1200" height="640" fill="#FAFAFB"/>
|
|
<text x="40" y="46" font-size="22" font-weight="600" fill="#1D1D1F" text-anchor="start">How GPO backups become verdicts</text>
|
|
<text x="40" y="72" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Configured customer settings are compared with the Microsoft Security Baselines. Every setting gets exactly one verdict.</text>
|
|
<rect x="40" y="100" width="200" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<circle cx="65" cy="121" r="11" fill="#1D1D1F"/>
|
|
<text x="65" y="126" font-size="12" font-weight="600" fill="#FFFFFF" text-anchor="middle">1</text>
|
|
<text x="84" y="126" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">GPO backup</text>
|
|
<text x="54" y="150" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Backup.xml,</text>
|
|
<text x="54" y="169" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">GPReport.xml,</text>
|
|
<text x="54" y="188" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Registry.pol,</text>
|
|
<text x="54" y="207" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">GptTmpl.inf,</text>
|
|
<text x="54" y="226" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Preferences</text>
|
|
<rect x="270" y="100" width="200" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<circle cx="295" cy="121" r="11" fill="#1D1D1F"/>
|
|
<text x="295" y="126" font-size="12" font-weight="600" fill="#FFFFFF" text-anchor="middle">2</text>
|
|
<text x="314" y="126" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Inventory worker</text>
|
|
<text x="284" y="150" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Classifies and parses</text>
|
|
<text x="284" y="169" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">every artifact in an</text>
|
|
<text x="284" y="188" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">isolated worker.</text>
|
|
<rect x="500" y="100" width="200" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<circle cx="525" cy="121" r="11" fill="#1D1D1F"/>
|
|
<text x="525" y="126" font-size="12" font-weight="600" fill="#FFFFFF" text-anchor="middle">3</text>
|
|
<text x="544" y="126" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Policy identity</text>
|
|
<text x="514" y="150" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Resolves each</text>
|
|
<text x="514" y="169" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">instruction to its</text>
|
|
<text x="514" y="188" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">technical setting ID.</text>
|
|
<rect x="730" y="100" width="200" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<circle cx="755" cy="121" r="11" fill="#1D1D1F"/>
|
|
<text x="755" y="126" font-size="12" font-weight="600" fill="#FFFFFF" text-anchor="middle">4</text>
|
|
<text x="774" y="126" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Snapshot per</text>
|
|
<text x="774" y="148" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">scope</text>
|
|
<text x="744" y="172" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Collects all backups</text>
|
|
<text x="744" y="191" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">of the timeslot per</text>
|
|
<text x="744" y="210" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">setting, with source.</text>
|
|
<rect x="960" y="100" width="200" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<circle cx="985" cy="121" r="11" fill="#1D1D1F"/>
|
|
<text x="985" y="126" font-size="12" font-weight="600" fill="#FFFFFF" text-anchor="middle">5</text>
|
|
<text x="1004" y="126" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Baseline</text>
|
|
<text x="1004" y="148" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">comparison</text>
|
|
<text x="974" y="172" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Compares with every</text>
|
|
<text x="974" y="191" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">applicable Microsoft</text>
|
|
<text x="974" y="210" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">baseline release.</text>
|
|
<path d="M240 170 H268" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M470 170 H498" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M700 170 H728" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M930 170 H958" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M1040 240 V285" fill="none" stroke="#4A4A50" stroke-width="2"/>
|
|
<path d="M127.5 285 H1072.5" fill="none" stroke="#4A4A50" stroke-width="2"/>
|
|
<path d="M127.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M316.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M505.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M694.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M883.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<path d="M1072.5 285 V328" fill="none" stroke="#4A4A50" stroke-width="2" marker-end="url(#arrow)"/>
|
|
<text x="590" y="278" font-size="14" font-weight="400" fill="#1D1D1F" text-anchor="middle">one rolled-up verdict per technical setting</text>
|
|
<rect x="40" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="40" y="330" width="4" height="140" fill="#D64545"/>
|
|
<text x="56" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Deviation</text>
|
|
<text x="56" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">A configured value</text>
|
|
<text x="56" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">fails the</text>
|
|
<text x="56" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">baseline. Counts</text>
|
|
<text x="56" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">in the score.</text>
|
|
<rect x="229" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="229" y="330" width="4" height="140" fill="#2E9E5B"/>
|
|
<text x="245" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Passed</text>
|
|
<text x="245" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Every configured</text>
|
|
<text x="245" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">member value</text>
|
|
<text x="245" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">matches. Counts in</text>
|
|
<text x="245" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">the score.</text>
|
|
<rect x="418" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="418" y="330" width="4" height="140" fill="#8E8E96"/>
|
|
<text x="434" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Review required</text>
|
|
<text x="434" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Applicability or</text>
|
|
<text x="434" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">precedence</text>
|
|
<text x="434" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">unresolved. Never</text>
|
|
<text x="434" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">guessed as a fail.</text>
|
|
<rect x="607" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="607" y="330" width="4" height="140" fill="#8E8E96"/>
|
|
<text x="623" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Not configured</text>
|
|
<text x="623" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Recommended, but</text>
|
|
<text x="623" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">absent from the</text>
|
|
<text x="623" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">backups.</text>
|
|
<text x="623" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Score-neutral.</text>
|
|
<rect x="796" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="796" y="330" width="4" height="140" fill="#8E8E96"/>
|
|
<text x="812" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">No baseline rule</text>
|
|
<text x="812" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Configured, but no</text>
|
|
<text x="812" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">baseline</text>
|
|
<text x="812" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">recommends it.</text>
|
|
<text x="812" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Score-neutral.</text>
|
|
<rect x="985" y="330" width="175" height="140" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="985" y="330" width="4" height="140" fill="#8E8E96"/>
|
|
<text x="1001" y="356" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Not comparable</text>
|
|
<text x="1001" y="380" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Group Policy</text>
|
|
<text x="1001" y="399" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Preference, no</text>
|
|
<text x="1001" y="418" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">policy identity.</text>
|
|
<text x="1001" y="437" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Score-neutral.</text>
|
|
<text x="40" y="500" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Diagnostic flags (shown next to the verdict, never replacing it)</text>
|
|
<rect x="40" y="516" width="260" height="96" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="40" y="516" width="4" height="96" fill="#E07A1F"/>
|
|
<text x="56" y="542" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Conflicts</text>
|
|
<text x="56" y="566" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Different backups set the</text>
|
|
<text x="56" y="585" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">same setting differently.</text>
|
|
<rect x="320" y="516" width="260" height="96" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="320" y="516" width="4" height="96" fill="#E07A1F"/>
|
|
<text x="336" y="542" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Duplicates</text>
|
|
<text x="336" y="566" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Several backups set the</text>
|
|
<text x="336" y="585" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">identical value.</text>
|
|
<rect x="600" y="516" width="260" height="96" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="600" y="516" width="4" height="96" fill="#8E8E96"/>
|
|
<text x="616" y="542" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">Not linked</text>
|
|
<text x="616" y="566" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">The backup report lists no</text>
|
|
<text x="616" y="585" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">enabled link. No effect.</text>
|
|
<rect x="880" y="516" width="280" height="96" rx="0" fill="#F5F5F7" stroke="#DCDDE3" stroke-width="1"/>
|
|
<rect x="880" y="516" width="4" height="96" fill="#D99A00"/>
|
|
<text x="896" y="542" font-size="16" font-weight="600" fill="#1D1D1F" text-anchor="start">GPO score</text>
|
|
<text x="896" y="566" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">Passed / (Passed + Deviation) of</text>
|
|
<text x="896" y="585" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">configured, comparable in-scope</text>
|
|
<text x="896" y="604" font-size="14" font-weight="400" fill="#5F6068" text-anchor="start">settings.</text>
|
|
</svg>
|
