<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# API Reference — Configuring Endpoint Hardening Baselines

## Hardening Assessment APIs

### CIS-CAT Pro Assessor CLI

| Command | Description |
|---|---|
| `Assessor-CLI.sh -b <benchmark.xml>` | Run CIS benchmark assessment |
| `Assessor-CLI.sh -b <benchmark.xml> -p <profile>` | Assess specific profile (Level 1/2) |
| `Assessor-CLI.sh -html` | Generate HTML compliance report |

### Windows Group Policy

| Command | Description |
|---|---|
| `gpresult /r` | Display applied group policies |
| `gpupdate /force` | Force group policy refresh |
| `auditpol /get /category:*` | Display audit policy settings |
| `secedit /analyze /db baseline.sdb /cfg baseline.inf` | Analyze security configuration |

### Agent Script

```bash
# Check SSH configuration
node agent.js check-sshd --config /etc/ssh/sshd_config

# Validate sysctl hardening
node agent.js check-sysctl

# Audit running services
node agent.js audit-services
```
