Disk Encryption (At-Rest Encryption)
What Is Checked
Windows: BitLocker status
macOS: FileVault status
Linux: LUKS encryption
Fail → Pass Fix
Windows
Settings → System → Encryption → Enable BitLocker
Or (Admin):
manage-bde -on C: -RecoveryPassword
Verify:
manage-bde -status C:
macOS
System Settings → Privacy & Security → FileVault → Turn On
Linux
Enable LUKS encryption on disk partitions
Firewall
What Is Checked
Whether the system firewall is enabled
Fail → Pass Fix
Windows
Settings → Windows Security → Firewall → Enable
Or:
netsh advfirewall set allprofiles state on
macOS
System Settings → Network → Firewall → Turn On
Antivirus
What Is Checked
DSALTA looks for running antivirus processes, including:
Windows Defender
CrowdStrike
SentinelOne
Sophos
ClamAV (Linux)
Fail → Pass Fix
Enable Windows Defender
Or install and run a supported third-party antivirus
Screen Lock
What Is Checked
Screen lock enabled
Timeout ≤ 15 minutes
Password required on wake
Fail → Pass Fix
Windows
Settings → Personalization → Lock Screen
Screen saver settings
Enable screen saver
Set wait time ≤ 5 minutes
Enable “On resume, display logon screen.”
macOS
System Settings → Privacy & Security
Require a password after sleep
Set delay ≤ 5 minutes
Linux (GNOME)
Enable screen lock
Set idle timeout ≤ 5 minutes
Password Manager
What Is Checked
Presence of a supported password manager process.
Fail → Pass Fix
Install and use one of the supported password managers:
1Password, LastPass, Bitwarden, KeePass, Dashlane, NordPass, RoboForm, Keeper, Enpass, Proton Pass
After Fixing
Once a fix is applied:
Click Rescan in DSALTA Device Monitor
The status updates automatically
Failed checks move to Pass
Evidence is refreshed

