Windows Security Audit Script

Comprehensive Module-Based Multi-Framework Windows Security Assessment/Auditing & Remediation Tool

Overview • Key Features • Quick Start • Documentation • Remediation Capabilities • Contributing

📋 Overview

The Windows Security Audit Script is an advanced PowerShell-based security compliance auditing tool that evaluates Windows systems against multiple industry-standard security frameworks. Version 5.3 introduces intelligent remediation capabilities, enhanced reporting, and SIEM integration, making it a complete security assessment and hardening solution.

The tool performs 550+ automated security checks across seven compliance modules, generating comprehensive reports in multiple formats with actionable remediation guidance. Whether you're conducting compliance audits, hardening systems, or maintaining security baselines, this tool provides the insights and automation you need.

🎯 Key Features

🔍 Comprehensive Security Assessment

✅ 550+ Security Checks across 7 major security frameworks
✅ Multi-Framework Coverage - CIS, NIST, STIG, NSA, CISA, Microsoft, Core Baseline
✅ Modular Architecture - Run all frameworks or select specific modules
✅ Result Validation - Automated data integrity checks and normalization
✅ No External Dependencies - Pure PowerShell implementation

📊 Advanced Reporting (New in 5.3)

✅ Interactive HTML Reports with:
- 🌓 Dark/Light theme toggle
- 🔍 Advanced filtering and sorting per column
- 📤 Multi-format export (CSV, Excel, JSON, XML, TXT)
- ☑️ Checkbox-based selective export
- 📑 Per-module and global export options
- 📊 Executive dashboard with statistics
✅ SIEM-Compatible XML output for security monitoring platforms
✅ Multiple Output Formats - HTML, JSON, CSV, XML, Console
✅ Structured Data - API and automation-friendly formats

🔧 Intelligent Remediation (New in 5.3)

✅ Interactive Remediation - Review and apply fixes individually
✅ Automated Remediation - Batch fix with safety confirmations
✅ Selective Remediation - Target specific status types (Fail, Warning, Info)
✅ Targeted Remediation - Fix only selected issues from JSON export
✅ Remediation Logging - Comprehensive audit trail of all changes
✅ Safety Mechanisms - Double-confirmation and countdown timers
✅ Rollback Support - Detailed logs for reverting changes

📈 Quality Assurance

✅ Result Validation - Ensures data integrity across all modules
✅ Status Normalization - Consistent categorization (Pass/Fail/Warning/Info/Error)
✅ Module Statistics - Real-time tracking and reporting
✅ Execution Metadata - Complete audit trail preservation
✅ Error Handling - Graceful degradation on check failures

🏢 Supported Frameworks

Module	Framework	Checks	Focus Areas
Core	Foundational Windows Security Baseline	45+	Essential system security, baseline configuration
CIS	CIS Microsoft Windows Benchmarks v3.0+	127+	Industry best practices, scored recommendations
MS	Microsoft Security Baselines (SCT)	80+	Defender, AppLocker, ASR rules, exploit protection
NIST	NIST 800-53 Rev 5, CSF, 800-171	60+	Federal compliance, control families (AC, AU, IA, SC, SI)
STIG	DISA Security Technical Implementation Guide	90+	DoD requirements, CAT I/II/III severity ratings
NSA	NSA Cybersecurity Information Sheets	60+	Nation-state threat mitigation, hardening guidance
CISA	CISA Cybersecurity Performance Goals	80+	Critical infrastructure protection, KEV mitigation

Total Coverage: 550+ security checks across access control, authentication, auditing, network security, data protection, malware defense, and system hardening.

🚀 Quick Start

Prerequisites

Operating System: Windows 10/11 or Windows Server 2016/2019/2022
PowerShell: Version 5.1 or later (included in modern Windows)
Privileges: Administrator rights required for complete results
Privileges for Remediation: Administrator rights mandatory for applying fixes

Installation

Clone the repository:

   git clone https://github.com/Sandler73/Windows-Security-Audit-Project.git
   cd Windows-Security-Audit-Project

Set execution policy (if needed):

   Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope CurrentUser

Verify prerequisites:

   # Check PowerShell version
   $PSVersionTable.PSVersion

   # Check if running as Administrator
   ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)

Basic Usage

Run full audit with default HTML report:

.\Windows-Security-Audit-Script.ps1

Run specific frameworks:

.\Windows-Security-Audit-Script.ps1 -Modules Core,NIST,CISA

Generate CSV output:

.\Windows-Security-Audit-Script.ps1 -OutputFormat CSV

SIEM integration with XML:

.\Windows-Security-Audit-Script.ps1 -OutputFormat XML -OutputPath "\\SIEM\imports\audit.xml"

🔧 Remediation Capabilities

Version 5.3 introduces comprehensive remediation features with multiple workflows to suit different needs and risk tolerances.

Remediation Modes

1. Interactive Remediation (Safest)

Review and approve each fix individually:

.\Windows-Security-Audit-Script.ps1 -RemediateIssues

Prompts for each remediation
Full visibility into changes
Skip option (Y/N/S)
Recommended for production systems

2. Status-Based Remediation

Target specific severity levels:

# Fix only critical failures
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Fail

# Fix warnings interactively
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Warning

# Address informational items
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Info

# Fix everything (all status types)
.\Windows-Security-Audit-Script.ps1 -RemediateIssues

3. Automated Remediation (Advanced)

Batch remediation with safety confirmations:

.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Fail -AutoRemediate

Safety Features:

Displays all changes before execution
Requires typing "YES" to confirm
Secondary confirmation with 10-second timeout
Requires typing "CONFIRM" to proceed
Comprehensive remediation logging

4. Targeted Remediation (Precision)

Fix only specific issues selected from HTML report:

Workflow:

# Step 1: Run audit and review findings
.\Windows-Security-Audit-Script.ps1

# Step 2: In HTML report, select specific issues and click "Export Selected"
# This generates a JSON file (e.g., Selected-Report.json)

# Step 3: Run targeted auto-remediation
.\Windows-Security-Audit-Script.ps1 -AutoRemediate -RemediationFile "Selected-Report.json"

Benefits:

Surgical precision - fix only what you select
Review in detail before committing
Perfect for change control processes
Ideal for compliance-driven remediation

Remediation Logging

All remediation actions are logged with full details:

Remediation-Log-YYYYMMDD-HHMMSS.json

Log includes:

Timestamp for each action
Module and category
Issue description
Remediation command executed
Success/failure status
Error messages (if failed)

Example Remediation Output

========================================================================================================
                                  REMEDIATION MODE
========================================================================================================

[*] Mode: Remediate FAIL issues only
[*] Found 42 issue(s) with remediation available

[*] Issue: SMBv1 protocol is ENABLED
    Module: STIG | Status: Fail | Category: STIG - V-220968 (CAT II)
    Remediation: Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol -NoRestart
    Apply remediation? (Y/N/S=Skip remaining): Y
    [+] Remediation applied successfully

[*] Issue: Guest account is ENABLED
    Module: Core | Status: Fail | Category: Core - Accounts
    Remediation: Disable-LocalUser -Name Guest
    Apply remediation? (Y/N/S=Skip remaining): Y
    [+] Remediation applied successfully

========================================================================================================
Remediation Summary:
  Total issues found: 42
  Successfully remediated: 38
  Failed remediations: 2
  Skipped: 2
  Success rate: 90.5%
========================================================================================================

[*] Remediation log saved to: Remediation-Log-20250101-120000.json
[*] Some settings may require a system restart to take effect.
Would you like to restart now? (Y/N):

📊 Output Formats & Reports

1. HTML Report (Interactive) - Default

Features:

🎨 Theme Toggle - Switch between light and dark modes
📊 Executive Dashboard - Summary statistics and compliance overview
🔍 Advanced Filtering - Filter by status, category, or keyword per column
↕️ Dynamic Sorting - Click column headers to sort
📤 Export Options:
- Export All - Complete report in multiple formats
- Export Selected - Choose specific issues via checkboxes
- Per-Module Export - Export individual framework results
- Format Options - CSV, Excel, JSON, XML, TXT
📑 Collapsible Modules - Expand/collapse each framework section
🔧 Remediation Guidance - Detailed fix instructions for each finding
📱 Responsive Design - Works on desktop and tablet displays

Export Workflow:

Review findings in HTML report
Use checkboxes to select specific issues
Click "Export Selected" → Choose format (JSON for remediation)
Use exported JSON with -RemediationFile parameter

2. XML Report (SIEM Integration)

Standardized format for security monitoring platforms:

<?xml version="1.0" encoding="UTF-8"?>
<security_audit>
  <metadata>
    <export_date>2025-01-01T12:00:00Z</export_date>
    <computer_name>HOSTNAME</computer_name>
    <total_checks>542</total_checks>
    <pass_count>456</pass_count>
    <fail_count>42</fail_count>
  </metadata>
  <events>
    <event>
      <timestamp>2025-01-01T12:00:00Z</timestamp>
      <module>STIG</module>
      <status>Fail</status>
      <category>V-220968</category>
      <message>SMBv1 protocol is ENABLED</message>
      <remediation>Disable-WindowsOptionalFeature...</remediation>
    </event>
  </events>
</security_audit>

Use Cases:

Splunk, QRadar, ArcSight integration
Automated compliance monitoring
Trend analysis and alerting
Centralized security dashboards

3. JSON Report (Automation)

{
  "ExecutionInfo": {
    "ComputerName": "HOSTNAME",
    "OSVersion": "Windows 11 Pro",
    "ScanDate": "2025-01-01 12:00:00",
    "Duration": "00:02:34",
    "TotalChecks": 542,
    "PassCount": 456,
    "FailCount": 42
  },
  "Results": [
    {
      "Module": "STIG",
      "Category": "V-220968 (CAT II)",
      "Status": "Fail",
      "Message": "SMBv1 protocol is ENABLED",
      "Details": "STIG: Disable SMBv1 immediately",
      "Remediation": "Disable-WindowsOptionalFeature...",
      "Timestamp": "2025-01-01 12:00:00"
    }
  ]
}

4. CSV Report (Spreadsheet Analysis)

Excel-compatible format for:

Pivot tables and dashboards
Remediation tracking
Progress monitoring
Management reporting

5. Console Output (Real-Time)

========================================================================
                    Windows Security Audit Script v5.3
                Comprehensive Multi-Framework Security Assessment
========================================================================

[*] Modules to execute: Core, CIS, MS, NIST, STIG, NSA, CISA

[Core] Starting core security baseline checks...
[+] Module Core completed: 45 checks (38 pass, 3 fail, 4 warning)

[STIG] Checking DISA STIG compliance...
[+] Module STIG completed: 92 checks (71 pass, 15 fail, 6 warning)

========================================================================
                            AUDIT SUMMARY
========================================================================
Total Checks:    542
Passed:          456 (84.1%)
Failed:          42 (7.7%)
Warnings:        38 (7.0%)
Info:            6 (1.1%)
Errors:          0 (0.0%)
Duration:        00:02:34
========================================================================

[+] HTML report saved to: Security-Audit-Report-20250101-120000.html
[*] Opening report in browser...
[+] Audit completed successfully!

📖 Documentation

Comprehensive documentation is available in the Project Wiki:

Getting Started

Quick Start Guide - Get up and running in 5 minutes
Usage Guide - Detailed command-line options and workflows

Reference Documentation

Framework Reference - Detailed framework mappings and control IDs
Module Documentation - Individual module specifications
Output Reference - Report format specifications

Advanced Topics

Development Guide - Contributing and extending modules
Troubleshooting Guide - Common issues and solutions
FAQ - Frequently asked questions

🛠️ Command-Line Parameters

.\Windows-Security-Audit-Script.ps1 
    [-Modules <String[]>]              # Frameworks to run (default: All)
    [-OutputFormat <String>]           # Output format: HTML, CSV, JSON, XML, Console
    [-OutputPath <String>]             # Custom output path
    [-RemediateIssues]                 # Interactive remediation (all statuses)
    [-RemediateIssues_Fail]            # Remediate FAIL status only
    [-RemediateIssues_Warning]         # Remediate WARNING status only
    [-RemediateIssues_Info]            # Remediate INFO status only
    [-AutoRemediate]                   # Automated remediation with confirmations
    [-RemediationFile <String>]        # JSON file with selected issues to remediate

Parameter Examples

Framework Selection:

# Run all frameworks (default)
.\Windows-Security-Audit-Script.ps1

# Run specific frameworks
.\Windows-Security-Audit-Script.ps1 -Modules Core,NIST,CISA

# Run single framework
.\Windows-Security-Audit-Script.ps1 -Modules STIG

Output Control:

# Generate HTML report (default)
.\Windows-Security-Audit-Script.ps1 -OutputFormat HTML

# Generate CSV for Excel analysis
.\Windows-Security-Audit-Script.ps1 -OutputFormat CSV

# Generate XML for SIEM
.\Windows-Security-Audit-Script.ps1 -OutputFormat XML

# Console output only
.\Windows-Security-Audit-Script.ps1 -OutputFormat Console

# Custom output location
.\Windows-Security-Audit-Script.ps1 -OutputPath "C:\SecurityAudits\Report.html"

Remediation Workflows:

# Interactive remediation (review each)
.\Windows-Security-Audit-Script.ps1 -RemediateIssues

# Auto-fix critical failures only
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Fail -AutoRemediate

# Interactive fix warnings
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Warning

# Targeted remediation from JSON
.\Windows-Security-Audit-Script.ps1 -AutoRemediate -RemediationFile "Selected-Report.json"

🎯 Use Cases

1. Compliance Auditing

Scenario: Annual SOC 2, FISMA, or CMMC compliance audit

# Generate comprehensive compliance report
.\Windows-Security-Audit-Script.ps1 -Modules NIST,STIG,CIS -OutputFormat HTML

# Export findings to CSV for compliance tracking
# Use HTML report's "Export All" → CSV feature

2. System Hardening

Scenario: Harden new Windows servers before production deployment

# Step 1: Baseline audit
.\Windows-Security-Audit-Script.ps1 -Modules Core,CIS,MS

# Step 2: Review and auto-fix critical issues
.\Windows-Security-Audit-Script.ps1 -RemediateIssues_Fail -AutoRemediate

# Step 3: Verify remediation
.\Windows-Security-Audit-Script.ps1 -Modules Core,CIS,MS

3. Configuration Drift Detection

Scenario: Monthly security posture checks

# Generate baseline
.\Windows-Security-Audit-Script.ps1 -OutputPath "C:\Baselines\2025-01-baseline.html"

# Compare later
.\Windows-Security-Audit-Script.ps1 -OutputPath "C:\Baselines\2025-02-check.html"

# Use CSV exports to track changes in Excel

4. Incident Response

Scenario: Validate system security after suspected compromise

# Quick security validation (core checks)
.\Windows-Security-Audit-Script.ps1 -Modules Core -OutputFormat JSON

# Comprehensive validation (all frameworks)
.\Windows-Security-Audit-Script.ps1 -OutputFormat HTML

5. SIEM Integration

Scenario: Automated compliance monitoring pipeline

# Scheduled task to generate XML for SIEM
.\Windows-Security-Audit-Script.ps1 -OutputFormat XML -OutputPath "\\SIEM\drops\%COMPUTERNAME%-audit.xml"

6. Change Control Validation

Scenario: Pre/post-change security validation

# Pre-change baseline
.\Windows-Security-Audit-Script.ps1 -OutputPath "Pre-Change-Audit.json"

# Post-change validation
.\Windows-Security-Audit-Script.ps1 -OutputPath "Post-Change-Audit.json"

# Compare JSON files programmatically

🗂️ Project Structure

Windows-Security-Audit-Script/
├── Windows-Security-Audit-Script.ps1    # Main orchestrator (v5.3)
│   ├── Result validation & normalization
│   ├── Module execution engine
│   ├── Multi-format report generation
│   └── Intelligent remediation system
│
├── Modules/                              # Compliance framework modules
│   ├── Module-Core.ps1                  # Foundational security (45+ checks)
│   ├── Module-CIS.ps1                   # CIS Benchmarks (127+ checks)
│   ├── Module-MS.ps1                    # Microsoft Baselines (80+ checks)
│   ├── Module-NIST.ps1                  # NIST 800-53/CSF (60+ checks)
│   ├── Module-STIG.ps1                  # DISA STIGs (90+ checks)
│   ├── Module-NSA.ps1                   # NSA Guidance (60+ checks)
│   └── Module-CISA.ps1                  # CISA CPG (80+ checks)
│
├── Reports/                              # Generated reports (auto-created)
│   ├── Security-Audit-Report-*.html
│   ├── Security-Audit-Report-*.json
│   ├── Security-Audit-Report-*.csv
│   └── Security-Audit-Report-*.xml
│
├── Logs/                                 # Remediation logs (auto-created)
│   └── Remediation-Log-*.json
│
├── README.md                             # This file
├── CONTRIBUTING.md                       # Contribution guidelines
├── CHANGELOG.md                          # Version history
├── SECURITY.md                           # Security policy
├── LICENSE                               # MIT License
└── .gitignore                            # Git ignore rules

🔍 What Gets Audited?

Security Domains

Domain	Checks	Examples
Access Control	80+	Account policies, user rights, privilege management, local admin enumeration
Authentication	60+	Password policies, MFA requirements, credential protection (WDigest, LSASS)
Audit & Accountability	70+	Event logging (18+ subcategories), audit policies, log retention, PowerShell logging
System Hardening	90+	UAC, Secure Boot, service configuration, AutoPlay/AutoRun, least privilege
Network Security	80+	Firewall (all profiles), SMB security, LLMNR, NetBIOS, protocol hardening
Data Protection	50+	BitLocker encryption, EFS usage, data at rest/in transit protection
Malware Defense	40+	Windows Defender (real-time, cloud, behavior), signature updates, ASR rules
Application Control	30+	AppLocker policies, WDAC, software restriction, execution policies
Update Management	25+	Windows Update status, pending updates, automatic update configuration
Incident Response	35+	System Restore, backup configuration, VSS, recovery capabilities

Example Checks (Subset)

✅ Critical Security Controls:

SMBv1 protocol disabled (WannaCry/NotPetya vector)
BitLocker encryption enabled on system drive
Windows Defender real-time protection active
PowerShell v2 disabled (no logging, downgrade attacks)
Guest account disabled
Built-in Administrator renamed/disabled
UAC enabled with secure desktop prompts
Account lockout policy configured (≤5 attempts)
Network Level Authentication required for RDP
LSASS running as Protected Process Light

✅ Compliance Requirements:

Minimum password length ≥14 characters (STIG)
Password history ≥24 passwords (STIG/CIS)
Audit policy configured for 18+ subcategories (NIST)
Security event log ≥1024 MB (STIG)
Firewall enabled on all profiles (CAT I)
LAN Manager authentication level ≥5 (STIG)
SMB signing required (NIST/CIS)
WDigest credential caching disabled (NSA)

✅ Hardening Measures:

Credential Guard enabled (if supported)
Device Guard/HVCI configured
Attack Surface Reduction rules active
Controlled Folder Access (ransomware protection)
Network Protection enabled
Exploit Protection configured
Secure Boot enabled
Unnecessary services disabled

See Module Documentation for complete check listings.

⚠️ Important Considerations

Administrative Privileges

Audit Mode:

Many checks require Administrator privileges
Non-admin execution shows warnings but continues
Some checks will return "Unable to verify" without elevation

Remediation Mode:

Administrator privileges MANDATORY
Script validates admin rights before remediation
Exits gracefully if running without elevation

Performance & Impact

Execution Time:

Full audit (all modules): 2-5 minutes
Single module: 15-45 seconds
Factors: System speed, enabled features, module selection

System Impact:

Read-only operations during audit (no changes)
Minimal CPU/memory usage
No network traffic (except Windows Update checks)
Safe to run on production systems

Remediation Impact:

Makes persistent configuration changes
May affect system functionality
Some changes require restart
Test in non-production first

Security & Privacy

✅ What the script does:

Reads system configuration (registry, services, policies)
Queries Windows Security Center
Checks file/folder permissions
Generates local reports

❌ What the script does NOT do:

Transmit data externally
Install software
Create network connections (except localhost)
Access user data or files
Modify system during audit (only with remediation flags)

Report Security:

Reports may contain sensitive system information
Store reports securely with appropriate access controls
Sanitize reports before sharing externally
Consider encrypting reports for compliance

Testing & Validation

Before Production Use:

Test on non-production systems first
Review all remediation commands before auto-applying
Create system restore point before remediation
Have backups available
Plan maintenance window for changes requiring restart

Validation:

Run baseline audit, remediate, then re-audit
Compare before/after results
Verify system functionality after remediation
Check application compatibility

Limitations

Local assessment only - Does not audit remote systems or domains
Point-in-time - Results represent configuration at execution time
Platform-specific - Windows 10/11 and Server 2016+ only
Feature detection - Some checks may not apply to all Windows editions
No active scanning - Does not test for exploitable vulnerabilities

Disclaimer

This tool is provided for security assessment and compliance auditing purposes. Results should be reviewed by qualified security professionals and validated in the context of your environment. The tool identifies potential security issues but does not guarantee comprehensive security coverage. Always test in non-production environments before applying remediations to production systems.

🤝 Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

Ways to Contribute

🐛 Report bugs - Found an issue? Open a GitHub issue
💡 Suggest features - Have an idea? Start a discussion
📝 Improve documentation - Enhance wiki pages and examples
🔧 Submit bug fixes - Fix issues and submit PRs
✨ Add checks - Contribute new security checks or modules
🧪 Test - Validate on different Windows versions
🌐 Translate - Help with internationalization

Development Workflow

Fork the repository
Create a feature branch (git checkout -b feature/NewSecurityCheck)
Follow coding standards (see Development Guide)
Test thoroughly on multiple Windows versions
Update documentation
Commit changes (git commit -m 'Add: New SMB3 encryption check')
Push to branch (git push origin feature/NewSecurityCheck)
Open a Pull Request with detailed description

Coding Standards

PowerShell style - Follow PowerShell best practices
Error handling - Use try/catch blocks appropriately
Comments - Document complex logic
Function naming - Use Verb-Noun format
Result format - Follow standardized output structure
Testing - Validate on Windows 10, 11, Server 2019, 2022

📜 License

This project is licensed under the MIT License - see LICENSE for details.

What This Means

✅ You can:

Use commercially
Modify and distribute
Use privately
Sublicense

❌ You cannot:

Hold authors liable
Use trademarks

📋 You must:

Include license and copyright notice
State changes made

🙏 Acknowledgments

This project builds upon the work and guidance of various security organizations:

Security Frameworks

DISA - Defense Information Systems Agency STIGs
NIST - National Institute of Standards and Technology
CIS - Center for Internet Security Benchmarks
NSA - National Security Agency Cybersecurity Guidance
CISA - Cybersecurity and Infrastructure Security Agency
Microsoft - Security Compliance Toolkit

Community

Contributors who've submitted PRs and reported issues
Security professionals who've provided feedback
Windows administrators who've tested in production environments

Tools & Libraries

PowerShell team for the excellent scripting platform
Windows security community for research and documentation

📞 Support & Resources

Get Help

📖 Documentation - Project Wiki
❓ Questions - GitHub Discussions
🐛 Bug Reports - GitHub Issues
💬 Community - [Security Community Forums]

Stay Updated

⭐ Star the repository - Get notifications for new releases
👀 Watch - Follow development activity
🔔 Subscribe to releases - Get notified of new versions

Security Issues

Review SECURITY.md for vulnerability reporting
Report security issues privately via GitHub Security Advisories
Expected response time: 48-72 hours

📊 Project Statistics

Metric	Value
Current Version	5.3
Total Security Checks	550+
Frameworks Covered	7
Code Base	~10,000 lines of PowerShell
Modules	7 specialized compliance modules
Output Formats	5 (HTML, JSON, CSV, XML, Console)
Windows Versions Tested	10, 11, Server 2016/2019/2022
PowerShell Version	5.1+
Active Development	✅ Yes

📄 Version History

Version 5.3 (Current) - January 2025

✨ NEW: Interactive and automated remediation system
✨ NEW: Targeted remediation from HTML report selections
✨ NEW: SIEM-compatible XML output format
✨ NEW: Enhanced HTML reports with theme toggle
✨ NEW: Multi-format export from HTML (CSV, Excel, JSON, XML, TXT)
✨ NEW: Result validation and normalization system
✨ NEW: Comprehensive remediation logging
🔧 IMPROVED: Safety mechanisms for automated remediation
🔧 IMPROVED: Module statistics and execution tracking
🐛 FIXED: Status value consistency across modules
🐛 FIXED: Result object validation and repair

Version 5.0 - December 2024

Complete rewrite with modular architecture
550+ security checks across 7 frameworks
Multiple output formats (HTML, JSON, CSV)
Improved error handling and logging
Comprehensive documentation

See CHANGELOG.md for complete version history.

⭐ If this project helps you secure Windows systems, please consider giving it a star! ⭐

⬆ Back to Top

Made with ❤️ for the cybersecurity community

Name		Name	Last commit message	Last commit date
Latest commit History 64 Commits
.github/ISSUE_TEMPLATE		.github/ISSUE_TEMPLATE
Modules		Modules
CHANGELOG.md		CHANGELOG.md
CODE_OF_CONDUCT.md		CODE_OF_CONDUCT.md
CONTRIBUTING.md		CONTRIBUTING.md
LICENSE		LICENSE
README.md		README.md
SECURITY.md		SECURITY.md
Windows-Security-Audit.ps1		Windows-Security-Audit.ps1

License

Sandler73/Windows-Security-Audit-Project

Folders and files

Latest commit

History

Repository files navigation