Configuration Audit

Windows configuration

WINAudit

Output:

FBPro Audit Test Automation Package

GitHub - fbprogmbh/Audit-Test-Automation: FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.GitHub

1. Powershell > Run as administrator

2. Unblock-File -Path .\Audit-Test-Automation-5.10.1.zip -Verbose

3. Expand-Archive -Path ".\Audit-Test-Automation-5.10.1.zip" -DestinationPath "AuditTAP"

4. Launch setup.exe

1. Run as administrator

AD - GPO - GPOZaurr

GitHub - EvotecIT/GPOZaurr: Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.GitHub

Windows Hardening

GitHub - HotCakeX/Harden-Windows-Security: Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | Read The Rationale https://github.com/HotCakeX/Harden-Windows-Security/blob/main/Rationale.mdGitHub

Linux Configuration

Lynis

GitHub - CISOfy/lynis: Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.GitHub

Nix-Auditor

RedHat, CentOS

GitHub - XalfiE/Nix-Auditor: Nix Audit made easier (RHEL, CentOS) :fire: :fire:GitHub

YASAT

GitHub - montjoie/yasat: YASAT (Yet Another Stupid Audit Tool) is a simple stupid audit tool.GitHub

Otseca

GitHub - trimstray/otseca: Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.GitHub

Cloud Configuration

GitHub - SecurityFTW/cs-suite: Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.GitHub

More Tools:

Tools

Azure

Azure

AWS

AWS