Configuration Audit / Hardening

Windows configuration

HardeningKitty

GitHub - scipag/HardeningKitty: HardeningKitty - Checks and hardens your Windows configurationGitHub

WINAudit

GitHub - DCScoder/WINAudit: Windows security configuration audit.GitHub

Output:

FBPro Audit Test Automation Package

GitHub - fbprogmbh/Hardening-Audit-Tool-AuditTAP: FBPro Audit Test Automation Package allows you to create compliance reports for your systems. The resulting HTML-reports provide a transparent overview of your devices' security configuration compared to international security standards and hardening guides.GitHub

1. Powershell > Run as administrator

2. Unblock-File -Path .\Audit-Test-Automation-5.10.1.zip -Verbose

3. Expand-Archive -Path ".\Audit-Test-Automation-5.10.1.zip" -DestinationPath "AuditTAP"

4. Launch setup.exe

1. Run as administrator

AD - GPO - GPOZaurr

GitHub - EvotecIT/GPOZaurr: Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.GitHub

Windows Hardening

GitHub - HotCakeX/Harden-Windows-Security: Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨GitHub

AD Hardening

GitHub - LoicVeirman/HardenAD: Hardening Active Directory version 2GitHub

Disabling NTLMv1

Active Directory Hardening Series - Part 1 – Disabling NTLMv1 | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Removing SMBv1

Active Directory Hardening Series - Part 2 – Removing SMBv1 | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Enforcing LDAP Signing

Active Directory Hardening Series - Part 3 – Enforcing LDAP Signing | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Enforcing AES for Kerberos

Active Directory Hardening Series - Part 4 – Enforcing AES for Kerberos | Microsoft Community HubTECHCOMMUNITY.MICROSOFT.COM

Protected Users

GitHub - jakehildreth/PowerPUG: A tiny tool built to help AD Admins tame the Protected Users group.GitHub

Linux Configuration

Lynis

GitHub - CISOfy/lynis: Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.GitHub

Nix-Auditor

RedHat, CentOS

GitHub - XalfiE/Nix-Auditor: Nix Audit made easier (RHEL, CentOS) :fire: :fire:GitHub

YASAT

GitHub - montjoie/yasat: YASAT (Yet Another Stupid Audit Tool) is a simple stupid audit tool.GitHub

Otseca

GitHub - trimstray/otseca: Open source security auditing tool to search and dump system configuration. It allows you to generate reports in HTML or RAW-HTML formats.GitHub

Cloud Configuration

GitHub - SecurityFTW/cs-suite: Cloud Security Suite - One stop tool for auditing the security posture of AWS/GCP/Azure infrastructure.GitHub

More Tools:

Tools

VPS

GitHub - vernu/vps-audit: lightweight, dependency-free bash script for security, performance auditing and infrastructure monitoring of Linux servers.GitHub

Azure

Azure

AWS

AWS