Skip to content

feat: add Windows audit policy analyzer with CIS/STIG baseline - #3

Merged
0xPrashanthSec merged 2 commits into
mainfrom
docs/update-root-readme
Jun 12, 2026
Merged

feat: add Windows audit policy analyzer with CIS/STIG baseline#3
0xPrashanthSec merged 2 commits into
mainfrom
docs/update-root-readme

Conversation

@0xPrashanthSec

@0xPrashanthSec 0xPrashanthSec commented Jun 12, 2026

Copy link
Copy Markdown
Owner

Summary

  • Adds Windows/AuditPolicyAnalysis/Get-AuditPolicyAnalysis.ps1, a self-contained PowerShell tool for auditing Windows audit policy against CIS Benchmark / DISA STIG standards
  • Parses live auditpol /get /category:* /r output into structured objects and compares against a 3-tier baseline (MUST_ENABLE, CONDITIONAL, NOISY_SKIP)
  • Outputs a color-coded console report (Green/Yellow/Red), exports a per-host CSV, and auto-generates a Fix-AuditPolicy.ps1 remediation script for MUST_ENABLE gaps
  • Supports -WhatIf flag to run analysis-only without writing the fix script
  • Requires elevation (#Requires -RunAsAdministrator)
  • Author credits and CIS/STIG reference links added to .NOTES block

Test plan

  • Run on a Windows Server 2022 host as Administrator: .\Get-AuditPolicyAnalysis.ps1
  • Confirm color-coded output groups by Category with correct status labels
  • Verify AuditPolicy_Report_<hostname>_<date>.csv is created with all subcategories
  • Verify Fix-AuditPolicy.ps1 contains only MUST_ENABLE NOT_CONFIGURED/PARTIAL items
  • Run with -WhatIf and confirm no fix script is generated
  • Run Fix-AuditPolicy.ps1 and re-run the analyzer — confirm gaps become COMPLIANT

0xPrashanthSec and others added 2 commits June 12, 2026 10:21
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@github-actions github-actions Bot added documentation Improvements or additions to documentation Windows Changes to Windows scripts Linux Changes to Linux scripts Mac Changes to Mac scripts CI/CD Changes to GitHub Actions workflows labels Jun 12, 2026
@0xPrashanthSec 0xPrashanthSec self-assigned this Jun 12, 2026
@0xPrashanthSec
0xPrashanthSec merged commit 13e9372 into main Jun 12, 2026
4 checks passed
@0xPrashanthSec 0xPrashanthSec removed Linux Changes to Linux scripts Mac Changes to Mac scripts CI/CD Changes to GitHub Actions workflows labels Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation Windows Changes to Windows scripts

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant