SysAdmin Security Auditor is a specialized PowerShell-based defensive security tool designed for Windows system administrators, IT security teams, and incident responders.
-
Updated
Jun 3, 2026 - PowerShell
SysAdmin Security Auditor is a specialized PowerShell-based defensive security tool designed for Windows system administrators, IT security teams, and incident responders.
Read-only PowerShell script that audits the entire Windows 10/11 boot chain: BCD, Secure Boot, TPM, UEFI/EFI, boot drivers, BitLocker, WinRE, SMART, VBS/HVCI. Weighted per-category scoring, drift detection via a persistent baseline, HTML/JSON/CSV reports, 16-assertion self-test, and full French/English Windows compatibility.
Enable Windows advanced audit subcategories required by IBM QRadar WinCollect's NSA filter — locale-independent (uses GUIDs), idempotent, with backup/rollback. CMD + PowerShell.
To associate your repository with the windows-audit topic, visit your repo's landing page and select "manage topics."