Develop an Ansible Role that queries Windows using native tools

[robellegate]

1. Querying basic host information including:
   1. Host name and Domain (if applicable) info
   2. OS and OS Patch level
   3. IP information
   4. List of local users
2. Querying installed software including:
   1. Installed server components
      1. AD, IIS, etc.
   2. Querying installed application software
   3. Querying software to be run on boot
3. Query information that may be useful for incident response
   1. Recent user logons
      1. May make your own assumptions about “recent”
   2. Running processes
      1. Include: The process ID, the process name, the user id, the parent process id, and the path to the process’ binary
   3. Suspicious (other than 80,443) outbound connections

[kxs4591]

working through part 1