alexmaina.dev presents a high-level endpoint security assessment engine.
MainaAudit is a professional-grade PowerShell security assessment tool designed for Windows endpoints. It performs a deep-dive analysis of the system's security posture, identifying vulnerabilities, misconfigurations, and potential exposures.
The tool generates a comprehensive PDF report with a final security score and a prioritized remediation plan.
- Network Surface: Detection of critical open ports (SMB, RPC, RDP) on public interfaces.
- Identity & Access: Local administrator accounts analysis and privilege escalation risks.
- Disk Security: BitLocker encryption status and protection integrity.
- Patch Management: Missing critical security updates via Windows Update API.
- Persistence & Malware: Detection of high-risk processes and unauthorized remote tools.
- Wireless Security: Analysis of insecure/open Wi-Fi profiles saved on the device.
- System Integrity: OS health checks via system event logs.
The tool utilizes Pandoc and XeLaTeX with the Eisvogel template to produce high-quality, client-ready PDF reports including:
- Executive Summary with a calculated Security Score.
- Detailed technical findings table.
- Dynamic Remediation Plan: Customized advice based on specific detected vulnerabilities.
To generate the PDF reports, you need:
- Pandoc
- MiKTeX or another LaTeX distribution.
- Administrator privileges (to access BitLocker and Security logs).
- Clone the repository.
- Run PowerShell as Administrator.
- Execute the script:
./Invoke-Audit.ps1
- Author: Alessandro Mainardi
- PDF Template: Eisvogel by Pascal Wagler.
- Engines: Powered by Pandoc and XeLaTeX.
- AI Collaboration: Developed with the support of Gemini AI for code optimization and security logic refinement.
This project is for educational and professional audit purposes. Use it responsibly.