RedAudit-USB

KO | EN

gitlite — search

#ai #claude-code #cli #typescript #mcp #python #claude #ai-agents #developer-tools #llm #ai-agent #fastapi

★ 36 Open GitHub ↗

RedAudit is a next-generation Windows forensic and security assessment framework featuring a live cyber-operations GUI built for real investigators and red-team professionals.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# RedAudit — Windows Host Forensics & Security Assessment Tool

RedAudit is a portable Windows host-forensics and security auditing framework designed for investigators, DFIR analysts, and security teams who need fast, structured, and defensible host assessment results.

The tool provides clear visibility into system activity, persistence mechanisms, external communications, and security posture — all exported into a professional HTML report suitable for case files and technical documentation.

---

## 🔍 Features

### 🧩 Core Capabilities
- **Autoruns & Persistence Analysis**  
  Enumerates registry autoruns, system startup folders, scheduled tasks, and other persistence vectors.

- **External Network Connections**  
  Maps active TCP connections to process IDs, process names, and full executable paths.

- **System Integrity Checks**  
  Detects unquoted service paths, weak configurations, and missing patches.

- **Process & Service Overview**  
  Collects running processes and services with their respective metadata.

- **Risk-Based Findings & Scoring**  
  Assigns a host security score and produces prioritized findings with recommended actions.

- **Structured HTML Reporting**  
  Generates a clean, case-ready HTML report including findings, recommendations, and a detailed technical annex.

---

## 🎯 Design Goals
- Fully portable (single EXE)  
- Forensic-friendly output  
- Zero installation  
- Clear separation between findings and raw data  
- Suitable for investigations, DFIR triage, and audits

---

## 🛡️ Use Cases
- Cybercrime Investigations  
- Incident Response  
- Digital Forensics  
- Host-Level Security Audits  
- Red / Blue Team Assessments  
- Technical Evidence Collection

RedAudit-USB

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README