WinSecureAuditor-CIS-Windows-Security-Scanner

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

WinSecureAuditor-CIS-Windows-Security-Scanner

★ 11 Open GitHub ↗

Python tool to audit Windows 10/11/Server against CIS Benchmarks. 1000+ checks, HTML/JSON reports.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# WinSecureAuditor - CIS Windows Security Scanner
---
[![License: MIT](https://img.shields.io/github/license/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://raw.githubusercontent.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/main/LICENSE)
[![Stars](https://img.shields.io/github/stars/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/stargazers)
[![Last Commit](https://img.shields.io/github/last-commit/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/commits)
[![Issues](https://img.shields.io/github/issues/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/issues)
[![Top Language](https://img.shields.io/github/languages/top/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner)
[![Contributors](https://img.shields.io/github/contributors/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/graphs/contributors)
[![Repo Size](https://img.shields.io/github/repo-size/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner?style=flat-square)](https://github.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner)

WinSecureAuditor is a comprehensive security auditing tool designed to evaluate Windows systems against the Center for Internet Security (CIS) Benchmarks. This open-source application provides organizations and security professionals with automated assessment capabilities to ensure compliance with industry-standard security configurations.

The tool performs automated checks against CIS-recommended security settings, including registry configurations, file permissions, and system policies. It supports multiple Windows versions (Windows 10, 11, Server 2016, 2019, 2022) and provides detailed reporting to help identify and remediate security gaps.

## Key Benefits

- **Automated Compliance Assessment**: Evaluates systems against CIS Benchmarks with over 1000 individual checks
- **Comprehensive Reporting**: Generates HTML and JSON reports with remediation guidance
- **Multi-Interface Support**: Available as both command-line tool and graphical application
- **Extensible Architecture**: Rule-based system allows for custom security checks
- **Professional Security Tool**: Designed for IT administrators, compliance officers, and security teams

## What Makes It Effective

WinSecureAuditor addresses critical security assessment needs by:
- Supporting the latest CIS Benchmark versions for Windows systems
- Providing clear pass/fail results with detailed explanations
- Offering weighted scoring based on security severity
- Enabling both automated scanning and manual verification workflows
- Maintaining compatibility with enterprise security policies

This tool is essential for organizations implementing CIS Benchmark recommendations and maintaining robust security postures in Windows environments.

## Overview

A Python-based **Security Configuration Assessment (SCA)** tool designed to check Microsoft Windows systems against **CIS Benchmarks**. It parses `.yml` rule files (with `policy`, `requirements`, and `checks`), executes registry or file-based checks, and generates **detailed** HTML/JSON reports showing pass/fail results and compliance information.

## Screenshots

### WinSecureAuditor Interface
![WinSecureAuditor Interface](https://raw.githubusercontent.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/main/docs/images/winsecureauditor.jpg)
*Main interface of the WinSecureAuditor tool showing the scanning options and configuration.*

### HTML Report
![HTML Report](https://raw.githubusercontent.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/main/docs/images/report-html.jpg)
*Example of the generated HTML report displaying compliance results, pass/fail counts, and detailed rule information.*

### Vulnerability Description
![Vulnerability Description](https://raw.githubusercontent.com/frangelbarrera/WinSecureAuditor-CIS-Windows-Security-Scanner/main/docs/images/vulnerability%20description.jpg)
*Detailed view of vulnerability descriptions and remediation guidance in the report.*

## Key Features

- **Registry Checks**: Reads Windows registry keys/values to validate system settings.  
- **File Checks**: Checks existence or presence of critical files.  
- **Rule-Based**: Loads multiple `.yml` files from a directory; each file can contain many checks.  
- **Detailed Reports**: Outputs a color-coded HTML report and a structured JSON report, including:
  - **Description**, **Rationale**, **Remediation**, **Compliance**, **Condition** for each rule
  - **Pass/Fail** counts and a **score percentage**  
- **CLI Flags**: Easily specify your **rules** directory, **JSON/HTML** output paths, **host/OS** overrides, and an optional **benchmark** name.

## Prerequisites

1. **Python 3.7+**  
2. `pip install pyyaml` (for YAML parsing)  
3. **Windows OS** (if you plan to run registry checks). On non-Windows systems, registry checks will fail.

## Usage

### Source Code Version
1. **Clone or Copy** the `WinSecureAuditor` folder onto your Windows machine.
2. **Open** a terminal or Command Prompt in that folder.
3. **Install** dependencies:
   `pip install pyyaml`
4. **Run** the scanner:
   `python main.py --rules=./rules/windows --json=./output/scan.json --html=./output/report.html`
   - `--rules`: Directory containing `.yml` files (with checks).
   - `--json`: JSON output path (default `./output/scan.json`).
   - `--html`: HTML output path (default `./output/report.html`).

### Portable Version
For users who prefer not to install Python or dependencies:

1. **Run** the `WinSecureAuditor_Installer.exe` (located in the project root) as administrator to install the application.
2. **Launch** WinSecureAuditor from the Start Menu or desktop shortcut.

**Alternative Portable Usage:**
- Extract the `WinSecureAuditor_Portable` folder to any location.
- Run `run.bat` as administrator to start the graphical interface.
- Or execute `WinSecureAuditor_GUI.exe` directly.

**Important Notes:**
- Administrator privileges are required for complete scanning.
- Reports are generated in the `output/` directory within the application folder.
- The portable version includes all necessary files and dependencies.

## Output

- **JSON**: A file (e.g. `report.json`) with a structured summary

- **HTML**A color-coded report (e.g. `report.html`) with pass/fail counts, an optional benchmark name, and collapsible rule details for each check.

---

## Known Limitations

**Administrator Privileges**  
Some registry checks require elevated privileges.

**Registry-Only Checks**  
Linux or macOS usage is limited; the registry logic won’t work off Windows.

**File Permissions**  
Currently checks only existence (or “missing”). For advanced checks (permissions, ownership), you’d need further enhancements.

---

**CIS-Scanner Audit Tool** is in an early stage of development.  
The findings generated by this tool should be **manually verified** before taking any action.  
 **Do not use this tool directly in a production environment without thorough testing.**

---
##  License

This project is licensed under the terms of the **GNU General Public License v3.0 (GPL-3.0)**.  
You may use, modify, and distribute this software in compliance with the license terms.

See the [LICENSE](./LICENSE) file for full license details.

WinSecureAuditor-CIS-Windows-Security-Scanner

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

WinSecureAuditor-CIS-Windows-Security-Scanner

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README