This project aims to automate the repetitive task of auditing multiple machines across different network blocks by remotely collecting system and user information from Active Directory (AD) environments. It leverages PowerShell scripts to retrieve data using administrator credentials, streamlining security audits and improving efficiency.

This work is part of my internship, and I’m building the system step-by-step, starting with setting up a virtual AD environment.

Project Goal

Automate security auditing across n machines by remotely collecting necessary data from each device within an Active Directory domain using PowerShell scripts running with administrator privileges.

Tech Stack

  • PowerShell — primary scripting language
  • Active Directory — target environment for auditing
  • Windows Server — Domain Controller setup in virtual lab
  • VMware — virtualization platform to create a test AD environment

Project Roadmap

Part Description Status
1 Create virtual Active Directory environment ✅ Completed
2 Develop & test script for a single local machine ✅ Completed
3 Extend script with administrator rights on local machine ✅ Completed
4 Scale script to multiple local machines with admin rights within the AD domain environment ✅ Completed
5 Execute remote multi-machine audit with admin rights in the AD domain environment ✅ Completed

How to Run the Scripts

  1. Clone this repository.
  2. Set up your environment (see lab setup guide).
  3. Navigate to the scripts folder.
  4. Run the appropriate PowerShell script depending on your testing phase.

Example to run the single machine script:

.\single_machine_audit.ps1

Sample Output

Logs and sample output files will be provided in the output/ directory of each project folder as the scripts evolve.

Future Improvements

  • Enhance script robustness and error handling
  • Add reporting and alerting capabilities
  • Integrate with CI/CD pipelines for continuous auditing
  • Open source the project for community contributions

Author

AJOY A G
Internship Project | Cybersecurity Automation
LinkedIn Profile
GitHub