Network Location Awareness audit toolkit — network profiles, connectivity status, firewall profile mapping, and network category management

Windows proxy and internet settings audit toolkit — system proxy, PAC files, WinHTTP proxy, IE/Edge settings, and proxy bypass lists

Windows Server Backup audit toolkit — backup schedule, backup history, backup destinations, and recovery catalog status

Windows AMSI (Antimalware Scan Interface) audit toolkit — AMSI providers, bypass detection, script scanning status, and protection coverage

Windows ETW (Event Tracing) audit toolkit — active trace sessions, providers, consumer processes, and ETW tampering detection

Windows memory forensics toolkit — loaded DLLs, injected threads, hollow processes, memory-only malware indicators, and anomaly detection

Windows AD FS audit toolkit — federation service, relying parties, claims providers, certificates, endpoints, and token config

Windows routing and BGP audit toolkit — routing table, persistent routes, RRAS status, BGP peers, and network interfaces

Windows Network Policy Server audit toolkit — RADIUS policies, connection request policies, NAS clients, and accounting

Windows PKI and certificate authority audit toolkit — CA configuration, templates, issued certs, CRL, OCSP, and PKI health

Windows SCCM/MECM client audit toolkit — client health, cache, policy, boundaries, distribution points, software updates compliance

Windows SNMP service audit toolkit — SNMP communities, trap destinations, permitted managers, agent configuration, and security

Windows Deployment Services audit toolkit — WDS server config, boot images, install images, multicast, PXE settings, and driver groups

Audit Active Directory password and lockout policy, Fine Grained Password Policy and stale / never-expire accounts. Requires the ActiveDirectory module.

Check system randomness and cryptographic entropy sources — Part of the Dargslan Windows Admin Tools collection. More at https://dargslan.com

Verify hostname, domain membership, and DNS registration — Part of the Dargslan Windows Admin Tools collection. More at https://dargslan.com

Audit Hyper-V VMs: Secure Boot, vTPM, Shielded VM, snapshot retention, integration components. JSON / HTML report.

Export Windows Event Log entries to various formats — Part of the Dargslan Windows Admin Tools collection. More at https://dargslan.com

Audit Windows persistence locations: registry Run keys, scheduled tasks and unsigned autorun binaries. JSON / HTML report.

Audit user last login times and login history — Part of the Dargslan Windows Admin Tools collection. More at https://dargslan.com