Audit Report Variables

User Analysis (hybrid check local and azure)

• AD users Enabled/Disabled

• Local users Enabled/Disabled

• Detect local accounts

• last login/use

• Password never expires

• Password Last set

• Password Expires

• Enumerate OU and Security Groups

Computer Analysis

• Detect Domain Controllers

• Detailed Domain Controller Event log Analysis

• Internet domain analysis

• Detect Local mail servers

• Detect time servers

• Network discovery for non AD devices

• Serial Number

• CPU/RAM/NIC

• DNS Entries

• Scheduled tasks

• CPU/CORE count

• OS version/Model

• Discover Network shares

• Detect added or removed computers

• Web server discovery and Identification

• Missing security updates

• System by system event logs

• Internet access and speed test

• HDD storage/Used/Free

• Last Login

• Last 5 Event viewer Errors

• Listening ports

• Windows Key

• Antivirus/Anti spyware/Firewall

Computer Application analysis

• Detect major applications

• SQL Server Analysis

• Internet access and speed test

• external security vulnerabilities

FSMO Role Analyst

• Schema Master - forest - Modifies AD structure

• Domain naming Master - forest - Adds/removes Domains

• PCD Emulator - Domain - Syncs time, Manages Passwords

• RID Master - Domain - Allocates object ID's

• Infrastructure Master - Domain - Updates cross domain references