Make a Audit Report

User Analysis

  • List AD Users

  • AD users Enabled/Disabled

  • Local users Enabled/Disabled

  • Detect local accounts

  • last login/use

  • Password never expires

  • Password Last set

  • Password Expires

  • Enumerate OU and Security Groups

Computer Analysis

  • Detect Domain Controllers

  • Detailed Domain Controller Event log Analysis

  • Internet domain analysis

  • Detect Local mail servers

  • Detect time servers

  • Network discovery for non AD devices

  • Serial Number

  • CPU/RAM/NIC

  • DNS Entries

  • Scheduled tasks

  • CPU/CORE count

  • OS version/Model

  • Discover Network shares

  • Detect added or removed computers

  • Web server discovery and Identification

  • Missing security updates

  • System by system event logs

  • Internet access and speed test

  • HDD storage/Used/Free

  • Last Login

  • Last 5 Event viewer Errors

  • Listening ports

  • Windows Key

  • Antivirus/Anti spyware/Firewall

Computer Application analysis

  • Detect major applications

  • SQL Server Analysis

  • Internet access and speed test

  • external security vulnerabilities

FSMO Role Analyst

  • Schema Master - forest - Modifies AD structure

  • Domain naming Master - forest - Adds/removes Domains

  • PCD Emulator - Domain - Syncs time, Manages Passwords

  • RID Master - Domain - Allocates object ID's

  • Infrastructure Master - Domain - Updates cross domain references

Last updated