Attack Surface Reduction rules management toolkit — ASR rule inventory, action states, exclusions, block events, and compliance reporting

Windows audit log configuration toolkit — event log sizes, retention policies, advanced audit policy, security event log health

Windows Event Forwarding (WEF) audit toolkit — subscriptions, collector status, source computers, event delivery optimization

NTFS filesystem security audit toolkit — permission inheritance, alternate data streams, junction points, hard links, and filesystem integrity

Windows proxy and internet settings audit toolkit — system proxy, PAC files, WinHTTP proxy, IE/Edge settings, and proxy bypass lists

Windows Server Backup audit toolkit — backup schedule, backup history, backup destinations, and recovery catalog status

Windows Bluetooth device audit toolkit — paired devices, drivers, service status, security settings, and Bluetooth policy

Windows Credential Manager audit toolkit — stored credentials, Windows Vault, generic credentials, and credential age analysis

Windows Data Loss Prevention audit toolkit — DLP policies, sensitive data scanning, endpoint protection, and data classification

Windows Print Spooler security audit toolkit — PrintNightmare mitigations, spooler service, Point and Print restrictions, driver isolation

Sysmon configuration audit toolkit — installed version, config hash, rule counts, event ID coverage, and detection gap analysis

Windows threat hunting toolkit — suspicious processes, network connections, unsigned DLLs, anomalous services, and IOC detection

Windows BranchCache audit toolkit — cache status, hosted mode, distributed mode, content servers, bandwidth savings

Windows Remote Access VPN audit toolkit — RRAS configuration, VPN protocols, SSTP, IKEv2, RADIUS, and connection stats

Windows SCCM/MECM client audit toolkit — client health, cache, policy, boundaries, distribution points, software updates compliance

Windows SMTP server audit toolkit — virtual servers, relay restrictions, authentication, queue, and delivery status

Windows SNMP service audit toolkit — SNMP communities, trap destinations, permitted managers, agent configuration, and security

Windows time synchronization audit toolkit — NTP configuration, W32Time service, stratum, time drift, and sync peers

Windows Deployment Services audit toolkit — WDS server config, boot images, install images, multicast, PXE settings, and driver groups

Audit Active Directory password and lockout policy, Fine Grained Password Policy and stale / never-expire accounts. Requires the ActiveDirectory module.