This repo was reorganized on 2026-05-04 to separate runnable automation from documentation, data, notes, and archived legacy material.
| Old area | New area |
|---|---|
Azure\ |
scripts\azure\ |
IIS Configuration\ |
scripts\iis\ and docs\iis\ |
IIS-Headers\ |
scripts\iis\ and docs\iis\ |
Labs\ |
docs\labs\ |
Misc\ |
scripts\utilities\ |
Office365\ |
scripts\microsoft-365\ and docs\ |
PenTesting\ |
scripts\pentesting\ |
Printers\ |
scripts\it-operations\printers\ |
Windows Active Directory\ |
scripts\active-directory\ |
Windows File Cleanup\ |
scripts\it-operations\windows-file-cleanup\ |
Windows Hardening\ |
scripts\windows-hardening\, data\windows-hardening\, and archive\windows-hardening\ |
File Check.ps1 |
scripts\utilities\Join-ApplicationsWithEndpointSites.ps1 |
scripts\azure\Export-AzNetworkInventory.ps1replaces the brokenAzureRMNSG export snippets with anAz-based inventory exporter.scripts\azure\New-AzKeyVaultServicePrincipal.ps1parameterizes subscription, environment, app name, and Key Vault policy assignment.scripts\iis\Set-IisRecommendedSecurityHeaders.ps1removes the embedded rollback block and supports-WhatIf, per-site targeting, optional IIS restart, validation, replacement review reports, and summary output.scripts\windows-hardening\Set-WindowsSchannelTlsHardening.ps1replaces the older one-way Schannel hardening script with a report-first-WhatIfworkflow, registry backups, and summary output.scripts\windows-hardening\Set-Windows11PrivacyHardening.ps1replaces the older one-way telemetry and consumer-feature script with a Windows 11 scoped privacy/AI report-first workflow, rollback, state reports, registry backups, and summary output.scripts\windows-hardening\Remove-WindowsProvisionedBloatwareApps.ps1replaces legacy bloatware lists and one-way AppX removal with Windows 11 scoped remove/protect lists, inventory reports, state reports, and rollback guidance.scripts\it-operations\printers\Set-WindowsPrinterConnections.ps1combines the previous add/remove printer helpers into one report-first command with-Action Addand-Action Remove.scripts\it-operations\windows-file-cleanup\Invoke-WindowsFileCleanup.ps1combines temp cleanup and stale-file cleanup into one guarded report-first command.scripts\it-operations\utilities\Get-CurrentUserContext.ps1adds optional report output for endpoint user, group, and network context.scripts\active-directory\Export-AdUserInventory.ps1combines the previous AD user attribute and distinguished-name export scripts into one inventory command.scripts\active-directory\Set-AdUserUpnSuffix.ps1combines mailbox-enabled and OU-scoped UPN suffix updates into one report-first command.scripts\active-directory\Send-AdSecurityEmailReport.ps1combines privileged group and password-never-expires reports into one AD security report command.scripts\active-directory\Send-AdPasswordExpiryReminderEmails.ps1keeps the distinct user-notification workflow but adds email plan/state reporting and safer send behavior.scripts\microsoft-365\Export-M365DistributionGroupMessageTraceUsage.ps1uses current Exchange OnlineGet-MessageTraceV2behavior, 10-day query windows, and report output parameters.scripts\utilities\Join-ApplicationsWithEndpointSites.ps1fixes the CSV join logic and exposes paths as parameters.scripts\pentesting\Install-AutoReconDependencies.shfixes the shebang, package continuation,pipxinstall flow, and shell safety options.docs\labs\elk-lab\scripts\*.shwere renamed into explicit lab setup helpers for Elastic/Kibana, Filebeat, and DVWA.