SysAdmin Security Auditor is a specialized PowerShell-based defensive security tool designed for Windows system administrators, IT security teams, and incident responders.
-
Updated
Jun 3, 2026 - PowerShell
SysAdmin Security Auditor is a specialized PowerShell-based defensive security tool designed for Windows system administrators, IT security teams, and incident responders.
Enable Windows advanced audit subcategories required by IBM QRadar WinCollect's NSA filter — locale-independent (uses GUIDs), idempotent, with backup/rollback. CMD + PowerShell.
Add a description, image, and links to the windows-audit topic page so that developers can more easily learn about it.
To associate your repository with the windows-audit topic, visit your repo's landing page and select "manage topics."