https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
PowerShell and VBScript tools for automating Active Directory workflows,securing system operations, and supporting forensic procedures. Designed for Windows Servers and workstations, these solutions improve accuracy, scalability, and compliance—enhancing performance, reliability, and cybersecurity posture across enterprise IT environments worldwide
https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
active-directory active-directory-domain-services activedirectoryapi admin-tools blueteam eventlogs evtx-analisys forensics-tools gpo-policy-security itsm itsm-solutions ldap-authentication-backend organizational-units sysadmin sysadmin-scripts sysadmin-tasks sysadmin-tool windows-server-2019 workstations wsus-maintenance
Last synced: 1 day ago
JSON representation
PowerShell and VBScript tools for automating Active Directory workflows,securing system operations, and supporting forensic procedures. Designed for Windows Servers and workstations, these solutions improve accuracy, scalability, and compliance—enhancing performance, reliability, and cybersecurity posture across enterprise IT environments worldwide
- Host: GitHub
- URL: https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
- Owner: brazilianscriptguy
- License: other
- Created: 2023-12-22T13:19:10.000Z (about 2 years ago)
- Default Branch: main
- Last Pushed: 2026-01-29T16:37:40.000Z (14 days ago)
- Last Synced: 2026-01-29T17:30:32.793Z (14 days ago)
- Topics: active-directory, active-directory-domain-services, activedirectoryapi, admin-tools, blueteam, eventlogs, evtx-analisys, forensics-tools, gpo-policy-security, itsm, itsm-solutions, ldap-authentication-backend, organizational-units, sysadmin, sysadmin-scripts, sysadmin-tasks, sysadmin-tool, windows-server-2019, workstations, wsus-maintenance
- Language: PowerShell
- Homepage: https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite
- Size: 24.3 MB
- Stars: 26
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: .github/CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE.txt
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: .github/SECURITY.md
Awesome Lists containing this project
README
# Windows-SysAdmin-ProSuite - v1.8.8 - DOI: 10.5281/zenodo.18487320
## 🚀 Enterprise Windows Automation · IAM · Cybersecurity · Forensic Readiness
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite) [](#) [](#) [](LICENSE) [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/actions)
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/security/code-scanning)
---
## 🧭 Executive Overview
**Windows-SysAdmin-ProSuite** is an **enterprise-grade, research-aligned automation platform** for **Windows infrastructures**, authored and maintained by **Luiz Hamilton Silva (@brazilianscriptguy)**.
The repository consolidates **production-tested PowerShell and VBScript toolchains** designed for:
- Identity & Access Management (IAM)
- Secure Windows administration
- Cybersecurity and forensic readiness
- ITSM-aligned provisioning and compliance
- Auditability and operational traceability
> All tooling is engineered with **runtime safety**, **deterministic logging**, and **PowerShell 5.1 compatibility** as first-class requirements.
---
## 🎯 Scope & Intended Use
This repository targets **real-world Windows environments**, including:
- 🏛️ Public sector and judicial institutions
- 🏢 Enterprise and hybrid infrastructures
- 🛡️ Blue Team / DFIR operations
- 📋 Governance, risk, and compliance workflows
> It is **not** a collection of demos or isolated scripts, but a **cohesive automation suite** designed to operate safely across **large Windows realms**.
---
## 💻 My Repository Packages
**Enterprise-grade automation, security, and compliance solutions — designed for real-world IT operations**
| Repository | Description | Key Features |
|------------|-------------|--------------|
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools) | Comprehensive PowerShell toolset for **Windows Server, Active Directory, network services, and WSUS** administration. | - Active Directory & OU lifecycle management
- GPO export/import & baseline enforcement
- WSUS maintenance, cleanup & SUSDB optimization
- DNS, DHCP, CA, RDS & infrastructure automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/BlueTeam-Tools) | Defensive security and **digital forensics** PowerShell utilities for investigation and incident response. | - DFIR data collection modules
- Event Log & credential audit parsers
- Threat hunting & incident response helpers |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/Core-ScriptLibrary) | Foundational **modular PowerShell framework** and packaging engine used by all other suites. | - Reusable PowerShell helpers & UI components
- Centralized logging & execution patterns
- NuGet packaging & release automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-WKS) | Standardized **Windows 10/11 workstation lifecycle** automation aligned with ITSM practices. | - Pre-join & post-join domain automation
- User profile, printer & layout standardization
- Compliance hardening, logging & CSV reporting |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-SVR) | Server-side counterpart to ITSM-WKS for **Windows Server provisioning and compliance**. | - Server baseline & hardening templates
- DNS, DHCP, time sync & role configuration
- GPO reset, drift remediation & audit logs |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/GroupPolicyObjects-Templates) | Ready-to-import **Group Policy Objects** for domain and forest environments. | - Security, UX & infrastructure GPOs
- Domain-level and forest-wide templates
- Export/import automation & versioning |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/ActiveDirectory-SSO-Integrations) | Cross-platform **Active Directory LDAP / SSO integration patterns** for applications and services. | - PHP, .NET, Flask, Node.js & Spring Boot examples
- Secure bind via environment variables
- Modular, documented, and enterprise-ready architecture |
---
## 🛡️ Engineering & Safety Principles
- ✅ **PowerShell 5.1 first**, PowerShell 7.x compatible where applicable
- ✅ No destructive action without explicit intent (`ShouldProcess` enforced in core logic)
- ✅ GUI-driven execution for operator safety when appropriate
- ✅ Structured logging (`.log`) and exportable reports (`.csv`)
- ✅ No hidden state, no silent failure patterns
> The suite is continuously evaluated using **PSScriptAnalyzer**, **SARIF reporting**, and CI pipelines configured in **report-only mode** to ensure **visibility without delivery interruption**.
---
## 🔍 Quality, CI & Static Analysis
- PowerShell linting via **PSScriptAnalyzer**
- SARIF output integrated with **GitHub Code Scanning**
- Runtime-safety focused rule profile (low noise, high signal)
- PowerShell 5.1 compatibility validation
- Non-blocking CI: reports inform action, not gatekeeping
> Findings are surfaced as **artifacts and dashboards**, enabling controlled remediation cycles.
---
## 📚 Research, Governance & Citation
[](https://doi.org/10.5281/zenodo.18487320) []()
This repository is suitable for **academic, technical, and policy-oriented citation**, particularly in areas involving:
- Cybersecurity engineering
- Digital forensics (DFIR)
- Identity governance
- IT governance and compliance
---
## 👤 Author & Stewardship
**Luiz Hamilton Silva**
Senior IAM Analyst | Identity & Access Management | AD & Azure AD | Windows Server Architect | PowerShell Automation
GitHub: `@brazilianscriptguy`
> This project reflects **long-term stewardship**, real operational use, and continuous refinement.
---
## 🤝 Contribution & Reuse
- Contributions are welcome via pull requests
- Attribution is required under the MIT License
- Reuse in academic or institutional contexts should cite the repository or DOI
---
## 📬 Contact & Support
[](mailto:luizhamilton.lhr@gmail.com) [](https://buymeacoffee.com/brazilianscriptguy) [](https://ko-fi.com/brazilianscriptguy) [](https://www.patreon.com/brazilianscriptguy)
---
> **Engineering secure, auditable, and scalable Windows automation for enterprise and public-sector environments.**
© 2026 Luiz Hamilton Silva