https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
Enterprise PowerShell & VBScript suite for Active Directory automation, ITSM-aligned provisioning, security hardening, and digital forensics - built for Windows Server and workstation environments by a Senior IAM Analyst with a focus on accuracy, scalability, and compliance.
https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
active-directory active-directory-domain-services activedirectoryapi admin-tools blueteam eventlogs evtx-analisys forensics-tools gpo-policy-security itsm itsm-solutions ldap-authentication-backend organizational-units sysadmin sysadmin-scripts sysadmin-tasks sysadmin-tool windows-server-2019 workstations wsus-maintenance
Last synced: 18 days ago
JSON representation
Enterprise PowerShell & VBScript suite for Active Directory automation, ITSM-aligned provisioning, security hardening, and digital forensics - built for Windows Server and workstation environments by a Senior IAM Analyst with a focus on accuracy, scalability, and compliance.
- Host: GitHub
- URL: https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
- Owner: brazilianscriptguy
- License: mit
- Created: 2023-12-22T13:19:10.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2026-04-27T03:48:20.000Z (25 days ago)
- Last Synced: 2026-04-27T05:29:24.733Z (25 days ago)
- Topics: active-directory, active-directory-domain-services, activedirectoryapi, admin-tools, blueteam, eventlogs, evtx-analisys, forensics-tools, gpo-policy-security, itsm, itsm-solutions, ldap-authentication-backend, organizational-units, sysadmin, sysadmin-scripts, sysadmin-tasks, sysadmin-tool, windows-server-2019, workstations, wsus-maintenance
- Language: PowerShell
- Homepage: https://www.linkedin.com/in/brazilianscriptguy/
- Size: 25.2 MB
- Stars: 36
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: .github/CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE.txt
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Citation: CITATION.cff
- Security: .github/SECURITY.md
Awesome Lists containing this project
README
# Windows-SysAdmin-ProSuite — v1.8.8
### DOI: [10.5281/zenodo.18487320](https://doi.org/10.5281/zenodo.18487320)
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite) [](#) [ ](#) [](LICENSE.txt) [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/actions)
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/security/code-scanning) [](https://doi.org/10.5281/zenodo.18487320)
---
## 🧭 Overview
**Windows-SysAdmin-ProSuite** is an enterprise-grade, research-aligned automation platform for Windows Server and workstation environments — authored by **Luiz Hamilton Silva ([@brazilianscriptguy](https://github.com/brazilianscriptguy))**, Senior IAM Analyst, Windows Server Architect, and published researcher in digital forensics and cybersecurity.
Built around **production-tested PowerShell and VBScript toolchains**, the suite addresses five core operational pillars:
| Pillar | Scope |
|--------|-------|
| 🔐 Identity & Access Management | AD lifecycle, LDAP/SSO, credential hygiene |
| 🖥️ ITSM-Aligned Provisioning | Standardized workstation and server onboarding |
| 🛡️ Cybersecurity & Hardening | GPO enforcement, baseline templates, drift remediation |
| 🔬 Digital Forensics & DFIR | EVTX parsing, event correlation, incident response |
| 📋 Operational Auditability | Structured `.log` outputs, `.csv` exports, traceable execution |
> All tooling enforces **runtime safety**, **deterministic logging**, and **PowerShell 5.1 compatibility** as non-negotiable requirements.
---
## 🎯 Who This Is For
This is **not** a collection of demos or one-off scripts. It is a cohesive automation suite built for production use across:
| Environment | Primary Use Case |
|---|---|
| 🏛️ Public sector & judicial institutions | Compliance-driven provisioning and audit trails |
| 🏢 Enterprise & hybrid infrastructures | AD, WSUS, DNS, DHCP, PKI, RDS at scale |
| 🛡️ Blue Team / DFIR operations | Threat hunting, event log analysis, forensic collection |
| 📋 Governance, risk & compliance teams | GPO enforcement, ITSM-aligned change management |
| 🎓 Academic & research environments | Citeable tooling grounded in peer-reviewed methodology |
---
## 📦 Suite Modules
Eight specialized modules — each independently usable, collectively cohesive.
| Module | Purpose | Key Capabilities |
|--------|---------|--------------------|
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools) | PowerShell toolset for **Windows Server, AD, network services & WSUS**. | AD & OU lifecycle · GPO enforcement · WSUS & SUSDB · DNS, DHCP, CA, RDS |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/BlueTeam-Tools) | Defensive security & **digital forensics** utilities for investigation and IR. | DFIR collection · EVTX parsers · Credential audits · Threat hunting |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/Core-ScriptLibrary) | **Modular PowerShell framework** shared by all modules. | Reusable helpers · Centralized logging · NuGet & SHA256 automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-WKS) | **Windows 10/11 workstation lifecycle** automation aligned with ITSM. | Pre/post-join · Profile & printer standardization · Compliance hardening |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-SVR) | **Windows Server provisioning, hardening & ITSM compliance**. | Server baselines · Role configuration · GPO drift remediation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/GroupPolicyObjects-Templates) | Ready-to-import **Group Policy Objects** for domain and forest environments. | Security & UX GPOs · Forest-wide templates · Export/import automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/ActiveDirectory-SSO-Integrations) | **AD LDAP / SSO integration patterns** for cross-platform apps. | PHP · .NET · Flask · Node.js · Spring Boot · Secure env-var binding |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ProSuite-Hub) | Unified **GUI launcher and module orchestrator** for the entire suite. | Centralized tool discovery · Menu-driven interface · Single entry point |
---
## 🏗️ Engineering Principles
Every script in this suite is built against the same safety contract:
- ✅ **PowerShell 5.1 first** — PowerShell 7.x compatible where applicable
- ✅ **No destructive action without explicit intent** — `ShouldProcess` enforced in all core logic
- ✅ **GUI-driven execution** for operator safety in interactive scenarios
- ✅ **Structured logging** (`.log`) and exportable audit reports (`.csv`) on every significant operation
- ✅ **No hidden state, no silent failures** — every error path is surfaced and logged
- ✅ **Credential hygiene by design** — secrets bound via environment variables, never hardcoded
- ✅ **ITSM-aligned change management** — provisioning workflows follow standardized lifecycle patterns
> Continuously evaluated via **PSScriptAnalyzer**, **SARIF reporting**, and **GitHub Actions CI** in report-only mode — visibility without blocking delivery.
---
## 🔍 Quality Assurance & Static Analysis
| Tool | Role |
|------|------|
| [](https://github.com/PowerShell/PSScriptAnalyzer) | PowerShell linting — runtime safety and best-practice enforcement |
| [](https://github.com/gitleaks/gitleaks) | Secret scanning — prevents credential leaks at commit time |
| [](https://prettier.io) | Markdown and web-asset formatting consistency |
| [](https://editorconfig.org) | Cross-editor formatting standardization |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/actions) | Integrity-verified package releases |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/security/code-scanning) | Deep static security analysis |
> CI findings inform controlled remediation cycles — **non-blocking by design, signal-rich by intent**.
---
## 🌐 Language Composition
| Language | Share | Primary Use |
|----------|-------|-------------|
| PowerShell | 96.7% | Automation, IAM, DFIR, ITSM provisioning |
| VBScript | 1.3% | Legacy workstation automation |
| HTML | 0.6% | GUI components and report templates |
| T-SQL | 0.4% | WSUS SUSDB maintenance queries |
| Java / PHP / Other | 0.6% | AD LDAP / SSO integration examples |
---
## 📚 Research Foundation & Citation
[](https://doi.org/10.5281/zenodo.18487320) [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/CITATION.cff) [](https://orcid.org/0000-0003-3705-7468)
Suitable for **academic, technical, and policy-oriented citation** across cybersecurity engineering, DFIR, IAM, IT governance, and ITSM-aligned infrastructure management.
**Citation (APA):**
> Roberto da Silva, L. H. (2026). *Windows-SysAdmin-ProSuite* (Version 1.8.8) [Computer software]. Zenodo. https://doi.org/10.5281/zenodo.18487320
**Selected publications:**
- Roberto da Silva, L. H. (2025). *SQL Syntax Models for Building Parsers to Query Event Logs in EVTX Format*. Revista FT — Computer Science, Vol. 29, Issue 142. [DOI: 10.69849/revistaft/th102502121360](https://doi.org/10.69849/revistaft/th102502121360)
- Roberto da Silva, L. H. (2024). *Event Logs: Applying a Log Analysis Model for Auditing Event Record Registration*. Sorian Editora. ISBN: 978-65-5453-366-9
- Roberto da Silva, L. H. (2009). *Computer Networking Technology: Using GPOs to Secure Corporate Domains*. Ciência Moderna.
---
## 👤 Author & Stewardship
**Luiz Hamilton Silva** — `@brazilianscriptguy`
Senior IAM Analyst · Identity & Access Management · AD & Azure AD · Windows Server Architect · PowerShell Automation · Digital Forensics Researcher
[](https://www.linkedin.com/in/brazilianscriptguy/) [](https://www.youtube.com/@brazilianscriptguy) [](https://x.com/brazscriptguy) [](https://orcid.org/0000-0003-3705-7468)
> This project reflects years of operational use, continuous refinement in production environments, and a commitment to principled, auditable systems engineering.
---
## 🤝 Contributing & Reuse
Contributions are welcome. Please review [`CONTRIBUTING.md`](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/.github/CONTRIBUTING.md) before submitting a pull request.
- **Pull requests** — bug fixes, documentation improvements, and new tools aligned with the suite's principles
- **Attribution** — required under the MIT License for any reuse or derivative work
- **Academic / institutional reuse** — please cite the repository DOI or the `CITATION.cff` file
- **Security disclosures** — follow the [`SECURITY.md`](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/.github/SECURITY.md) responsible disclosure process
---
## 📬 Contact & Support
[](mailto:luizhamilton.lhr@gmail.com) [](https://www.patreon.com/brazilianscriptguy) [](https://buymeacoffee.com/brazilianscriptguy) [](https://ko-fi.com/brazilianscriptguy) [](https://www.gofundme.com/f/brazilianscriptguy) [](https://whatsapp.com/channel/0029VaEgqC50G0XZV1k4Mb1c)
---
> *"Engineering secure, auditable, and scalable Windows automation for enterprise and public-sector environments — grounded in operational practice and peer-reviewed research."*
© 2026 Luiz Hamilton Silva · MIT License · [CHANGELOG](CHANGELOG.md) · [CITATION](CITATION.cff)
---
PowerShell automation · Windows Server administration · Active Directory · Azure AD · DNS · DHCP · WSUS · Group Policy (GPO) · PKI · certificate management · Identity & Access Management (IAM) · ITSM provisioning · security hardening · credential hygiene · digital forensics · DFIR · EVTX log analysis · event correlation · incident response · CI/CD · GitHub Actions · PSScriptAnalyzer · NuGet · SHA256 · SARIF · CodeQL · secure DevOps · modular architecture · enterprise scripting · Windows infrastructure automation