https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
PowerShell and VBScript tools for automating Active Directory workflows,securing system operations, and supporting forensic procedures. Designed for Windows Servers and workstations, these solutions improve accuracy, scalability, and compliance—enhancing performance, reliability, and cybersecurity posture across enterprise IT environments worldwide
https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
active-directory active-directory-domain-services activedirectoryapi admin-tools blueteam eventlogs evtx-analisys forensics-tools gpo-policy-security itsm itsm-solutions ldap-authentication-backend organizational-units sysadmin sysadmin-scripts sysadmin-tasks sysadmin-tool windows-server-2019 workstations wsus-maintenance
Last synced: 3 days ago
JSON representation
PowerShell and VBScript tools for automating Active Directory workflows,securing system operations, and supporting forensic procedures. Designed for Windows Servers and workstations, these solutions improve accuracy, scalability, and compliance—enhancing performance, reliability, and cybersecurity posture across enterprise IT environments worldwide
- Host: GitHub
- URL: https://github.com/brazilianscriptguy/windows-sysadmin-prosuite
- Owner: brazilianscriptguy
- License: other
- Created: 2023-12-22T13:19:10.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2026-01-29T16:37:40.000Z (2 months ago)
- Last Synced: 2026-01-29T17:30:32.793Z (2 months ago)
- Topics: active-directory, active-directory-domain-services, activedirectoryapi, admin-tools, blueteam, eventlogs, evtx-analisys, forensics-tools, gpo-policy-security, itsm, itsm-solutions, ldap-authentication-backend, organizational-units, sysadmin, sysadmin-scripts, sysadmin-tasks, sysadmin-tool, windows-server-2019, workstations, wsus-maintenance
- Language: PowerShell
- Homepage: https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite
- Size: 24.3 MB
- Stars: 26
- Watchers: 1
- Forks: 3
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: .github/CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE.txt
- Code of conduct: .github/CODE_OF_CONDUCT.md
- Security: .github/SECURITY.md
Awesome Lists containing this project
README
# Windows-SysAdmin-ProSuite — v1.8.8
### DOI: [10.5281/zenodo.18487320](https://doi.org/10.5281/zenodo.18487320)
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite) [](#) [ ](#) [](LICENSE.txt) [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/actions)
[](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/security/code-scanning) [](https://doi.org/10.5281/zenodo.18487320)
---
## 🧭 Overview
**Windows-SysAdmin-ProSuite** is an enterprise-grade, research-aligned automation platform for Windows Server and workstation environments — authored by **Luiz Hamilton Silva ([@brazilianscriptguy](https://github.com/brazilianscriptguy))**, Senior IAM Analyst, Windows Server Architect, and published researcher in digital forensics and cybersecurity.
Built around **production-tested PowerShell and VBScript toolchains**, the suite addresses five core operational pillars:
| Pillar | Scope |
|--------|-------|
| 🔐 Identity & Access Management | AD lifecycle, LDAP/SSO, credential hygiene |
| 🖥️ ITSM-Aligned Provisioning | Standardized workstation and server onboarding |
| 🛡️ Cybersecurity & Hardening | GPO enforcement, baseline templates, drift remediation |
| 🔬 Digital Forensics & DFIR | EVTX parsing, event correlation, incident response |
| 📋 Operational Auditability | Structured `.log` outputs, `.csv` exports, traceable execution |
> All tooling enforces **runtime safety**, **deterministic logging**, and **PowerShell 5.1 compatibility** as non-negotiable requirements.
---
## 🎯 Who This Is For
This is **not** a collection of demos or one-off scripts. It is a cohesive automation suite built for production use across:
| Environment | Primary Use Case |
|---|---|
| 🏛️ Public sector & judicial institutions | Compliance-driven provisioning and audit trails |
| 🏢 Enterprise & hybrid infrastructures | AD, WSUS, DNS, DHCP, PKI, RDS at scale |
| 🛡️ Blue Team / DFIR operations | Threat hunting, event log analysis, forensic collection |
| 📋 Governance, risk & compliance teams | GPO enforcement, ITSM-aligned change management |
| 🎓 Academic & research environments | Citeable tooling grounded in peer-reviewed methodology |
---
## 📦 Suite Modules
Eight specialized modules — each independently usable, collectively cohesive.
| Module | Purpose | Key Capabilities |
|--------|---------|--------------------|
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools) | PowerShell toolset for **Windows Server, AD, network services & WSUS**. | AD & OU lifecycle · GPO enforcement · WSUS & SUSDB · DNS, DHCP, CA, RDS |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/BlueTeam-Tools) | Defensive security & **digital forensics** utilities for investigation and IR. | DFIR collection · EVTX parsers · Credential audits · Threat hunting |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/Core-ScriptLibrary) | **Modular PowerShell framework** shared by all modules. | Reusable helpers · Centralized logging · NuGet & SHA256 automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-WKS) | **Windows 10/11 workstation lifecycle** automation aligned with ITSM. | Pre/post-join · Profile & printer standardization · Compliance hardening |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-SVR) | **Windows Server provisioning, hardening & ITSM compliance**. | Server baselines · Role configuration · GPO drift remediation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/GroupPolicyObjects-Templates) | Ready-to-import **Group Policy Objects** for domain and forest environments. | Security & UX GPOs · Forest-wide templates · Export/import automation |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools/ActiveDirectory-SSO-Integrations) | **AD LDAP / SSO integration patterns** for cross-platform apps. | PHP · .NET · Flask · Node.js · Spring Boot · Secure env-var binding |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ProSuite-Hub) | Unified **GUI launcher and module orchestrator** for the entire suite. | Centralized tool discovery · Menu-driven interface · Single entry point |
---
## 🏗️ Engineering Principles
Every script in this suite is built against the same safety contract:
- ✅ **PowerShell 5.1 first** — PowerShell 7.x compatible where applicable
- ✅ **No destructive action without explicit intent** — `ShouldProcess` enforced in all core logic
- ✅ **GUI-driven execution** for operator safety in interactive scenarios
- ✅ **Structured logging** (`.log`) and exportable audit reports (`.csv`) on every significant operation
- ✅ **No hidden state, no silent failures** — every error path is surfaced and logged
- ✅ **Credential hygiene by design** — secrets bound via environment variables, never hardcoded
- ✅ **ITSM-aligned change management** — provisioning workflows follow standardized lifecycle patterns
> Continuously evaluated via **PSScriptAnalyzer**, **SARIF reporting**, and **GitHub Actions CI** in report-only mode — visibility without blocking delivery.
---
## 🔍 Quality Assurance & Static Analysis
| Tool | Role |
|------|------|
| [](https://github.com/PowerShell/PSScriptAnalyzer) | PowerShell linting — runtime safety and best-practice enforcement |
| [](https://github.com/gitleaks/gitleaks) | Secret scanning — prevents credential leaks at commit time |
| [](https://prettier.io) | Markdown and web-asset formatting consistency |
| [](https://editorconfig.org) | Cross-editor formatting standardization |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/actions) | Integrity-verified package releases |
| [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/security/code-scanning) | Deep static security analysis |
> CI findings inform controlled remediation cycles — **non-blocking by design, signal-rich by intent**.
---
## 🌐 Language Composition
| Language | Share | Primary Use |
|----------|-------|-------------|
| PowerShell | 96.7% | Automation, IAM, DFIR, ITSM provisioning |
| VBScript | 1.3% | Legacy workstation automation |
| HTML | 0.6% | GUI components and report templates |
| T-SQL | 0.4% | WSUS SUSDB maintenance queries |
| Java / PHP / Other | 0.6% | AD LDAP / SSO integration examples |
---
## 📚 Research Foundation & Citation
[](https://doi.org/10.5281/zenodo.18487320) [](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/CITATION.cff) [](https://orcid.org/0000-0003-3705-7468)
Suitable for **academic, technical, and policy-oriented citation** across cybersecurity engineering, DFIR, IAM, IT governance, and ITSM-aligned infrastructure management.
**Citation (APA):**
> Roberto da Silva, L. H. (2026). *Windows-SysAdmin-ProSuite* (Version 1.8.8) [Computer software]. Zenodo. https://doi.org/10.5281/zenodo.18487320
**Selected publications:**
- Roberto da Silva, L. H. (2025). *SQL Syntax Models for Building Parsers to Query Event Logs in EVTX Format*. Revista FT — Computer Science, Vol. 29, Issue 142. [DOI: 10.69849/revistaft/th102502121360](https://doi.org/10.69849/revistaft/th102502121360)
- Roberto da Silva, L. H. (2024). *Event Logs: Applying a Log Analysis Model for Auditing Event Record Registration*. Sorian Editora. ISBN: 978-65-5453-366-9
- Roberto da Silva, L. H. (2009). *Computer Networking Technology: Using GPOs to Secure Corporate Domains*. Ciência Moderna.
---
## 👤 Author & Stewardship
**Luiz Hamilton Silva** — `@brazilianscriptguy`
Senior IAM Analyst · Identity & Access Management · AD & Azure AD · Windows Server Architect · PowerShell Automation · Digital Forensics Researcher
[](https://www.linkedin.com/in/brazilianscriptguy/) [](https://www.youtube.com/@brazilianscriptguy) [](https://x.com/brazscriptguy) [](https://orcid.org/0000-0003-3705-7468)
> This project reflects years of operational use, continuous refinement in production environments, and a commitment to principled, auditable systems engineering.
---
## 🤝 Contributing & Reuse
Contributions are welcome. Please review [`CONTRIBUTING.md`](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/.github/CONTRIBUTING.md) before submitting a pull request.
- **Pull requests** — bug fixes, documentation improvements, and new tools aligned with the suite's principles
- **Attribution** — required under the MIT License for any reuse or derivative work
- **Academic / institutional reuse** — please cite the repository DOI or the `CITATION.cff` file
- **Security disclosures** — follow the [`SECURITY.md`](https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/.github/SECURITY.md) responsible disclosure process
---
## 📬 Contact & Support
[](mailto:luizhamilton.lhr@gmail.com) [](https://www.patreon.com/brazilianscriptguy) [](https://buymeacoffee.com/brazilianscriptguy) [](https://ko-fi.com/brazilianscriptguy) [](https://www.gofundme.com/f/brazilianscriptguy) [](https://whatsapp.com/channel/0029VaEgqC50G0XZV1k4Mb1c)
---
> *"Engineering secure, auditable, and scalable Windows automation for enterprise and public-sector environments — grounded in operational practice and peer-reviewed research."*
© 2026 Luiz Hamilton Silva · MIT License · [CHANGELOG](CHANGELOG.md) · [CITATION](CITATION.cff)
---
PowerShell automation · Windows Server administration · Active Directory · Azure AD · DNS · DHCP · WSUS · Group Policy (GPO) · PKI · certificate management · Identity & Access Management (IAM) · ITSM provisioning · security hardening · credential hygiene · digital forensics · DFIR · EVTX log analysis · event correlation · incident response · CI/CD · GitHub Actions · PSScriptAnalyzer · NuGet · SHA256 · SARIF · CodeQL · secure DevOps · modular architecture · enterprise scripting · Windows infrastructure automation