Security Auditing software...

jamesp1983

I was curious if anyone knows of some software that will collect security information from servers in an OU, like ACLs, group members, etc... I need a tool that can collect information from all the servers and give me information about folder permissions, who's in the admin and remote desktop user group, etc... I have a script that will search through all the servers in an OU and tell me who's in the admin and remote desktop user groups...so that's not as important.

Find more posts tagged with

SAVE $250 on Your Boot Camp — Use Code "EXAM26"

Exclusively for TechExams members for Infosec Boot Camps starting before April 30, 2026

View Boot Camps

Comments

darkuser

nessus ?
core impact ?
depends if you're looking for pentesting
or auditing ?

theseman

For group membership searches I have always used VB scripts.

For ACL and folder permissions I use Dumpsec/Hyena.

-Travis

snadam

theseman wrote:

For group membership searches I have always used VB scripts.

For ACL and folder permissions I use Dumpsec/Hyena.

-Travis

I have seen hyena in action, and its pretty darn cool!

blargoe

Another vote for Hyena.

JDMurray

Might as well give Microsoft Baseline Security Analyzer a run too.

jamesp1983

Well obviously the MBSA has been considered, but its just not comprehensive enough for our needs. I'm trying Hyena now. It looks to be a full featured solution. We are more interested in auditing than penetration.

Thanks for all of the suggestions guys!!