Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I have several security policy files (INF exported from different windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best practice that I'll provide?

share|improve this question
I would do this with C# as a Desktop app, just make a list of threats and loop thru the files, and the practice can be made within template ini file. – Andrew Smith Jul 29 '12 at 17:04

1 Answer

up vote 1 down vote accepted

Microsoft Security Baseline Analyzer and Security Compliance Manager are Microsoft's tools for this.

SCM is likely the one you are looking for...

share|improve this answer
MSBA I know, and it can't check exported policy files. SCM I know a bit less, and I couldn't find automatic way for analysing INF files in t as well. Google didn't help. Currently importing the settings to VM and then running MSBA, but surly there is better solution than that... – Boaz Tirosh Jul 31 '12 at 21:17

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.