Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have several security policy files (INF exported from different Windows machines) which I need to audit. Is there any automatic tool you know of, that can analyse those files according to best practice that I'll provide?

share|improve this question

closed as off-topic by RoraΖ, schroeder, Mark, Jens Erat, Rory Alsop Jan 26 '15 at 12:08

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

I would do this with C# as a Desktop app, just make a list of threats and loop thru the files, and the practice can be made within template ini file. – Andrew Smith Jul 29 '12 at 17:04
up vote 1 down vote accepted

Microsoft Security Baseline Analyzer and Security Compliance Manager are Microsoft's tools for this.

SCM is likely the one you are looking for...

share|improve this answer
MSBA I know, and it can't check exported policy files. SCM I know a bit less, and I couldn't find automatic way for analysing INF files in t as well. Google didn't help. Currently importing the settings to VM and then running MSBA, but surly there is better solution than that... – Boaz Tirosh Jul 31 '12 at 21:17

Not the answer you're looking for? Browse other questions tagged or ask your own question.