SME Security Framework
Small companies run Windows laptops with no security team and no budget for enterprise tooling. I turned my thesis into a framework that hardens them in one run.
- What it does
- Audits or enforces CIS Benchmark and Microsoft baseline controls across 9 modules: firewall, BitLocker, Defender, accounts, services, updates, logging and more.
- Safety first
- Creates a restore point and backs up registry keys and firewall rules before any change. Audit mode changes nothing.
- Output
- A JSON evidence log per module and a weighted security score.
# Idempotent: only acts when not compliantfunction Ensure-MpsSvc { $svc = Get-Service -Name 'mpssvc' -ErrorAction SilentlyContinue if (-not $svc) { throw "Firewall service 'mpssvc' not found." } $changed = $false if ($svc.StartType -ne 'Automatic') { Set-Service -Name 'mpssvc' -StartupType Automatic $changed = $true } if ($svc.Status -ne 'Running') { Start-Service -Name 'mpssvc' $changed = $true } return $changed} # Every module reports an outcome the run log can prove$results.Add([pscustomobject]@{ module = $moduleName outcome = "Failed" error = $err timestampUtc = (Get-Date).ToUniversalTime().ToString("o")})
