Enterprise Windows security tooling,
built for the real world.

Production-grade PowerShell tooling for AD CS PKI hardening, compliance auditing, and Git workflow automation. Documented to audit-ready standards and aligned to NIST SP 800-53 and ISO/IEC 27001:2022.

View on GitHub PKI Hardening Docs

Projects

🔐 windows-ca-pki-hardening Public

Hardened AD CS baseline for enterprise Windows PKI deployments. Nine certificate templates, least-privilege ACL enforcement, compliance auditing with JSON/CSV output, and audit-ready documentation with control framework alignment.

adcs pki-hardening nist-sp-800-53-r5 iso27001-2022 powershell compliance
📖 Wiki ⬇️ Scripts & Audit Package
⚙️ rwt-git-automation Public

PowerShell toolkit for creating and publishing GitHub repositories with a repeatable, opinionated baseline. Supports new project bootstrapping and publishing existing repos with paired public wikis.

powershell git-automation github devops
📖 Wiki

Specializations

Windows PKI & AD CS Enterprise CA deployment, certificate template governance, CRL/OCSP infrastructure
Security Hardening Least-privilege ACL enforcement, drift detection, compliance validation
Audit & Compliance NIST SP 800-53, ISO/IEC 27001:2022, audit evidence generation and walkthrough support
PowerShell Tooling Production-grade automation, repeatable baselines, structured output artifacts
Active Directory AD security group governance, ACL management, enterprise identity infrastructure
Infrastructure Automation Git workflow tooling, repo lifecycle management, documentation-as-code