OT Lighthouse Security Auditing Toolkit

A Windows security and configuration auditing toolkit designed for standalone OT/ICS systems. Performs read-only security assessments with no system modifications.

Features

• 68 security checks across 4 audit categories
• Standalone PowerShell and Batch implementations (no external dependencies)
• Supports Windows XP through Windows 11/Server 2022
• Text and HTML report output with detailed recommendations
• Reference ID system for tracking findings

Quick Start

PowerShell

.\RunAudit.ps1 -AuditClass All -OutputPath C:\Audits -OutputFormat Both

Batch (for systems without PowerShell)

RunAudit.bat -AuditClass All -OutputPath C:\Audits -OutputFormat Both

Usage

Parameters

Parameter	Values	Description
-AuditClass	Inventory, Hardening, DFIR, NERC_CIP, All	Category of checks to run
-OutputPath	Directory path	Where to save results
-OutputFormat	Text, HTML, Both	Report format
-QuietMode	(flag)	Suppress console output

Legacy Support

For backward compatibility, -AuditLevel is still supported:

• Basic = Inventory
• Standard = Hardening
• Comprehensive = All

Audit Categories

Category	Description	Checks
Inventory	Asset baseline and system information	13
Hardening	Security configuration assessment	47
DFIR	Digital forensics and incident response	8
NERC_CIP	NERC CIP-010-5 compliance	13

Output Structure

OutputPath/
  Reports/          # Consolidated HTML/TXT audit reports
  Results/          # Individual check result files (HTML and TXT)
  Summary/          # JSON summary data
  Logs/             # Execution logs

Note: HTML consolidated reports link directly to individual HTML check result files for detailed drill-down.

Running Individual Checks

Each check can run standalone for troubleshooting:

.\checks\powershell\SMBv1Check.ps1 -OutputPath C:\temp\debug

checks\batch\SMBv1Check.bat -OutputPath C:\temp\debug

Documentation

See the docs/ directory for detailed documentation:

User Guides

• User Guide - Complete usage instructions
• Category Guide - Audit category details and check lists
• Examples - Practical usage examples
• Troubleshooting Guide - Common issues and solutions

Reference

• Recommendation Reference - Remediation commands for all checks
• NERC CIP Compliance Guide - NERC CIP-010-5 compliance workflows

Developer

• Adding New Checks - Developer guide with templates and Claude Code prompts

Requirements

• Windows XP SP3 or later
• Administrator privileges recommended (some checks work as standard user)
• No external dependencies - all scripts are self-contained

License

GPL v3 - See LICENSE file for details.

Support

Report issues at: https://github.com/cutaway-security/otlighthouse/issues