System AdministrationOpen source

Advanced System Admin Toolkit

BatchPowerShellBashWindowsLinuxSysinternals

Executive Summary

Problem

System admins jumped between dozens of separate commands and tools for diagnostics, repair, security audits, and optimization.

Approach

A single menu-driven suite - Windows (.bat + PowerShell) and Linux (.sh) - exposing 76/72 options across network diagnostics, system info, repair & maintenance, security & audit, performance, and reporting, with console + file logging.

Outcome

One tool covers full diagnostics, repair, and security audits; reports saved automatically to AdminToolkit_Report.txt with targeted HTML reports.

Architecture

menuselectexecutelog

Components

menu-enginenetwork-modulesystem-modulerepair-modulesecurity-modulereporting

Trust

admin-required actions flagged
auto-backup before system-file ops
timestamped session logs

Threat Model (STRIDE)

S	Threat	Mitigation
T	Destructive command misuse	explicit confirmations for SFC/DISM/CHKDSK
R	No audit trail	console + file dual logging (timestamped)
I	Sensitive data exposure	local-only reports; opt-in public IP lookup
E	Privilege misuse	requires Run-as-Administrator + warnings
D	Service disruption (spooler, updates)	documented restarts + best-practice ordering

Environment

Windows: 7/8/10/11 · x86/x64 · cmd + PowerShell 5.0+
Linux: bash · 72 options
Permissions: Administrator required
Reporting: console + AdminToolkit_Report.txt + HTML

Implementation

Phase 0 — menu engine
Phase 1 — network diagnostics
Phase 2 — system/repair modules
Phase 3 — security & audit
Phase 4 — reporting suite

AdminToolkit.bat (menu snippet)

code

echo 1. Full IP configuration
set /p opt=Select option:
if "%opt%"=="1" ipconfig /all >> "%USERPROFILE%\Desktop\AdminToolkit_Report.txt"

Detection & MITRE

Windows Defender scans, startup malware checks, scheduled-task audits, user/admin review, firewall rule export.

Security-audit module maps to common ATT&CK procedures

Lessons Learned

What worked
Dual console + file logging made every run auditable.
What backfired
DISM/GPO options need Pro+ editions; documented in troubleshooting.
What I'd repeat
Warn loudly before destructive ops and auto-backup first.

Future Improvements

Scheduled/report-only mode
Cross-platform reporting parity
Centralized log export

View on GitHub Back to work