Five hundred scripts you can actually run

#Requires -Modules ActiveDirectory.SYNOPSIS    Stages dormant AD accounts through disable -> quarantine -> report..DESCRIPTION    Uses LastLogonTimestamp (replicated attribute) so a single DC query is    accurate to within msDS-LogonTimeSyncInterval (default 14 days).

# ─────────────────────────────────────────────────────────────────────────# AIInfraEngine — Azure Landing Zone# Hub-and-spoke with management-group-scoped policy inheritance.# ─────────────────────────────────────────────────────────────────────────terraform {  required_version = ">= 1.9.0"

#!/usr/bin/env python3FortiGate policy hygiene audit.Read-only. Produces a findings CSV covering shadowed, dormant, permissiveand undocumented policies.Usage:    export FORTIGATE_TOKEN="..."

# ─────────────────────────────────────────────────────────────────────────# AIInfraEngine — Kubernetes hardening baseline# Apply order matters: namespaces, then policy, then RBAC, then quotas.#   kubectl apply -f k8s-hardening-baseline.yaml# ─────────────────────────────────────────────────────────────────────────apiVersion: v1

#Requires -Modules VMware.PowerCLI.SYNOPSIS    Reports and optionally removes aged VMware snapshots..DESCRIPTION    Read-only by default. -Remove consolidates snapshots older than    -MaxAgeDays, skipping VMs with a protected tag or an in-flight backup.

#!/usr/bin/env bash# ─────────────────────────────────────────────────────────────────────────# AIInfraEngine — CIS Level 1 hardening for RHEL 8/9 and Ubuntu 22.04/24.04##   ./cis-harden.sh --audit           # report only, changes nothing#   ./cis-harden.sh --apply           # apply low-risk controls