﻿WINSECMON v3.0.0 - Windows Security Posture Assessment
ScaryByte (Pty) Ltd

WHAT THIS IS
  A read-only Windows security posture assessment. It inspects the local system and
  produces Console, JSON, HTML and CSV reports. It makes no configuration changes.

RUNNING IT
  Double-click WINSECMON.exe. It requests administrator rights, because many checks
  cannot read their evidence without them. Reports are written to:
    %ProgramData%\ScaryByte\WINSECMON\reports

  From a command line:
    powershell -ExecutionPolicy RemoteSigned -File scarybyte.ps1 scan

VERIFYING AUTHENTICITY
  Every executable and PowerShell file in this package is Authenticode-signed by
  "SCARYBYTE (PTY) LTD" and RFC-3161 timestamped. To verify:

    Get-AuthenticodeSignature .\WINSECMON.exe | Format-List Status, SignerCertificate

  Status must be 'Valid' and the signer organisation must be SCARYBYTE (PTY) LTD.
  Verify the download itself against the published SHA-256:

    Get-FileHash .\WINSECMON-v3.0.0-Windows-x64.zip -Algorithm SHA256

CONTENTS
  WINSECMON.exe   launcher
  scarybyte.ps1   command-line entry point
  src\            product runtime (PowerShell module)
  config\         default policy, host profiles, suppressions, offline CVE feed
  assets\vendor\  optional offline report assets (see its README)

  The runtime ships as signed PowerShell so it stays auditable: you can read exactly
  what the tool does on your systems. This package is minimised to the required
  runtime; it is not obfuscated and it is not claimed to be un-inspectable.

SUPPORT
  https://scarybyte.com
