01 / Brief
Collect a scattered endpoint picture.
Problem framing
Basic endpoint posture checks can be scattered across multiple tools and commands. This project collected several useful checks into one educational scanner.
02 / Check path
Target in. Four evidence channels out.
Operator inputTarget IP address
PythonPosture scannercommand-line workflow
Socket + threadingPorts 1–1024Identify exposed services
PowerShellWindows updatesCollect update information
PowerShellRunning servicesInspect active services
netshFirewall statusCollect configuration state
03 / Tool map
Small components, explicit jobs.
- Python
- Controls the command-line workflow.
- Socket
- Checks whether ports respond.
- Threading
- Runs the port scan concurrently.
- PowerShell
- Queries updates and services.
- netsh
- Collects Windows firewall status.
04 / Interpretation
Evidence becomes a posture conversation.
Open portsExposed services
Update stateMissing updates
Running servicesUnnecessary services
Firewall statusConfiguration gaps
Each signal can contribute to endpoint risk. The tool gathers repeatable evidence so configuration issues are easier to inspect.
05 / Project evidence
Artifact status.
06 / Reflection
Even simple tools become more useful when they collect repeatable evidence and make configuration issues easier to inspect.
This project connected scripting with practical security operations.