Skip to content

Commit cbeb60e

Browse files
brazilianscriptguybrazilianscriptguy
authored
Update SECURITY.md
Signed-off-by: LUIZ HAMILTON ROBERTO DA SILVA <[email protected]>
1 parent b5667fb commit cbeb60e

1 file changed

Lines changed: 128 additions & 193 deletions

File tree

‎.github/SECURITY.md‎

Lines changed: 128 additions & 193 deletions
Original file line numberDiff line numberDiff line change
@@ -1,193 +1,128 @@
1-
<div align="center">
2-
<h1>🛡️ Security Policy</h1>
3-
<p>
4-
This repository contains enterprise automation toolsets for Windows environments, including PowerShell and VBScript assets.
5-
Security updates and support are defined below.
6-
</p>
7-
</div>
8-
9-
<section>
10-
<h2>📌 Supported Versions</h2>
11-
<p>
12-
The following versions of the <strong>Windows-SysAdmin-ProSuite</strong> project — including <strong>BlueTeam-Tools</strong>,
13-
<strong>Core-ScriptLibrary</strong>, <strong>ITSM-Templates-SVR</strong>, <strong>ITSM-Templates-WKS</strong>, and
14-
<strong>SysAdmin-Tools</strong> — are actively maintained and receive security updates.
15-
</p>
16-
17-
<h3>💻 Repository Modules</h3>
18-
<ul>
19-
<li>
20-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/BlueTeam-Tools" target="_blank" rel="noopener noreferrer">
21-
<img src="https://img.shields.io/badge/BlueTeam%20Tools-Forensics-orange?style=flat-square&logo=security" alt="BlueTeam-Tools Badge">
22-
</a>
23-
<span> Security, monitoring, and incident response scripts for Windows Server and enterprise environments.</span>
24-
</li>
25-
<li>
26-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/Core-ScriptLibrary" target="_blank" rel="noopener noreferrer">
27-
<img src="https://img.shields.io/badge/Core%20ScriptLibrary-Framework-red?style=flat-square&logo=visualstudiocode" alt="Core-ScriptLibrary Badge">
28-
</a>
29-
<span> Shared PowerShell foundations for automation, reusable functions, GUIs, and backend logic.</span>
30-
</li>
31-
<li>
32-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-SVR" target="_blank" rel="noopener noreferrer">
33-
<img src="https://img.shields.io/badge/ITSM%20Templates-SVR-purple?style=flat-square&logo=server" alt="ITSM-Templates-SVR Badge">
34-
</a>
35-
<span> Server templates for standardization, ITSM compliance, and operational automation.</span>
36-
</li>
37-
<li>
38-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-WKS" target="_blank" rel="noopener noreferrer">
39-
<img src="https://img.shields.io/badge/ITSM%20Templates-WKS-green?style=flat-square&logo=windows" alt="ITSM-Templates-WKS Badge">
40-
</a>
41-
<span> Workstation templates and procedures for Windows 10/11 endpoint configuration and compliance.</span>
42-
</li>
43-
<li>
44-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools" target="_blank" rel="noopener noreferrer">
45-
<img src="https://img.shields.io/badge/SysAdmin%20Tools-Management-blue?style=flat-square&logo=powershell" alt="SysAdmin-Tools Badge">
46-
</a>
47-
<span> Tools for Active Directory, GPO operations, workstation provisioning, and infrastructure management.</span>
48-
</li>
49-
</ul>
50-
51-
<h3>🔧 Release Support Policy</h3>
52-
<p>
53-
This repository uses <strong>tag/release versioning</strong>. Only the most recent <strong>2 minor lines</strong> are supported
54-
(e.g., <code>v1.2.x</code> and <code>v1.3.x</code>). Older lines are considered unsupported unless explicitly stated in a release note.
55-
</p>
56-
57-
<table border="1" style="border-collapse: collapse; width: 100%; text-align: center;">
58-
<caption><strong>Supported Release Lines (Policy)</strong></caption>
59-
<thead>
60-
<tr>
61-
<th>Line</th>
62-
<th>Status</th>
63-
<th>Notes</th>
64-
</tr>
65-
</thead>
66-
<tbody>
67-
<tr>
68-
<td>Latest minor line</td>
69-
<td>✅ Supported</td>
70-
<td>Receives security fixes, improvements, and CI updates.</td>
71-
</tr>
72-
<tr>
73-
<td>Previous minor line</td>
74-
<td>✅ Supported</td>
75-
<td>Receives security fixes only (best-effort).</td>
76-
</tr>
77-
<tr>
78-
<td>Older lines</td>
79-
<td>❌ Unsupported</td>
80-
<td>No guaranteed fixes; upgrade recommended.</td>
81-
</tr>
82-
</tbody>
83-
</table>
84-
85-
<h3>🖥️ Windows Workstation Compatibility</h3>
86-
<table border="1" style="border-collapse: collapse; width: 100%; text-align: center;">
87-
<caption><strong>Supported Windows Workstation Versions</strong></caption>
88-
<thead>
89-
<tr><th>Version</th><th>Status</th><th>Notes</th></tr>
90-
</thead>
91-
<tbody>
92-
<tr><td>Windows 11</td><td>✅ Supported</td><td>Supported for workstation scripts and templates.</td></tr>
93-
<tr><td>Windows 10</td><td>✅ Supported</td><td>Supported for workstation scripts and templates.</td></tr>
94-
<tr><td>Windows 8.x</td><td>❌ Unsupported</td><td>Not supported; upgrade required.</td></tr>
95-
<tr><td>Windows 7</td><td>❌ Unsupported</td><td>Not supported; upgrade required.</td></tr>
96-
</tbody>
97-
</table>
98-
99-
<h3>🖥️ Windows Server Compatibility</h3>
100-
<table border="1" style="border-collapse: collapse; width: 100%; text-align: center;">
101-
<caption><strong>Supported Windows Server Versions</strong></caption>
102-
<thead>
103-
<tr><th>Version</th><th>Status</th><th>Notes</th></tr>
104-
</thead>
105-
<tbody>
106-
<tr><td>Windows Server 2022</td><td>✅ Supported</td><td>Supported for SysAdmin and BlueTeam toolsets.</td></tr>
107-
<tr><td>Windows Server 2019</td><td>✅ Supported</td><td>Supported for SysAdmin and BlueTeam toolsets.</td></tr>
108-
<tr><td>Windows Server 2016</td><td>✅ Supported</td><td>Supported on best-effort basis (older baseline).</td></tr>
109-
<tr><td>Windows Server 2012</td><td>❌ Unsupported</td><td>Not supported; upgrade required.</td></tr>
110-
</tbody>
111-
</table>
112-
</section>
113-
114-
<section>
115-
<h2>🕵️ Reporting a Vulnerability</h2>
116-
<ol>
117-
<li><strong>Contact:</strong> Send details to <a href="mailto:[email protected]">[email protected]</a></li>
118-
<li><strong>Scope:</strong> Include affected module/folder, reproduction steps, logs, and expected impact.</li>
119-
<li><strong>Response Time:</strong> Initial reply within <strong>3 business days</strong>.</li>
120-
<li><strong>Fixes:</strong> Confirmed issues will be patched and released with notes and updated artifacts.</li>
121-
</ol>
122-
<p><strong>⚠️ Note:</strong> Please do not disclose vulnerabilities publicly until a patch or mitigation is published.</p>
123-
</section>
124-
125-
<section>
126-
<h2>🔒 Security Measures</h2>
127-
<ul>
128-
<li><strong>Secure CI:</strong> EditorConfig, Prettier, VBScript SARIF, and PowerShell SARIF pipelines enforce quality signals.</li>
129-
<li><strong>Code Reviews:</strong> Changes are reviewed before merge when possible; CI gates reduce regressions.</li>
130-
<li><strong>Least Privilege:</strong> GitHub Actions permissions are minimized and scoped per job.</li>
131-
<li><strong>Traceability:</strong> Builds produce artifacts and summaries for auditing and reproducibility.</li>
132-
</ul>
133-
</section>
134-
135-
<section>
136-
<h2>📚 Additional Resources</h2>
137-
<ul>
138-
<li>
139-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/BlueTeam-Tools/README.md" target="_blank" rel="noopener noreferrer">
140-
<img src="https://img.shields.io/badge/BlueTeam%20Tools-Docs-orange?style=flat-square&logo=readthedocs" alt="BlueTeam Docs">
141-
</a>
142-
BlueTeam forensic and threat monitoring documentation
143-
</li>
144-
<li>
145-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/Core-ScriptLibrary/README.md" target="_blank" rel="noopener noreferrer">
146-
<img src="https://img.shields.io/badge/Core%20ScriptLibrary-Docs-red?style=flat-square&logo=readthedocs" alt="Core Script Docs">
147-
</a>
148-
Core scripts and UI frameworks documentation
149-
</li>
150-
<li>
151-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/ITSM-Templates-SVR/README.md" target="_blank" rel="noopener noreferrer">
152-
<img src="https://img.shields.io/badge/ITSM%20Templates-SVR%20Docs-purple?style=flat-square&logo=readthedocs" alt="ITSM SVR Docs">
153-
</a>
154-
ITSM templates for server automation
155-
</li>
156-
<li>
157-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/ITSM-Templates-WKS/README.md" target="_blank" rel="noopener noreferrer">
158-
<img src="https://img.shields.io/badge/ITSM%20Templates-WKS%20Docs-green?style=flat-square&logo=readthedocs" alt="ITSM WKS Docs">
159-
</a>
160-
Templates for endpoint configuration and security
161-
</li>
162-
<li>
163-
<a href="https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/blob/main/SysAdmin-Tools/README.md" target="_blank" rel="noopener noreferrer">
164-
<img src="https://img.shields.io/badge/SysAdmin%20Tools-Docs-blue?style=flat-square&logo=readthedocs" alt="SysAdmin Docs">
165-
</a>
166-
Admin scripts for directory, servers, and workstation management
167-
</li>
168-
</ul>
169-
</section>
170-
171-
<section>
172-
<h2>🗂️ Version History</h2>
173-
<table border="1" style="border-collapse: collapse; width: 100%; text-align: center;">
174-
<caption><strong>Security Policy Versioning</strong></caption>
175-
<thead>
176-
<tr>
177-
<th>Version</th>
178-
<th>Date</th>
179-
<th>Changes Made</th>
180-
<th>Author</th>
181-
</tr>
182-
</thead>
183-
<tbody>
184-
<tr><td>3.0</td><td>2026-02-03</td><td>Policy refresh: tag/release support lines, updated module wording, CI/security measures section refined</td><td>Luiz Hamilton Silva</td></tr>
185-
<tr><td>2.8</td><td>2025-07-21</td><td>Added tools for total Active Directory Services integration</td><td>Luiz Hamilton Silva</td></tr>
186-
<tr><td>1.2</td><td>2024-04-27</td><td>Updated support tables and links</td><td>Luiz Hamilton Silva</td></tr>
187-
<tr><td>1.1</td><td>2023-06-15</td><td>Added templates and Core library</td><td>Luiz Hamilton Silva</td></tr>
188-
<tr><td>1.0</td><td>2023-01-01</td><td>Initial release</td><td>Luiz Hamilton Silva</td></tr>
189-
</tbody>
190-
</table>
191-
</section>
192-
193-
<p align="center" style="color: #777;">&copy; 2026 Luiz Hamilton. All rights reserved.</p>
1+
# Security Policy
2+
3+
This repository contains enterprise automation toolsets for Windows environments, including PowerShell and VBScript assets.
4+
Security updates, supported versions, and vulnerability reporting procedures are defined below.
5+
6+
---
7+
8+
## Supported Versions
9+
10+
The following components of **Windows-SysAdmin-ProSuite** are actively maintained and receive security updates:
11+
12+
- **BlueTeam-Tools** – Security, monitoring, and incident response scripts
13+
- **Core-ScriptLibrary** – Shared PowerShell foundations and frameworks
14+
- **ITSM-Templates-SVR** – Server automation and ITSM compliance templates
15+
- **ITSM-Templates-WKS** – Windows workstation configuration templates
16+
- **SysAdmin-Tools** – Active Directory, GPO, and infrastructure management tools
17+
18+
---
19+
20+
## Release Support Policy
21+
22+
This repository uses **tag and release versioning**.
23+
24+
Only the **two most recent minor release lines** are supported at any given time.
25+
26+
| Release Line | Status | Notes |
27+
|-------------|--------|-------|
28+
| Latest minor line | ✅ Supported | Receives security fixes, improvements, and CI updates |
29+
| Previous minor line | ✅ Supported | Receives security fixes only (best-effort) |
30+
| Older lines | ❌ Unsupported | No guaranteed fixes; upgrade strongly recommended |
31+
32+
---
33+
34+
## Windows Compatibility
35+
36+
### Windows Workstations
37+
38+
| Version | Status | Notes |
39+
|-------|--------|------|
40+
| Windows 11 | ✅ Supported | Fully supported |
41+
| Windows 10 | ✅ Supported | Fully supported |
42+
| Windows 8.x | ❌ Unsupported | Upgrade required |
43+
| Windows 7 | ❌ Unsupported | Upgrade required |
44+
45+
### Windows Server
46+
47+
| Version | Status | Notes |
48+
|-------|--------|------|
49+
| Windows Server 2022 | ✅ Supported | Full support |
50+
| Windows Server 2019 | ✅ Supported | Full support |
51+
| Windows Server 2016 | ⚠️ Best-effort | Older baseline |
52+
| Windows Server 2012 | ❌ Unsupported | Upgrade required |
53+
54+
---
55+
56+
## Reporting a Vulnerability
57+
58+
If you discover a security vulnerability, please report it responsibly.
59+
60+
1. **Contact:**
61+
Send details to **[email protected]**
62+
63+
2. **Include:**
64+
- Affected module or folder
65+
- Reproduction steps (if possible)
66+
- Logs, screenshots, or proof-of-concept
67+
- Expected impact and severity assessment
68+
69+
3. **Response Time:**
70+
You can expect an initial response within **3 business days**.
71+
72+
4. **Fixes:**
73+
Confirmed vulnerabilities will be patched and released with appropriate notes and updated artifacts.
74+
75+
> ⚠️ **Please do not disclose vulnerabilities publicly** until a fix or mitigation has been published.
76+
77+
---
78+
79+
## Security Measures
80+
81+
This project applies multiple defense-in-depth measures:
82+
83+
- **Secure CI pipelines**
84+
PowerShell SARIF, VBScript SARIF, EditorConfig, and formatting enforcement
85+
86+
- **Code review process**
87+
Changes are reviewed when possible; CI gates reduce regressions
88+
89+
- **Least privilege**
90+
GitHub Actions permissions are minimized and scoped per job
91+
92+
- **Traceability**
93+
Builds generate artifacts, logs, and summaries for auditing and reproducibility
94+
95+
---
96+
97+
## Additional Resources
98+
99+
- **BlueTeam-Tools documentation**
100+
https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/BlueTeam-Tools
101+
102+
- **Core-ScriptLibrary documentation**
103+
https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/Core-ScriptLibrary
104+
105+
- **ITSM-Templates-SVR documentation**
106+
https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-SVR
107+
108+
- **ITSM-Templates-WKS documentation**
109+
https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/ITSM-Templates-WKS
110+
111+
- **SysAdmin-Tools documentation**
112+
https://github.com/brazilianscriptguy/Windows-SysAdmin-ProSuite/tree/main/SysAdmin-Tools
113+
114+
---
115+
116+
## Policy Version History
117+
118+
| Version | Date | Changes | Author |
119+
|-------|------|--------|--------|
120+
| 3.0 | 2026-02-03 | Policy refresh: tag/release support lines, updated module wording, refined CI/security measures | Luiz Hamilton Silva |
121+
| 2.8 | 2025-07-21 | Added Active Directory integration tools | Luiz Hamilton Silva |
122+
| 1.2 | 2024-04-27 | Updated support tables and links | Luiz Hamilton Silva |
123+
| 1.1 | 2023-06-15 | Added templates and Core library | Luiz Hamilton Silva |
124+
| 1.0 | 2023-01-01 | Initial release | Luiz Hamilton Silva |
125+
126+
---
127+
128+
© 2026 Luiz Hamilton. All rights reserved.

0 commit comments

Comments
 (0)