$ show cutaway-security/chaps
CHAPS (Configuration Hardening Assessment PowerShell Scripts) is a security assessment toolkit designed for Windows systems where additional assessment software cannot be installed. It consists of three script variants (PowerShell v3+, PowerShell v2, and CMD batch) that perform 63 security checks across System Info, Security, Authentication, Network, PowerShell, and Logging categories. All scripts output results in Markdown format to stdout. The companion analysis tool (chaps-analyze.ps1) processes these reports to produce structured findings with recommendations, risk explanations, and MITRE ATT&CK mappings using a JSON knowledge base. The toolkit is specifically designed for ICS/OT environments, air-gapped systems, and locked-down Windows installations where traditional security assessment tools cannot be deployed.
The LLM identified 2 files worth highlighting for reuse:
This PowerShell script parses CHAPS-generated Markdown reports, matches negative findings against a JSON knowledge base using pattern matching, and produces structured Markdown output with severity ordering, MITRE ATT&CK mappings, and recommendations. It's completely self-contained with no external dependencies, demonstrating skill in text parsing, JSON handling, and structured report generation. Another engineer could extract this pattern for analyzing any structured text report against a knowledge base.
The JSON structure for encoding security findings demonstrates a reusable pattern for security knowledge bases. Each finding includes matching patterns (for report parsing), severity classification, technical details, risk explanations, recommendations, MITRE ATT&CK mappings, and references. This structure allows for automated matching of assessment findings to remediation guidance and could be adapted for other security assessment tools.