TestimoX

ComputerX Overview

Edit on GitHub

ComputerX is a Windows system inventory and hardening toolkit for WMI, Registry, Services, Firewall, Defender, Patches, and Permissions.

ComputerX Overview

ComputerX is a Windows system inventory and configuration management toolkit. It provides a broad PowerShell and .NET surface for querying and configuring local and remote Windows systems without relying on WinRM or PowerShell remoting -- instead using direct WMI, registry, and native API calls.

What ComputerX Does

ComputerX collects system-level data from Windows machines and provides cmdlets to query, modify, and harden configurations. It is designed for domain controller assessment but works equally well on member servers and workstations.

Key capabilities:

  • System inventory -- OS info, hardware, disk, network adapters, installed applications, server features
  • Security configuration -- firewall profiles/rules/logging, Defender status, account policies, security options, user rights
  • Service management -- query, configure, and manage Windows services including permissions and recovery settings
  • Patch management -- installed updates, pending updates, patch summary, and security gap detection
  • Permission auditing -- file, registry, service, SMB share, and WMI namespace permissions with add/set/remove operations
  • Policy analysis -- ADMX policy parsing, LGPO management, audit policy configuration, RSOP results
  • Network and connectivity -- TCP connections, UDP endpoints, NTP configuration, RDP settings

Architecture

ComputerX is built as a .NET library with a PowerShell module layer. The library uses:

  • WMI/CIM for hardware and OS queries
  • Native Windows APIs for security policy, audit configuration, and service management
  • Registry for configuration reading and writing
  • Win32 Security for DACL/SACL operations on files, services, and registry keys

Use Cases

Domain Controller Hardening

Verify that DCs meet security baselines: firewall enabled, unnecessary services disabled, patches current, file permissions locked down.

Pre-Assessment Data Collection

ComputerX collects the system-level data that TestimoX domain controller-scoped rules consume. The data is collected once and reused across multiple rules.

Compliance Auditing

Export system configurations for comparison against CIS Benchmarks, DISA STIGs, and Microsoft Security Baselines.

Remediation

Many ComputerX cmdlets support Set-* operations for direct remediation: configure firewall rules, set registry values, adjust service permissions, and apply audit policies.

Integration with TestimoX

ComputerX powers the domain controller and computer-scoped rules in TestimoX. When the assessment engine needs to check NTP configuration, service status, firewall rules, or patch levels, it calls ComputerX functions behind the scenes.

Reference Routes

Use the guide pages in /docs/ for workflows and operational context. Use the generated API when you need the exhaustive cmdlet or type reference.

Next Steps