Quick Start
This guide walks you through installing TestimoX and running your first AD security assessment.
Prerequisites
- Windows 10/11 or Windows Server 2016+
- .NET 8 runtime or later
- Domain user account for most rules, with elevated rights only when you need DC-scoped checks
Step 1: Install TestimoX
The fastest way to get started is with the CLI. Download the latest package from the GitHub releases page , then extract it to a folder on your PATH.
# After downloading the latest CLI package from GitHub Releases
Expand-Archive "$HOME\Downloads\TestimoX.zip" -DestinationPath "C:\Tools\TestimoX" -Force
# Verify installation
C:\Tools\TestimoX\TestimoX.exe --versionAlternatively, install the PowerShell module:
Install-Module -Name TestimoX -Scope CurrentUserStep 2: Run a Basic Assessment
Run the interactive assessment flow:
# CLI: interactive mode
TestimoX.exe
# PowerShell: run the default assessment flow
Invoke-TestimoXFor a safe first run, use the baseline mode that skips domain controller-scoped rules:
# CLI
TestimoX.exe --baseline
# PowerShell
Invoke-TestimoX -BaselineStep 3: Run Specific Rules
Target explicit rules by name when you want a narrower run:
# CLI: inspect available rules first
TestimoX.exe --list-rules
# CLI: run a specific set of rules
TestimoX.exe --rules ForestRecycleBinAndLifetimes,DomainPasswordPolicy
# PowerShell: run specific rules by name
Invoke-TestimoX -IncludeRules 'ForestRecycleBinAndLifetimes','DomainPasswordPolicy'
# PowerShell: run typed C# rules with IntelliSense
$rule = [TestimoX.Definitions.CSharpRule]
Invoke-TestimoX -IncludeCSharpRules $rule::ForestPkiConfigurationStep 4: View the Report
TestimoX can generate HTML, JSON, and other exports. HTML reports are saved to a Reports folder by default, and you can override the path when needed.
# CLI: custom HTML and JSON paths
TestimoX.exe --all --html-path "C:\Reports\TestimoX.html" --json "C:\Reports\TestimoX.json"
# PowerShell
Invoke-TestimoX -HtmlReportPath "C:\Reports\TestimoX.html"Next Steps
- Installation - Review deployment options for CLI, PowerShell, and the monitoring service
- Configuration - Customize rule selection, profiles, output, and store settings
- Rules & Scoring - Understand the rule framework and author custom rules
- Reports - Learn about report formats and customization