The problem to explore
What I want to understand.
Collect useful Windows endpoint information in a lightweight, repeatable way while keeping acquisition separate from analysis.
Planned approach
Where to start.
Start with a read-only PowerShell collector that outputs a defined JSON contract, then analyse and report on that data separately. Implementation has not started yet.
Next steps
From idea to experiment.
- Define the JSON contract and minimum dataset
- Build the first read-only collector
- Validate against test endpoints
- Design the analysis and reporting flow