GRC-Tech
Automation, evidence engineering, guardrails, and audit-defensible control patterns.
Email Header Analyzer
email_header_analyzer.py analyzes a saved email header text file and prints a quick triage report (SPF/DKIM signals, DMARC publication status, TLS hints, and a basic From vs Return-Path alignment check). It’s…
Active
File Hash MD5
generate_md5_hash.py computes the MD5 hash for a chosen file and writes the hash plus validation instructions to text outputs. It’s a practical integrity receipt for routine file sharing.
Active
Net Monitor
netmon.py captures local active network connections, enriches them with process context where available, prints a live view, and appends results to a CSV for lightweight evidence capture and troubleshooting.
Active
SSL Cert Check
SSLcert.py retrieves and displays SSL/TLS certificate metadata (subject/issuer/SAN/expiry) for a hostname. It is intentionally inspection-only and does not claim to enumerate supported TLS versions/ciphers.
Active
AWS-01 · Root Account MFA
Verify MFA is enabled on the AWS root account. CIS AWS 1.4. Produces PASS/FAIL evidence with JSON artifact.
Active · CIS · NIST · SOX
AWS-02 · Root Access Keys
Detect access keys on the AWS root account. CIS AWS 1.12. Root keys are an unconditional finding.
Active · CIS · PCI DSS · DORA
AWS-03 · IAM Password Policy
Audit the IAM account password policy against 7 CIS sub-checks. CIS AWS 1.8–1.11.
Active · CIS · PCI DSS · HIPAA
AWS-04 · Inactive IAM Users
Identify IAM users inactive for 90+ days. CIS AWS 1.15. Outputs a dated CSV of stale accounts.
Active · CIS · ISO 27001 · SOX
AWS-05 · MFA — Console Users
Verify MFA is assigned to every IAM user with console access. CIS AWS 1.10.
Active · CIS · FFIEC · DORA
Feedback welcome: Corrections, ideas, and requests — grcguy@rtapulse.com.
Request an addition