10. Enumerating Security Controls

Get Defender Status

Get-MpComputerStatus

Get Applied AppLocker Policy

Get-AppLockerPolicy -Effective | select -ExpandProperty RuleCollections

Check PowerShell Constrained Language Mode

$ExecutionContext.SessionState.LanguageMode

Find LAPS Delegated Groups

Find-LAPSDelegatedGroups

Find AD Objects with LAPS Extended Rights

Find-AdmPwdExtendedRights

Get LAPS-Managed Computers

Get-LAPSComputers

Enumerate BitLocker Status

Get-BitLockerVolume

Check Windows Firewall Status

Get-NetFirewallProfile

List Installed Windows Security Updates

Get-HotFix

Check If Secure Boot Is Enabled

Confirm-SecureBootUEFI

LAPS