Skip to content
View Abbasi26's full-sized avatar

Achievements

Achievement: Pull Shark

Achievements

Achievement: Pull Shark

Block or report Abbasi26

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Content in all repositories owned by your account will be closed.
Maximum 250 characters. Please don’t include any personal information such as legal names or email addresses. Markdown is supported. This note will only be visible to you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
Abbasi26/README.md

Hi, I'm Wasaf 👋

I build small, read-only-by-default tools for the unglamorous parts of IT operations: endpoint state, certificates, patch priorities, runbooks, logs and AI-assisted coding.

Every tool below is MIT-licensed, ships an offline demo with fictional data that runs in under a minute, sends no telemetry, and writes plain HTML / Markdown / JSON / CSV reports.

Endpoint management (Intune / Entra ID / ConfigMgr)

Tool What it does Status
endpoint-quorum · PowerShell Finds devices that Intune, Entra ID and Defender for Endpoint disagree about. Read-only, Invoke-Quorum -Demo runs offline. release CI license
secure-app-factory · PowerShell Pinned, reproducible Win32 packaging for Intune: SHA-256 + signer pin, PSADT 4.1, .intunewin, CycloneDX SBOM, provenance. release CI license
logsieve · Python Puts ConfigMgr, Intune and Windows logs on one timeline, explains known error codes, and pseudonymises identifiers before sharing. release CI license

Security & compliance

Tool What it does Status
grundschutz-check · PowerShell Read-only Windows 11 checks against BSI IT-Grundschutz and Grundschutz++, with a cited evidence report. release CI license
certclock · Python Agentless certificate and CA expiry radar: TLS endpoints, files and internal CAs on one timeline, plus a CI gate. release CI license
patchorder · Python Which CVEs hit the versions you actually run, ranked with CISA KEV, EPSS and exposure. No scanning. release CI license

Operations & developer tooling

Tool What it does Status
runbook-rehearsal · Python Dry-runs runbooks and flags stale reviews, dead contacts, 404s, missing files and broken scripts, with a freshness score. release CI license
specfreeze · Python Ask design questions first, freeze the interface contract, reject LLM-generated code that drifts from it. release CI license

Principles

  • Read-only first. Anything that changes a system or sends data needs an explicit switch.
  • Evidence over claims. Reports cite their sources and mark what is unverified.
  • Privacy by default. Identifiers are pseudonymised or fingerprinted where reports might be shared.
  • Try before you trust. Each repo has a one-command offline demo.

Contributing

Issues, ideas and pull requests are welcome. Every repo has a ROADMAP.md with good first issues and issue forms.

Pinned Loading

  1. certclock certclock Public

    Agentless certificate expiry radar: TLS endpoints, cert files and internal CAs on one timeline, with ICS, Prometheus, Checkmk and a CI gate.

    Python

  2. endpoint-quorum endpoint-quorum Public

    Read-only PowerShell cross-check of Intune, Entra ID and Defender for Endpoint device state. Finds devices the three sources disagree about.

    PowerShell

  3. grundschutz-check grundschutz-check Public

    Read-only Windows 11 checks against BSI IT-Grundschutz and Grundschutz++, with a cited evidence report (HTML, Markdown, JSON, CSV).

    PowerShell

  4. patchorder patchorder Public

    Which CVEs hit the versions you actually run, and what to patch first: inventory to CPE, NVD ranges, CISA KEV, EPSS and exposure. No scanning.

    Python

  5. runbook-rehearsal runbook-rehearsal Public

    Dry-run your runbooks: finds stale reviews, dead contacts, broken URLs, missing files and script syntax errors, and scores each procedure.

    Python

  6. specfreeze specfreeze Public

    Ask design questions first, freeze the interface contract, then reject LLM-generated code that drifts from it. Offline demo, any OpenAI-compatible API.

    Python