Hello All, I hope you all are doing fine. I need to assess a company infrastructure for security loop holes and bad practices and I need the following: 1- Any tools/techniques/strategies/documentation that I can follow to assess a company's security infracture from Microsoft products? 2- I need to provide roadmap to the client with respect to security as well as in general for Microsoft products, so any resource that I can utilize for doing so? Thanks in advance.

1- What about Microsoft Baseline Secruity Analyzer? 2- What about Microsoft Security Assessment Tool?