Audit Machine

Execute a security audit over SSH on a single registered machine. The audit checks for configuration drift, hardening gaps, policy compliance, and other findings. Output is timestamped and appended to the machine's audit log.

When to use

• User wants to run a fresh security scan on a machine
• Periodic audit checkpoints before/after changes
• Compliance validation for a specific target

Inputs to gather

• Machine name (required; must be registered)
• Audit depth (optional; quick, full, or report-only; default full)
  • quick — fast checks only (10–30 seconds)
  • full — comprehensive scan (5–15 minutes)
  • report-only — regenerate markdown from the most recent raw data

Procedure