HardeningKitty and a Windows hardening checklist that audit and apply CIS, STIG, BSI and Microsoft security baselines via PowerShell.