Sudoers Audit Kit
A read-only Bash toolkit that maps every sudo privilege on a Linux host — who can run what, which NOPASSWD rules exist, which aliases resolve to root, and which include-files shadow the main sudoers. One Markdown report, zero writes. Finds the "we'll clean that up later" grants buried in /etc/sudoers.d/.
- ▸sudoers-audit.sh — The read-only Bash script. Run it, redirect to a file, hand the report to your auditor.
- ▸sudoers-audit-runbook.md — Explains every report section, what each finding means, and concrete remediation steps.
- ▸sample-output.md — A realistic annotated sample report so you know exactly what to expect before you run anything.
- ▸README.md — Prerequisites, 3-step quick start, and optional PDF render instructions.
## goes-well-with
From the same shelf
AI-Augmented IR Tabletop Exercise Kit
Run your first IR tabletop without hiring a red team.
ASTGL PowerCLI Automation Cookbook v1.0
14 production-ready PowerShell 7 scripts for vSphere admins — built for Broadcom VCF.PowerCLI, ships-to-vCenter ready.
MCP Server Setup Guide for Sysadmins
A hands-on guide for sysadmins and IT pros to deploy, configure, and secure local MCP servers — covering tool selection, auth patterns, network exposure controls, and integration with Claude Code and local LLMs.
## not-ready-to-buy
Take the field notes instead
One practical write-up a week from the same workbench these kits come from — plus reader pricing when new kits ship.