← All work
SecurityAutomation

Turning security evidence collection into a repeatable workflow

A PowerShell-based system transformed a multi-hour, ten-step evidence-gathering process into an on-demand workflow.

Context
GeorgeJon
Period
2025–2026
Signal
~80 servers · hours → ~20 minutes

The friction

Minimum Security Baseline evidence collection was a repetitive, manual process across approximately 80 servers. It took several hours, involved at least ten manual steps, and had to be dependable enough to support service-level commitments.

The approach

I designed a PowerShell-based workflow from scratch using runner batch files, scripts, and controlled endpoint lists. AI-assisted design and documentation helped me explore the solution more quickly, but the workflow stayed reviewable, testable, and operated by people.

The result

The workflow gathered the required information in about 20 minutes. I documented the process in clear, reusable how-to guides and trained engineering teammates to run it when needed.

What I learned

Automation is only complete when another person can understand it, operate it, and recognize when it should stop.