Day 19/90: Windows scripting with Python
Built recon scripts using Python's direct access to Windows internals:
- WMI service enumeration to catch unquoted paths and SYSTEM-level services
- winreg autorun key inspection across HKLM and HKCU hives
- win32evtlog Security log parsing for failed logon clustering
- subprocess PowerShell calls with ConvertTo-Json for structured output
All of it runs without installing agents on the target host.
