Systematic assessment of the security posture of Windows operating systems, through analysis of configurations, group policies, patch management, access controls, hardening, and compliance with security baselines such as CIS Benchmarks or STIGs. Includes assessment of Active Directory, exposed services, user privileges, and the overall attack surface of the Windows infrastructure.