Assessment of vulnerabilities on Windows operating systems, including servers and workstations. Covers missing patches, weak configurations, excessive privileges, exposed services, registry vulnerabilities, and obsolete components. Uses automated scanners, Microsoft hardening baselines, and compliance checks for Active Directory environments and Windows infrastructures.