Study and Implementation of Security Audit Tools

Since its beginnings in the 1950s, IT has never stopped evolving. Technological advances - exponential increase in computing capacities, miniaturisation of components and reduction of electrical consumption - and in parallel the evolution of software - from the command line to voice assistants via graphic interfaces - have enabled the dissemination to large-scale computers. These technological transformations and this evolution in use have profoundly modified the economic and social structure of modern societies. Formerly reserved for insiders, computing is now present in many aspects of our everyday life. Today, IT security and the protection of sensitive data, long ignored, have become essential requirements for businesses. Ensuring the security of services and the protection of customer data is essential for the Orange group and its subsidiaries. This is the reason why Orange has several security departments. Among them is the Risque Audit Conformit´e (RAC) one, attached to Direction Technique des R´eseaux et Services (DTRS), which tries to provide an answer to security problems. I did my internship with this team. My main tasks were to study the potential of certain audit tools for possible use by security team members. I then worked on the organisation of security on Windows server machines(2016 ) to help security auditors improve their skills on the subject. Then I worked on the hardening of Linux systems through my developments on various internal tools.