VunFisher Target Setup Assistant 0.3.0 - PILOT

What it does
  Prepares a Windows computer (the TARGET) so VunFisher on another computer (the SCANNER)
  can run a credentialed scan of it. It never asks for, shows or stores a password.

Quick start (on the TARGET computer)
  1. Right-click the ZIP > Extract All. Open the extracted folder.
  2. Double-click Start-Assistant.cmd and approve the Windows administrator prompt.
     (Optional: INSTALL.cmd copies the assistant to your profile and adds a desktop shortcut.)
  3. Follow the steps on the left of the window:
       Welcome                 what you need before you start
       1 Check this computer   reads settings only; shows STOP lines if something must be fixed
       2 Scanner and account   the scanner's IPv4 address and the Windows scan account
       3 Preview the changes   exactly what would change; nothing changes yet
       4 Apply the changes     after you approve; a checkpoint is saved for Undo
       5 Connect VunFisher     on the scanner: create the credential profile, test it, scan
  4. When the assessment is over, open step 4 and use Undo with the checkpoint folder.

Credentials
  Type the scan account's password only in VunFisher on the scanner (Credentials > Windows WinRM).
  Never put passwords in scripts, files or deployment packages.

Scope and limits
  Windows PowerShell 5.1 x64; Windows 10/11 Pro, Enterprise or Education (not Home);
  private LAN or VPN; Domain or Private network profile. Domain controllers, Public networks,
  policy-managed WinRM and WinRM HTTPS are outside this pilot: the assistant stops and says so.
  Undo restores the access settings it captured but leaves the WinRM service enabled for IT review.
  The package is not Authenticode-signed; hashes in files.json detect changed files, not the publisher.
  The launcher uses a process-only execution-policy bypass and changes no persistent policy.

Validation status
  Checked: PowerShell syntax of every script (Windows release validation); scanner-address
  validation (engine unchanged from 0.2.2).
  NOT validated: real Apply/Undo on customer hardware, reboot persistence, AD/GPO or Intune rollout.
  Use Apply only on an authorized test computer until your organization has accepted it.

guide.html has the full training guide, domain (GPO) and Intune procedures, troubleshooting and rollback.

Website: https://txvf.tinkextra.com/overview/
Downloads: https://txvf.tinkextra.com/overview/downloads.html
