davidprowe/AD_Sec_Tools

Stars
100
Rank 340,703 (Top 7 %)
Language
PowerShell
License
MIT License
Created over 5 years ago
Updated over 5 years ago

davidprowe/AD_Sec_Tools

davidprowe

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Create-Tiers in AD

Project Title Active Directory Auto Deployment of Tiers in any environment

Getting Started This code is written in PowerShell and requires the AD commandlets to run. The current scripts in the repo: create a tiered structured in an active directory environment, create tiered groups with very granular permissions on the domain and create ACL permissions on the OUs based on the name of the group.

Prerequisites ADDS Active directory powershell modules

Installing PLACEHOLDER FOR instructions.
AD_Computer_CachedCreds - script description and instructions AD_GetACL_on_OBJECTS - scripts descriptions and reading instructions AD_LAPS_INSTALL - script - run as schema admin, and import GPO as found in pictures in the presentation folder. CREATE TIERS - subfolder contains additional instructions

To learn more about Microsoft tiers, please start with: https://social.technet.microsoft.com/wiki/contents/articles/37509.active-directory-red-forest-design-aka-enhanced-security-administrative-environment-esae.aspx

Authors David Rowe - @customes See also the list of contributors who participated in this project.

License This project is licensed under the MIT License - see the LICENSE.md file for details

Acknowledgments Microsoft technet scripts and gpos used. Much appreciation.

BadBlood

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

AWS_PowerTools

AWS Powershell scripts to make management of AWS accounts easier

bloodhound_docker_demo

A docker cluster that deploys Bloodhound and Neo4j by @davidprowe. This deploys the active directory tool Bloodhound into a container on any operating system with docker-compose

XenApp-Profile-and-ADUC-Cleaner

Xenapp Profile and Active directory user cleaning script. Logs off user, closes connections to profile shares, removes old profile shares for the user, fixes common AD issues with the users.

Xenapp-Perform-Action-on-User-Disconnect

This script can run a separate process or perform any action if a user session goes into a disconnected state. Useful for application such as Epic's Hyperspace to secure the machine, where you dont want to use CCOW authentication. You can edit this to launch exes or additional scripts upon disconnected state.

TerraPower

Powershell modules for creating and editing AWS deployments with terraform.

XenApp-Self-Logoff

Log off a hung or hanged citrix xenapp session. THis is a self service tool that users can launch to log themselves out of a hung session. Publish this application to a set of administrative task server and it will log the user out of the specific application if user enters their username as confirmation.