Highlights
- Pro
AD-GPO
SharpGPOAbuse is a .NET application written in C# that can be used to take advantage of a user's edit rights on a Group Policy Object (GPO) in order to compromise the objects that are controlled by…
myADMonitor is an open-source Active Directory changes tracking tool
.Net Core Active Directory Lib. Trust by Lenovo, Sony, Tempursealy, BoostSolutions and other companies.
The standard Active Directory object picker dialog for .NET
A collection of PowerShell Cmdlets to assist with complicated configuration tasks within Group Policy.
Software deployment tool that uses Group Policy Preferences.
Create an unlinked Group Policy Object from an imported CSV file
A simple tool designed to help in generation of group policy template files
Group Policy Eater is a PowerShell module that aims to gather information about Group Policies but also allows fixing issues that you may find in them.
The GPOddity project, aiming at automating GPO attack vectors through NTLM relaying (and more).
Group Policy logging ADMX/ADML file for various GP troubleshooting logs
ScriptSentry finds misconfigured and dangerous logon scripts.
PowerShell script to monitor and automate GPO backups
Active Directory Group Policy analyzer
ADExplorerSnapshot.py is an AD Explorer snapshot parser. It is made as an ingestor for BloodHound, and also supports full-object dumping to NDJSON.
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
Root module for creating Tier Model / Delegation Model on Active Directory
The Invoke-TrimarcADChecks.ps1 PowerShell script is designed to gather data from a single domain AD forest based on our similar checks performed during Trimarc’s Active Directory Security Assessmen…
Provision a brand-new company with proper defaults in Windows, Offic365, and Azure
A collection of Windows software baseline notes with corresponding Windows Defender Application Control (WDAC) policies
Harden Windows with Windows Defender Application Control (WDAC)
Scripts and a short guide for using them to tier an Active Directory. Made for BSides Copenhagen 2024
A tiny tool built to find and fix common misconfigurations in Active Directory-integrated DNS
Active Directory password filter featuring breached password checking and custom complexity rules