Find risky permissions in Active Directory.
What it does
Identifies dangerous Active Directory permissions held by non-administrative principals and produces a JSON report with attack paths and remediation advice.
When to use it
Use during incident investigations, detection-rule development, threat hunting, or validation of security monitoring coverage for Active Directory ACL abuse.
How to use it
Give it a Domain Controller IP address, domain name, username, and password; it returns a JSON report of dangerous permissions.
What you provide
- Domain Controller IP address
- AD domain name
- domain username
- domain user password
Uses
AD
Latest review
What you need · 4
Requires Python 3.9 or later.
Requires the ldap3 Python library.
Requires a domain user account with read access to Active Directory objects.
Access · 1
This skill
Active Directory
Read
Reads Active Directory permissions