ADRecon

🙃 bleepingcomputer.com/news/security/…

💢Active Directory: Advanced Threat Hunting - In-depth investigation and analysis of the Active Directory with ADRecon!💢 @Microsoft @github @MITREattack @msftsecurity @prashant3535 @ad_recon #Microsoft #ActiveDirectory #MITREATT&CK #mvpbuzz 👇👇👇👇 github.com/tomwechsler/Ac…

Nothing like patching AMSI to run soem ADRecon on a monday evening. Ciao Carbon Black :P Thx @prashant3535 and @ShitSecure

If you like ADRecon and AzureADRecon 💖, you can now sponsor @prashant3535 via GitHub: github.com/adrecon/ADRecon github.com/adrecon/AzureA… github.com/sponsors/prash…

😀 microsoft.com/security/blog/…

Added support for Excel generation via PowerShell Core 7 on Windows github.com/adrecon/ADReco…

Password Policy module updated with PCI DSS v4.0, ISM 2022 and CIS 2022 github.com/adrecon/ADReco…

Added OnlyEnabled parameter to restrict collection for enabled users and computers github.com/adrecon/ADReco…

Added TenantID Parameter to AzureADRecon .. useful when the user is part of multiple tenants and wants to scan the non-default ones. Thanks @0xshyam for the pull request. github.com/adrecon/AzureA…

@davemhall3 Can you please elaborate ?

@ad_recon Is it possible to run ADRecon.PS1 without performing ldap bind to a DC which doesn't require it?

AzureADRecon v0.1 released. github.com/adrecon/AzureA…

Thanks @shutingrz for Adding Encoding option in Export-Csv so you don’t get garbled characters in countries that use multibyte characters github.com/adrecon/ADReco…

ADRecon v1.23 released. Added support for #AzureAD and bug fixes. AzureAD modules: - Tenant - DirectoryRoles - Domain - Users - Groups github.com/adrecon/ADRecon

Sneak Preview of #AzureAD support in ADRecon #WorkinProgress

ADRecon v1.22 released. Added foreignSecurityPrincipal and trust accounts to GroupMembers module, HasSPN to Users module, Fixed ForestDNSZones enumeration in DNSZones module and bug fixes. github.com/adrecon/adrecon

Added Schema History module. "This is particularly handy when it comes time to extend the schema for a domain upgrade or Exchange implementation. Find out if and when third-party extensions have been applied." github.com/adrecon/ADReco… blogs.technet.microsoft.com/heyscriptinggu…

Added Group Membership Changes module. github.com/adrecon/ADReco…

Added some new attributes to the Users, Computers and Domain module and PCI, ISM and CIS recommendations to the Password Policy module. github.com/sense-of-secur…

.@mubix talking about LDAP WAT (Windows Attack Toolkit) @kiwicon