pingcastle
pingcastle copied to clipboard
PingCastle - Get Active Directory Security at 80% in 20% of the time
For changing the password of the azureadssoacc computeraccount the pingcastle links to a github page of microsoft is currently displaying a 404 error : This is the link from the...
Pingcastle produces many false positives if it can reach a DC via LDAP or ADWS but not SMB to download the GPOs. This is not visible in the report, the...
### Summary We are planning to upgrade the project from **.NET Framework 4.5.2** (which reached its end of life on April 16th 2022) to **.NET Framework 4.7.2**. To ensure compatibility...
In the line https://github.com/netwrix/pingcastle/blob/2d9ab43ba1f4343f5daa983a840a7de08bf28378/Healthcheck/HealthcheckAnalyzer.cs#L6056 , there is a typo in the word "objectclas". There is an s missing. This causes the LDAP query to not return any accounts and the...
Hello, Recently I have deleted an account from our AD. It also removed from the AD trashbin. But I have written down the SID, just in case. Now when I...
For testing purposes I have created DNS zones with replication scopes of Domain, Forest and Legacy. Running PingCastle 3.3.0.1 will only output zones with a scope of Domain and Legacy,...
AdminSDHolder permissions are applied every 60 minutes to numerous protected groups in the domain. If the AdminSDHolder permissions are misconfigured, they will continually apply the same vulnerabilities to Domain Admins...
As far as I understand the goal of the share scanner is to find the interesting shares that have been overprivileged. I find myself often trying to filter out various...
hello, `PingCastle.exe --export-rules` writes the Azure AD rules to the PingCastleRules.xml but `PingCastle.exe --rules` doesn't write it to ad_hc_rules_list.html Missing rules as of 3.3.0.1: ``` ADConnectVersion ADConnectVersion1 GuestUserAccessRestriction1 GuestUserAccessRestriction2 UserConsentCompanyData...
In HTML report's "Operating Systems" section, please provide a list of DN's of computer objects with obsolete (EOL) OSes found, in "Nb Enabled" and "Nb Active" fields, by making it...