Skip to content

Latest commit

 

History

History
36 lines (28 loc) · 1.57 KB

README.md

File metadata and controls

36 lines (28 loc) · 1.57 KB

Hunt Weaker Cipher & Weaker Authentication Protocols using PowerShell

+ Get Lockout ,NTLM , RC4, AES , Domain Controllers Uptime & Last Patching Date.
+ The code is designed to work with WinRM and requires the Active Directory (AD) module.

Use-cases

  • Get the sources of AES
  • Get the sources of NTLM
  • Get the sources of RC4
  • Get the sources of Account Lockout
  • Get Domain Controllers Uptime
  • Get Domain Controllers last patching date

Note

The script runs on Domain Controllers & Domain Admin privilege is needed to run that.

Instructions

C:\> Install-Module -Name XDomainControllers-Events -RequiredVersion 1.3 -Force -Verbose -Repository PSGallery
C:\> Import-Module XDomainControllers-Events -Verbose
C:\> Get-Command -Module XDomainControllers-Events

CommandType     Name                                               Version    Source
-----------     ----                                               -------    ------
Function        Get-XhuntAES                                       1.3        XDomainControllers-Events
Function        Get-XhuntLockout                                   1.3        XDomainControllers-Events
Function        Get-XhuntNtlm                                      1.3        XDomainControllers-Events
Function        Get-XhuntRC4                                       1.3        XDomainControllers-Events
Function        Get-XhuntUptime                                    1.3        XDomainControllers-Events
Function        Get-XhuntWUdate                                    1.3        XDomainControllers-Events