This repository is for PowerShell script(s) which can be used to prepare Entra ID test tenants for testing operational and recovery scenarios. The code in this repo will provide capabilities to eas…

This script will search an Azure AD tenant which has Azure AD Premium licensing and AAD Auditing enabled using GraphApi for audit results for a specified period till current time. At least one user…

This script queries the local computer's Kerberos ticket caches for TGTs and service tickets which have do not match the default domain duration for renewal. This script is not certain to point out…

This PowerShell script checks the local Windows computers registry to see what is configured for cipher and Schannel (TLS)use.

This PowerShell script checks local servers (member and DCs) for NTLM performance bottlenecks (aka MaxConcurrentAPI issues) and provides a report.

What Active Directory trusts are present in an environment and how they are configured is one of those things which isn’t important until everything depends on it. This script will query Active Dir…

This PowerShell script can be used to run another PowerShell script using a specific identity in Windows.

This script accepts a parameter of a Kerberos ServicePrincipalName string and searches the local forest for that string using the DirectorySearcher .Net namespace.

This script finds all groups a specific principal is a member of. It includes all groups scopes and SIDHistory memberships as well.

Microsoft and others have deprecated the use of certificates which have SHA1 signatures (http://aka.ms/sha1). This PowerShell script makes it easy determine if a certificate was signed with SHA1 an…

This script will parse an ADFS Security event log file (EVTX) and search for audit events related to a specific user or other criteria. The script will work for the each ADFS login instance for a g…

There are scenarios where it’s helpful to turn on file object auditing of the certificate store on a computer for a user. This script can be used to set the file objects for certificates for auditi…

This PowerShell script can be used to easily and in an automated way turn on ADFS tracing and collect only the data which was taken during the problem reproduction-therefore saving hours of time fo…

A PowerShell script which willl do Active Directory searches for a specified objects attribute values and AD replication metadata without needing PowerShell modules or other dependencies.

A PowerShell scripted solution for doing validity checks (aka chaining) of certificates on Windows hosts.