Thorsten E.
@endi24
Followers
3,849
Following
5,242
Media
283
Statuses
22,066
Citrix, Windows Administrator, AppV, Automation, EUC, Application Packaging, Security, Virtualization, PowerShell
Deutschland
Joined September 2009
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
SEVENTEEN
• 1224152 Tweets
Taylor
• 216490 Tweets
Carat
• 77116 Tweets
FELIP TAKES ON BBPHSTAGE
• 67873 Tweets
#TimnasDay
• 64460 Tweets
オーストラリア
• 60151 Tweets
#サッカー日本代表
• 45425 Tweets
#バナナサンド
• 35695 Tweets
オウンゴール
• 27773 Tweets
最終予選
• 25815 Tweets
ミンギュ
• 25205 Tweets
金木犀の香り
• 23376 Tweets
OHM FOR DEVY
• 21490 Tweets
Zaplana
• 20816 Tweets
うさぎだらけくじ
• 18719 Tweets
ジョシュア
• 18686 Tweets
ドギョム
• 17891 Tweets
スングァン
• 17857 Tweets
كوريا
• 15355 Tweets
Asnawi
• 14631 Tweets
Kamran Ghulam
• 14251 Tweets
Witan
• 13654 Tweets
Shayne
• 13587 Tweets
نعيم قاسم
• 12397 Tweets
#daihyo
• 12124 Tweets
中村敬斗
• 11602 Tweets
Last Seen Profiles
Pinned Tweet
Refresh AD Groups Membership without Reboot/Logoff
Purge the computer account kerberos tickets with:
klist -lh 0 -li 0x3e7 purge
Reload User Groups Membership without Logging Off with:
klist purge
Details:
7
84
346
The only PowerShell Command you will ever need to find out who did what in Active Directory
by
@PrzemyslawKlys
2
115
412
awesome-windows-domain-hardening
A curated list of awesome Security Hardening techniques for Windows.
7
134
410
Office-365-Extractor:
The Office 365 Extractor is a tool that allows for complete and reliable extraction of the Unified Audit Log (UAL)
1
105
353
CrowdStrike broke Debian and Rocky Linux months ago, but no one noticed - Neowin
19
112
336
A PowerShell script to create an HTML report on recent changes in Active Directory.
3
85
324
Windows Hardening Commands
1
93
298
Active Directory Hardening Series - Part 5 – Enforcing LDAP Channel Binding - Microsoft Community Hub
0
73
295
Attack Surface Analyzer
can help you analyze your operating system's security configuration for changes during software installation.
3
82
296
Finding Forensic Goodness In Obscure Windows Event Logs - List of lesser-known Event IDs.
by Nasreddine Bencherchali
@nas_bench
4
109
286
POWERSHELL – EVERYTHING YOU WANTED TO KNOW ABOUT EVENT LOGS AND THEN SOME
4
83
288
365Inspect
A PowerShell script that automates the security assessment of Microsoft Office 365 environments.
1
83
276
vulnerable-AD-plus:
Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab
0
70
265
The Test-PasswordQuality cmdlet is a simple tool for Active Directory password auditing. It can detect weak, duplicate, default, non-expiring or empty passwords and find accounts that are violating security best practices.
3
87
258
Mega Collection of PowerShell Scripts
It includes 500+ useful cross-platform PowerShell scripts located in the 📂Scripts subfolder ...
0
84
254
Active Directory Hardening Series - Part 1 – Disabling NTLMv1 - Microsoft Community Hub
1
79
256
A collection of Windows Server 2019 and Windows 10 hardening scripts by Atlant Security
( )
0
80
246
PowerShell Scripts to Force Password Change for All Users After a Security Incident - Specops Software
1
69
244
Active-Directory-Exploitation-Cheat-Sheet
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.
0
74
238
Active Directory - How to track down why and where the user account was locked out
by
@PrzemyslawKlys
2
74
236
Amazing PowerShell One-Liners for System Administrators
4
70
231
CISA Microsoft 365 Secure Configuration Baselines
MS AZURE ACTIVE DIRECTORY
Secure Cloud Business Applications
Minimum Viable
Secure Configuration Baselines
2
71
212
Active Directory Security Risk
#101
: Kerberos Unconstrained Delegation (or How Compromise of a Single Server Can Compromise the Domain)
0
60
212
Using Process Monitor to Solve a Slow Boot Problems | Windows OS Hub
1
71
206
Disable (hide) OneDrive Personal from Windows Explorer navigation pane
Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}]
@="OneDrive"
"System.IsPinnedToNameSpaceTree"=dword:00000000
3
44
205
Group Policy: The Ultimate Guide - Active Directory Pro
3
58
206
Windows Server Hardening with PowerShell DSC – NVISO Labs
2
56
205
Active Directory hardening checklist & (actionable) best practices
0
56
206
How To Harden Active Directory To Prevent Cyber Attacks
Offensive Security Blog - SecurIT360
1
48
193
Harden Windows Security
Harden Windows Safely, Securely, only with Official Microsoft methods
0
61
189
Documenting all GPOs with PowerShell
5
32
189
active-directory-security
The "Monash Enterprise Access Model" (MEAM) is a model for tiering Active Directory that builds heavily on the Microsoft Enterprise Access Model.
0
45
185
Group Policy Guide for Baseline Hardening
1
48
183
Common Azure AD/Microsoft 365 (M365) Security Misconfigurations
2
46
177
Windows-Super-God-Mode
Creates shortcuts to virtually every special location or action built into Windows
1
50
176
Active Directory Hardening Series - Part 3 – Enforcing LDAP Signing - Microsoft Community Hub
1
58
174
The complete guide to RDP with Security Keys | by Jonas Markström | Medium
2
48
174
The Event Aggregator script by the great
@guyrleech
is amazing to search for eventlogs!
I used it today and identified my Problem VERY FAST
Get all events from all event logs in a given time window and output to grid view or csv
This Guy is great !!!
1
42
173
SMB security hardening in Windows Server 2025 & Windows 11 - Microsoft Community Hub
1
58
174
A Deep Dive Into Windows Scheduled Tasks and The Processes Running Them
by Nasreddine Bencherchali
0
60
167
NTLM v1 and NTLM v2 vs Kerberos authentication
0
50
169
Custom ADMX template focused on hardening Windows systems by
@Harvesterify
The available settings are listed in separate Markdown tables, in french
and in english
#GPO
1
57
162
Windows 11, v 22H2 & 23H2
The Copilot in Windows icon will appear on the right side of the system tray on the taskbar.
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
ShowCopilotButton
DWORD
1 to activate icon
0 to disable icon
1
43
158
ServerHardening_DSC:
CIS & Azure Security Center Hardening recommendations implemented in PowerShell DSC from Azure Automation
3
47
159
Securing Domain Controllers to Improve Active Directory Security
1
44
156
Win11Debloat - direct link to some nice regfiles to remove some of the Windows 10 & 11 bloat:
Updated - Win11Debloat is a free PowerShell script that can remove some of the Windows 10 & 11 bloat.
#windows10
#windows11
#windowstweaks
0
15
43
3
50
151
monkey365
Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.
2
47
151
Active Directory Secrets: The Essential Guide to FSMO Roles and Transfers | by Vishal Raj | Jun, 2024 | System Weakness
1
43
148
This vulnerability not only affects users of PuTTY but also extends to several other tools...
Affected Products
- PuTTY 0.68 - 0.80
- FileZilla 3.24.1 - 3.66.5
- WinSCP 5.9.5 - 6.3.2
- TortoiseGit 2.4.0.2 - 2.15.0
- TortoiseSVN 1.10.0 - 1.14.6
CVE-2024-31497: Critical PuTTY Vulnerability Exposes Private Keys
7
196
480
1
71
146
To use the Sysinternals tools online, you can map a network drive to the Sysinternals Live website. The Sysinternals Live website provides a list of all the tools available in the /tools directory
net use <drive letter>:
1
39
146
Active Directory Hardening Series - Part 2 – Removing SMBv1 - Microsoft Community Hub
0
37
144
Securing Domain Controllers Against Attack
1
42
142
Microsoft Account Lockout Tool:
Lockout Status and Management Tools
0
38
142
WELA (Windows Event Log Analyzer)
by
@yamatosecurity
The Swiss Army knife for Windows Event Logs
0
40
135
Implementing Least-Privilege Administrative Models
1
26
138
awesome-event-ids
Collection of Event ID ressources useful for Digital Forensics and Incident Response
0
52
138
WinClean
Windows optimization and debloating utility.
Features:
- Run 37 Batch, PowerShell, and Registry Editor scripts directly from the GUI.
- Add custom scripts to further clean the system.
3
33
133
Securing Active Directory:
Performing an Active Directory Security Review
0
33
137
Powershell script that performs a windows cleanup by removing volume caches, update backups, update and CCM caches.
1
41
136
NtdsAudit:
An Active Directory audit utility
NtdsAudit is an application to assist in auditing Active Directory databases.
It provides some useful statistics relating to accounts and passwords, as shown in the following example.
0
32
137
Create a free lab for Microsoft 365 and Intune – 4sysops
0
31
133
Lateral Movement
Windows and Active Directory
0
32
133
Active Directory Domain Security Technical Implementation Guide
1
38
135
Visually display Active Directory Nested Group Membership using PowerShell
by
@PrzemyslawKlys
2
41
133
The following table lists events that you should monitor in your environment, according to the recommendations provided in Monitoring Active Directory for Signs of Compromise.
Appendix L - Events to Monitor
1
47
129
PowerShell one-liner that checks for Windows updates that are not hidden and not installed:
(New-Object -ComObject Microsoft.Update.Session).CreateupdateSearcher().Search(“IsHidden=0 and IsInstalled=0”).Updates | Select-Object Title
0
26
131
Harden AD (SecureAD)
Script is intended to assist you in setting-up a hardened directory, based on a strategy derivated from the Microsoft's red-forest model (known as ESEA)
🔥🔥
How to achieve a Score of 0/100 in
#PingCastle
2
39
130
💻The guide to Visual Studio
@code
shortcuts, higher productivity and 30 of my favourite shortcuts you need to learn - DEV Community
1
24
129
Active-Directory-Delegation-Powershell-Wizard
This PS-script is used to assign permissions in Active Directory based on predefined templates. It enables administrators to configure specific rights and properties for user, group, computer and OU objects
1
35
128
Implementing Controls in Active Directory: Protecting Against Privileged Credential Sprawl
0
41
130
PowerShell: How to ping multiple Computers at once
0
35
128
Protecting RDP passwords from Mimikatz with Remote Credential Guard - Devolutions Blog
by
@awakecoding
0
38
128
Using PowerShell to Export GPOs for Fancy GPO Report
0
38
128
Top 20 Best FREE Active Directory Reporting Tools (AD Tools in 2023)
2 more Active Directory security audit Tools:
PingCastle vs Purple Knight — Active Directory Security
(1/x)
3
32
125
Microsoft recommended block rules - List of applications or files that can be used by an attacker to circumvent application whitelisting policies
3
31
125
Active Directory Back to Basics - Sysvol
0
19
124
Find the source of AD account lockouts
0
27
122
Windows RDP Event Logs: Part-2
0
31
152
Windows RDP Event Logs: Part-1
0
43
139
Microsoft Vulnerabilities Report 2020
- Removing admin rights would mitigate 77% of all Critical Microsoft vulnerabilities in 2019.
- 100% of Critical vulnerabilities in Internet Explorer & MS Edge would have been mitigated by removing admin rights.
3
51
119
Endpoint Isolation with the Windows Firewall | by Dane Stuckey | Medium
0
39
119
Want to learn all the neat tricks u can do with PSAppDeployToolkit?
Demo by Kevin Geer!
#PowerShell
#SCCM
#Intune
Unleashing PSADT:
Mastering Application Deployment Excellence with Kevin Greer
1
33
117
» Beyond Domain Admins – Domain Controller & AD Administration » Active Directory Security
1
35
117
The ultimate Entra ID (Azure AD) / Microsoft 365 hacking and admin toolkit
1
34
118
Locksmith
A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.
0
28
118
Securing Built-In Administrator Accounts in Active Directory
0
34
116
Windows Server Advanced Auditing Policies - Microsoft Community Hub
1
25
114
How to Disable NTLM Authentication in Windows Domain
0
22
115
Windows & Active Directory Exploitation Cheat Sheet and Command Reference
1
48
113
Old but gold
Azure Privilege Escalation via Service Principal Abuse
0
29
111
Tracking Down User Logons with PowerShell and XPath
1
34
109
Great Active Directory Hardening PDF!
Translate a PDF file using Google Translate
for free
1. In Google Translate, click on the Document button.
2. Click on the Browse your computer button. Select and open your file to upload it.
L’
#ANSSI
vient de publier un guide formidable sur la sécurisation de l’administration de l’
#activedirectory
portant notamment sur le tiering. Un must-read. Bravo pour ce boulot 👏
0
6
30
2
25
109
WINDOWS SECURITY EVENT LOG BEST PRACTICES
0
27
105