Chad Cox chadmcox
chadmcox
/ usefulWindowsAdminPSCmds.ps1
Created
April 7, 2020 18:28
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #has a group policy change occured recently | |
| Get-WinEvent -FilterHashTable @{LogName="Microsoft-Windows-GroupPolicy/Operational";id=4016} | Select ` | |
| Machinename, TimeCreated, ID, @{n= "Message";e={($_.Message -Replace “`r`n|`r|`n”,” ”).Trim()}} | |
chadmcox
/ findSneakyADServiceAccounts.ps1
Last active
August 29, 2024 16:27
This powershell script will assist in finding accounts that would make great targets for Kerberoasting. This script will also assist in validating spn's defined on user objects.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #Requires -Module activedirectory | |
| #Requires -version 4.0 | |
| <#PSScriptInfo | |
| .VERSION 1.5 | |
| .GUID 31adb560-b189-4b0c-86a7-7862d8e78094 | |
| .AUTHOR Chad.Cox@microsoft.com | |
| https://blogs.technet.microsoft.com/chadcox/ | |
| https://github.com/chadmcox |