Automation & ToolingScripts & Templates

Detecting Kerberoasting with PowerShell and logs

November 14, 2025
Detecting Kerberoasting with PowerShell and Logs Kerberoasting is an Active Directory attack technique where an attacker requests Kerberos service tickets (TGS) for accounts that have Service Principal Names (SPNs), then cracks the ticket offline to recover the service account password. Because it uses legitimate Kerberos flows, the key to detection is understanding what…
Read more
AD Domain ServicesDirectory Objects & Identity Data

Automate OU cleanup in AD with PowerShell (Expert Guide)

September 29, 2025
Automating OU cleanup in Active Directory with PowerShell: the expert’s comparison guide Active Directory · PowerShell automation Automating OU cleanup in Active Directory with PowerShell: the expert’s comparison guide A practical, production-oriented approach to discover, stage, delete, and prune—safely. Short definition for snippets: Automating OU cleanup means discovering…
Read more
GPO FundamentalsGroup Policy & Endpoint Policy

Automating inactive user account cleanup: beyond “run a script every 90 days”

September 19, 2025
A production-grade playbook for hybrid Active Directory and Microsoft Entra ID (Azure AD) inactive user account cleanup: signals, staged actions, reversibility, and governance—backed by copy‑paste runbooks. On this page Quick definition Why the usual approach breaks First principles Production-ready technical core Implications & trade-offs Expert mental models Misunderstandings &amp…
Read more
Microsoft Entra IDTenant & Directory Administration

How to automate Azure AD tasks with PowerShell

June 1, 2024
In the cloud-based world, managing Azure Active Directory (AD) is essential. However, manual management of users, groups, and access can be time-consuming. This is where PowerShell Automation comes to the rescue. This guide explores how PowerShell can be leveraged by IT professionals to streamline Azure AD tasks, such as automating user account, group, and permission administration. PowerShell…
Read more
Microsoft Entra IDTenant & Directory Administration

Master Azure AD automation with Microsoft Graph PowerShell

April 11, 2024
For Active Directory (AD) administrators, using native AD tools for recurring tasks can be time-consuming. PowerShell is a scripting language built into Windows, that can tackle this issue by automating repetitive tasks. While Azure AD PowerShell has been a reliable tool for managing Azure AD, there is now a need for a shift towards Microsoft Graph PowerShell. This article provides a brief intro…
Read more
Automation & ToolingPowerShell for AD DS

How to install the PowerShell Active Directory module

July 19, 2022
The Active Directory PowerShell module is part of the Remote Server Administration Tools (RSAT) in all Windows Operating Systems.It is a set of PowerShell cmdlets that imparts flexibility in managing Active Directory. While AD management is possible using the native GUI-based tools like Active Directory Users and Computers console, installing the Windows Active Directory PowerShell Module…
Read more
Automation & ToolingPowerShell for AD DS

Active Directory Object permissions: Step-by-Step guide to managing permissions using GPOs, ADUC, and PowerShell

March 2, 2021
Active Directory Permissions Explained  Users in an Active Directory (AD) network can gain access to resources of the network, whether they are files and folders, or computers and printers. However, not all users need access to all the resources of the network. This is where AD permissions come into play. AD permissions ensure that users of an AD network only gain access to resources that…
Read more