{"id":5427,"date":"2020-05-19T00:56:26","date_gmt":"2020-05-18T16:56:26","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5427"},"modified":"2020-05-19T01:09:04","modified_gmt":"2020-05-18T17:09:04","slug":"pingcastle-active-directory-security-assessment-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2020\/05\/pingcastle-active-directory-security-assessment-tool\/","title":{"rendered":"Pingcastle &#8211; Active Directory Security Assessment Tool"},"content":{"rendered":"<p>PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level with a methodology based on a risk assessment and maturity framework. It does not aim at a perfect evaluation but rather as an efficiency compromise.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/05\/Pingcastle-Active-Directory-Security-Assessment-Tool-640x436.png\" alt=\"Pingcastle - Active Directory Security Assessment Tool\" width=\"640\" height=\"436\" class=\"aligncenter size-medium wp-image-5451\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/05\/Pingcastle-Active-Directory-Security-Assessment-Tool-640x436.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/05\/Pingcastle-Active-Directory-Security-Assessment-Tool.png 1022w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>The risk level regarding Active Directory security has changed. Several vulnerabilities have been made popular with tools like <a href=\"https:\/\/www.darknet.org.uk\/2015\/07\/mimikatz-gather-windows-credentials\/\">mimikatz<\/a> or sites likes adsecurity.org.<\/p>\n<p>CMMI is a well known methodology from the Carnegie Mellon university to evaluate the maturity with a grade from 1 to 5, PingCastle has adapated CMMI to Active Directory security.<\/p>\n<p>The aim of the tool is to get you to 80% AD security in 20% of the time it would traditionally take.<\/p>\n<h2>PingCastle Active Directory Security Assessment Tool Features<\/h2>\n<p><strong>Health Check<\/strong><\/p>\n<p>This is the default report produced by PingCastle. It quickly collects the most important information of the Active Directory and establish an overview. Based on a model and rules, it evaluates the score of the sub-processes of the Active Directory. Then it reports the risks.<\/p>\n<p><strong>Active Directory map<\/strong><\/p>\n<p>This report produce a map of all Active Directory that PingCastle knows about. This map is built based on existing health check reports or when none is available, via a special mode collecting the required information as fast as possible.<\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p><strong>Deploy and collect reports<\/strong><\/p>\n<p>Monitoring domains from a bastion can be easy. But for those without network connection it might be difficult. There are many deployment strategies available with PingCastle.<\/p>\n<p><strong>Consolidation<\/strong><\/p>\n<p>When multiple reports of PingCastle have been collected, they can be regrouped in a single report. This facilitates the benchmark of all domains.<\/p>\n<p><strong>Scanner<\/strong><\/p>\n<p>Checking workstations for local admin privileges, open shares, startup time is usually complex and requires an admin. PingCastle\u2019s scanner bypass these classic limits.<\/p>\n<h3>Using Pingcastle Active Directory Security Assessment Tool<\/h3>\n<pre>\r\n  |:.      PingCastle (Version 2.5.2.0)\r\n  |  #:.   Get Active Directory Security at 80% in 20% of the time\r\n  # @@  >  End of support: 31\/07\/2020\r\n  | @@@:\r\n  : .#                                 Vincent LE TOUX (contact@pingcastle.com)\r\n  .:                                                 https:\/\/www.pingcastle.com\r\nUsing interactive mode.\r\nDo not forget that there are other command line switches like --help that you can use\r\nWhat you would like to do?\r\n  1-healthcheck-Score the risk of a domain\r\n  2-graph      -Analyze admin groups and delegations\r\n  3-conso      -Aggregate multiple reports into a single one\r\n  4-nullsession-Perform a specific security check\r\n  5-carto      -Build a map of all interconnected domains\r\n  6-scanner    -Perform specific security checks on workstations<\/pre>\n<p>You can download Pingcastle here:<\/p>\n<p><a href=\"https:\/\/github.com\/vletoux\/pingcastle\/releases\/download\/2.8.1.0\/PingCastle_2.8.1.0.zip\">PingCastle_2.8.1.0.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/vletoux\/pingcastle\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level with a methodology based on a risk assessment and maturity framework. It does not aim at a perfect evaluation but rather as an efficiency compromise. The risk level regarding Active Directory security has changed. Several vulnerabilities have been [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":5451,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"Pingcastle - Active Directory Security Assessment Tool","_seopress_titles_desc":"PingCastle is a Active Directory Security Assessment Tool designed to quickly assess the Active Directory security level based on a risk and maturity framework.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[11],"tags":[10685],"featured_image_src":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/05\/Pingcastle-Active-Directory-Security-Assessment-Tool-600x400.png","featured_image_src_square":"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2020\/05\/Pingcastle-Active-Directory-Security-Assessment-Tool-600x600.png","author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5427"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5427"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5427\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media\/5451"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5427"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5427"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5427"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}