TrimarcJake / Locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

https://github.com/TrimarcJake/Locksmith

TrimarcJake/Locksmith Issues

Private/Test-IsADAdmin.ps1
Updated a month ago2
ESC8 Identification is Incomplete
Updated 2 months ago7
Improve ESC4 remediations to re-add Enroll/AutoEnroll ExtendedRight
Updated 2 months ago
Establish Methodology for Criticality of Issues
Updated 2 months ago1
Check Published Status for ESC1-5.
Updated 2 months ago
Improve ESC4/5 checks with Effective Access instead of dumb checks
Updated 2 months ago
Objects with both Allow and Deny ACEs reports two issues in output
Closed 2 months ago
Add ESC4/5 Ownership Remediations to Mode 4.
Closed 2 months ago1
Update all functions to include comment-based help.
Closed 2 months ago1
msPKI-Certificate-Name-Flag check in ESC1-3 could result in false negatives
Updated 2 months ago
Improve Contrast Between Colored Text and Background
Updated 4 months ago3
Remove Add-Member cmdlet from as many places as possible.
Closed 4 months ago2
Improve RSAT Installation Process
Closed 4 months ago2
Duplicates in ESC4/5 Ownership Issues
Closed 5 months ago
Mode 4 doesn't have an option to skip one fix and continue
Closed 5 months ago8
Convert Manager Approval check to use bitwise math.
Closed 5 months ago1
We're checking for Restricted Admin Mode twice
Closed 5 months ago
AD Connect service account read access listed as ESC5 vulnerability
Closed 5 months ago3
False Positives in ESC4 from Incomplete Filtering
Closed 9 months ago1
When There Are No Auditing, ESC1, ESC2, or ESC6 issues, Locksmith Dies When Creating Revert Script
Closed 10 months ago2
Feature Request: Add sample output to github readme
Closed a year ago3
SID Translation Error in the Find-ESC4 function
Closed a year ago9
security principal names are missing from Issue description
Closed 2 years ago
Error "You cannot call a method on a null-valued expression."
Closed a year ago21
Switch to identifying "safe" objects by SID rather than name
Closed a year ago10
please consider using Set-StrictMode
Closed a year ago2