04 -Using Powershell for Active Directory- Forensic Investigations and Lockouts

preview_player
Показать описание
04 - Answer the question "Who did this?" Track when your data was changed, using metadata, event logs, lockouts, and permissions.
Рекомендации по теме
Комментарии
Автор

Thank you for the videos.
What I want to mention is that as a Service Desk agent, to see what changes, when and who made them to a user or group in AD, I used DRA (Directory and Resource Administrator). Just right click on the object and choose Report - set the dates and wait for the report...The downside is that it takes quite a few minutes to show the results but I always do something else in the mean time.
Of course these PowerShell commands are way faster.

klauseba
Автор

Great video. Can we get a copy of the scripts !

trevormasterson
Автор

Hello, Please share the full script to find Which object moves from one OU to another.

Akhlaquekhan
Автор

is the scripts available for download?

nathanvanerp
Автор

Need to make the scripts available to download or at least make it so we can see the entire line. Interesting stuff but not very helpful if we can't see everything.

marylinmonbro