home/categories/debugging/mukul975-anthropic-cybersecurity-skills-skills-performing-active-directory-compromise-investigation-skill-md
debuggingtools
performing-active-directory-compromise-investigation
Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.
maintainer
mukul975
Mis à jour 4/6/2026
Étoiles
4240
Forks
464
quick start
Installation and usage
Investigate Active Directory compromise by analyzing authentication logs, replication metadata, Group Policy changes, and Kerberos ticket anomalies to identify attacker persistence and lateral movement paths.
Installation
$ install --globalskills.sh
Utilisation
Après l'installation, vous pouvez utiliser ce skill en exécutant la commande suivante dans votre terminal :
skills use performing-active-directory-compromise-investigation