Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when triaging or reporting authorized Active Directory Certificate Services risk—enterprise CA inventory, template permissions, ESC1–ESC11 style labels from Certipy-style tools, DC certificate mapping and strong-binding evidence, web enrollment and RPC relay surfaces. Use with /web3-audit command content and…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when planning or unblocking an authorized Active Directory assessment—phasing work, choosing which skill to open next, routing when stuck (no creds, empty BH graph, SQL in scope), or aligning deliverables with MITRE-ready reporting. Covers session discipline, optional read-only baselines, and tool routing. Does…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when orchestrating an authorized Active Directory offensive assessment from ROE check through recon, credentials, escalation, lateral movement, AD CS, validation, and reporting. Anchors the engagement in evidence, /scope, BloodHound-style path reasoning, hybrid-identity context, and MITRE-ready deliverables.…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when performing or planning authorized Active Directory reconnaissance—DNS and DC SRV, forest and trust mapping, LDAP/LDAPS and signing posture, gMSA discovery, SMB signing, password policy and spray approval gates, Kerberos SPN and pre-auth discovery, BloodHound collection choice, and LDAP filter cookbook. Use…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when writing or restructuring internal Active Directory penetration test or red team reports after findings exist. Guides executive summary, scope, AD-specific object fields, optional MITRE ATT&CK columns, evidence bundles, remediation, and narrative severity. Third-person reporting tone for Evaluris-style…
Evaluris-Solutions/claude-active-directory
Skill Claude CodeCodex
Use when validating an Active Directory finding before client or management delivery, or when triaging BloodHound edges, Kerberoast lists, or AD CS template visibility for false positives. Covers seven-question gates, AD-specific KILL/DOWNGRADE rules, narrative severity, and optional MITRE ATT&CK mapping. Improves…