AI agent harness for Active Directory offensive security — 8 skill domains, 13 slash commands, 7 agents, ROE-safe orchestration. Part of DoOS by Evaluris Solutions Labs.
This repository also configures its own agents. See what claude-active-directory tells them →
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when Active Directory Certificate Services or PKI is in scope and templates, enrollment ACLs, CA endpoints, or ESC-pattern alignment need specialist review—typically alongside /web3-audit. Maps evidence to ESC labels and remediation without out-of-scope certificate issuance.
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when an operator wants a phased checklist for an authorized AD engagement with explicit ROE checkpoints between recon, rank, hunt, validate, and report. Structures work; does not bypass human approval or /scope.
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when several confirmed Active Directory primitives must be combined into one defensible multi-hop narrative for reporting or validation. Covers Kerberos, delegation, ACL abuse, AD CS, and lateral steps with evidence per hop. Does not invent hops that were not demonstrated.
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when starting authorized Active Directory reconnaissance. Guides DNS SRV resolution, LDAP and RPC enumeration, Kerberos user and SPN discovery, password policy and spray gates, and BloodHound collection planning strictly within ROE. Does not perform credential attacks—that belongs to hunt workflows after scope…
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when recon or BloodHound output exists and the operator needs a prioritized list of where to spend time next. Ranks Tier-0 proximity, Kerberoast density, delegation hints, AD CS presence, and stale accounts. Does not replace /scope or execute attacks.
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when validated Active Directory findings must become a professional internal or red team report. Follows engagement-reporting structure for executive summary, scope, methodology, findings, and remediation. Assumes validator has PASS or agreed DOWNGRADE on included items.
Evaluris-Solutions/claude-active-directory
Agent Claude Code
Use when a single Active Directory finding needs QA before customer or management delivery. Applies evidence, ROE, impact, and false-positive gates from the finding-validation skill. Does not write full reports—that is report-writer after PASS.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: