Securing Active Directory with Open-Source Tools
This project explores techniques to secure Active Directory in both physical and Hyper-V virtual environments using powerful Open-Source tools.
Key Security Tools
PingCastle
Perform security audits using PingCastle to identify vulnerabilities.
Wazuh
Use Wazuh for real-time monitoring and threat detection.
BloodHound
Visualize AD relationships and detect attack paths .
NinjaOne
Implement NinjaOne for comprehensive device security.
PRTG Network Monitor
PRTG helps you monitor your network devices.
NMAP
Scan networks to identify open ports, services, and potential vulnerabilities.
KERBRUTE
Brute-force Kerberos service tickets to gain access to network .
About Me
Cyber Security lover who likes to learn new technologies that are used for cyber security. For example:
- Reverse Engineering: IDA Pro, EDB, Binary Ninja, Ghidra
- Pen Testing: Implementing security against SQLi, XSS, brute forcing, insecure password storage, CSRF, directory traversal
- Networking: VLAN attacks, man-in-the-middle attacks, DNS spoofing, IP spoofing, packet sniffing
- Security Tools: Nmap, Wireshark
Contact
Author:
Supervisor:
Email:
Currently working at Netwatch as a Helpdesk Specialist and enjoying learning new skills every day while being part of the IT department.
The Project
This project focuses on creating a robust and secure Active Directory (AD) environment, both in physical and virtual (Hyper-V) setups. The structure of the AD is meticulously designed with a clear organization that includes regional and departmental segmentation, allowing for efficient management and scalability. Security is a top priority, with the implementation of security and distribution groups to regulate access and permissions throughout the network. Additionally, the AD environment is supported by a properly configured DNS and DHCP server, ensuring smooth and reliable network communication.
The infrastructure for this project spans across various components, including physical PCs, dedicated servers, Hyper-V virtual machines, and Ubuntu servers, all of which are fully integrated into the Active Directory. To ensure the highest level of security, a suite of open-source tools is utilized, including PingCastle for security audits, Wazuh for real-time monitoring and intrusion detection, and NinjaOne for endpoint management and device security. These tools are deployed to identify vulnerabilities, monitor the network for any suspicious activities, and ensure compliance with best security practices.
Furthermore, a comprehensive recovery and backup plan has been put in place, with multiple domain controllers set up to ensure redundancy and minimize the risk of data loss in the event of a failure. This redundancy allows for the seamless continuation of services without interruptions. To further enhance the security posture, penetration testing is conducted to identify potential weak points in the network, providing an additional layer of assurance that the system is resistant to attacks. The results of these tests are used to fortify the network and ensure its resilience against any emerging threats.
Research Document
View ResearchSpecification Document
View SpecificationFinal Report
View Final ReportThank You!
Thank you for exploring the "Securing Active Directory with Open Source Tools" showcase. I hope you found the content valuable and insightful. This platform is dedicated to enhancing your understanding of Active Directory security using powerful open-source tools. Whether you are a seasoned professional or just starting your cybersecurity journey, I am excited to share this knowledge with you. Thank you for your interest and trust in this project — I look forward to supporting your growth in securing Active Directory environments.