Skip to content

TristankMS/ADCS-PKI-Scripts

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

5 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ADCS-PKI-Scripts

AD Certificate Services and PKI scripts of interest

Large Database reporting demo files

You can use LargeCollector.cmd with Process-Certutil-C.ps1 to produce a CSV file of certificates from an ADCS database.

On the CA, run

LargeCollector.cmd .\Active.log Active

to dump active certificates with pre-selected fields in long-text form to active.log (run LargeCollector on its own to see the pre-canned query types), and then

.\process-certutil-c.ps1 .\active.log -exportfile Active.csv

to (fairly laboriously) convert that text log into a CSV file, useful for Excel pivot tables and PowerShell and stuff.

History

LargeCollector is used as part of the Microsoft ADCS Assessment. It uses a paging system to work through ADCS databases without requiring modification of the view timeout settings.

Process-Certutil is a script developed by Russell Tomkins to parse linear Certutil -view output into useful CSV rows, which was then modified to cope with the paged result set from LargeCollector, and modified to work with record batches for more consistent performance.

About

AD Certificate Services and PKI scripts of interest

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published