PingCastle is a security tool crafted for the rapid evaluation of the security state of Active Directory environments. It utilizes a risk assessment and maturity framework methodology to deliver an effective approach for assessing Active Directory security. Its objective is to provide an overview of the security posture of your Active Directory infrastructure, enabling security professionals to identify and address potential vulnerabilities and weaknesses.
Features
- Healthcheck: Scores the risk of a domain.
- AzureAD: Scores the risk of Azure AD.
- Conso: Aggregates multiple reports into a single one.
- Carto: Builds a map of all interconnected domains.
- Scanner: Performs specific security checks on workstations.
- Export: Exports users or computers.
- Advanced: Opens the advanced menu.
Installation
Build from Source:
- The PingCastle project is written in C# and can be built using Visual Studio. The project is compatible with Visual Studio 2012 to Visual Studio 2022.
- Ensure you have the required dependencies and build the project.
Support and Lifecycle:
- For support requests, contact support@pingcastle.com.
- The basic edition is released every 6 months (January, August), and the repository is updated with each release.
- The project is under a proprietary license, and the Non-Profit Open Software License ("Non-Profit OSL") 3.0. Licensing details are important; ensure compliance based on your usage.
How to Use
Interactive Mode:
A variety of features and an interactive mode are available in PingCastle. When you run the programme without parameters, you will see choices such as an advanced menu, user or computer exports, domain mapping, security checks on workstations, report aggregation, Azure AD evaluation, and healthcheck.
Command Line:
In addition to interactive mode, command-lineswitches are supported by PingCastle. For particular functionality, you may use command-line arguments like --healthcheck, --azuread, --conso, --carto, --scanner, --export, --advanced, and others.
Documentation
Consult the official documentation at PingCastle Documentation for thorough documentation and step-by-step usage instructions for PingCastle.