PingCastle

A security tool called PingCastle is made to swiftly evaluate the security of Active Directory installations. In order to give an effective compromise for assessing Active Directory security, it utilises a risk assessment and maturity framework approach. It seeks to provide you with a summary of your Active Directory infrastructure's security posture.

PingCastle is a security tool crafted for the rapid evaluation of the security state of Active Directory environments. It utilizes a risk assessment and maturity framework methodology to deliver an effective approach for assessing Active Directory security. Its objective is to provide an overview of the security posture of your Active Directory infrastructure, enabling security professionals to identify and address potential vulnerabilities and weaknesses.

Features

  • Healthcheck:     Scores the risk of a domain.
  • AzureAD:     Scores the risk of Azure AD.
  • Conso:     Aggregates multiple reports into a single one.
  • Carto:     Builds a map of all interconnected domains.
  • Scanner:     Performs specific security checks on workstations.
  • Export:     Exports users or computers.
  • Advanced:     Opens the advanced menu.

Installation

Build from Source:

     
  • The      PingCastle project is written in C# and can be built using Visual Studio.      The project is compatible with Visual Studio 2012 to Visual Studio 2022.
  •  
  • Ensure      you have the required dependencies and build the project.

Support and Lifecycle:

     
  • For      support requests, contact support@pingcastle.com.
  •  
  • The      basic edition is released every 6 months (January, August), and the      repository is updated with each release.
  •  
  • The      project is under a proprietary license, and the Non-Profit Open Software      License ("Non-Profit OSL") 3.0. Licensing details are      important; ensure compliance based on your usage.

How to Use

Interactive Mode:

A variety of features and an interactive mode are available in PingCastle. When you run the programme without parameters, you will see choices such as an advanced menu, user or computer exports, domain mapping, security checks on workstations, report aggregation, Azure AD evaluation, and healthcheck.

Command Line:

In addition to interactive mode, command-lineswitches are supported by PingCastle. For particular functionality, you may use command-line arguments like --healthcheck, --azuread, --conso, --carto, --scanner, --export, --advanced, and others.

Documentation

Consult the official documentation at PingCastle Documentation for thorough documentation and step-by-step usage instructions for PingCastle.

Table of Contents: