ADTimeline

https://github.com/ANSSI-FR/ADTimeline

Open Source

Categories

Forensics Post-Exploitation

Description

Timeline of Active Directory changes with replication metadata

Keywords

active-directory dfir forensics powershell splunk timeline windows

Screenshots

Example Usage

PS> .\ADTimeline.ps1 -server <GLOBAL CATALOG FQDN>

For authorized security testing and educational use only.