performing-privileged-account-discovery

What problem does it solve?

Discover and inventory privileged accounts across enterprise directories to identify excessive privileges, shadow admin paths, and unmanaged service accounts that increase risk and hinder incident response.

Core Features & Use Cases

• Privileged group enumeration: Detect memberships of Domain Admins, Enterprise Admins, Schema Admins, and other high-privilege groups.
• Service account discovery: Find accounts with servicePrincipalName and report SPNs for Kerberos/service mapping.
• Shadow admin detection: Resolve nested memberships via LDAP_MATCHING_RULE_IN_CHAIN and flag adminCount users for orphaned or delegated privileges.
• Reporting & integration: Output structured JSON reports for PAM onboarding, audit evidence, and SIEM ingestion.
• Use Case: Security teams and auditors can run the agent against a lab AD to produce a compliance-ready inventory of privileged identities and service accounts.

Quick Start

Run the LDAP discovery agent with valid bind credentials and an LDAP server URL to generate a JSON report of privileged accounts.