Skip to content

enderphan94/Windows-Tier-0-Groups-Monitoring

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Monitoring sensitive groups and tier 0 groups with PowerShell & Zabbix

Getting Started

These instructions will get you a copy of the project up and running on your local machine where you are able to query the data from other trusted resources for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

Prerequisites

  • PowerShell Version 4 at a minimum
  • Import-Module Active Directory How to import AD Module
  • < Windows 7/ Windows Server 2012..
  • Run as regular user
The tool has been tested in Windows Server 2012

Installing Tier 0 groups monitoring

A step by step series of examples that tell you have to get a development env running

  1. Clone it to your directory:

    git clone https://github.com/enderphan94/Tier0groupsmonitoring.ps1

  2. Upgrade to PowerShell 4.0 at a minimum ( if needed )

  3. Import-Module Active Directory ( if needed )

  4. Setup Zabbix API web application

  5. Create host and items

  6. Configure triggeration

Installing Privileged accounts gathering

A step by step series of examples that tell you have to get a development env running

  1. Clone it to your directory:

    git clone https://github.com/enderphan94/Tier0groups.ps1

  2. Upgrade to PowerShell 4.0 at a minimum ( if needed )

  3. Import-Module Active Directory ( if needed )

  4. Execute the script with PowerShell.exe

Deployment

  • Service Account requirements:

In order to deploy this on a live system, you don't need an Administrator account. You can deploy it from the trusted Domain Controller where it's able to query the data from others needed DCs. In this case a service account is required.

  • Deployment processes:
  1. Using Task Scheduler to run these scripts automatically.
  2. Roughly 10-20 minutes is a proper time interval to implement the Health Check and Monitoring.
  3. Down to Zabbix configuration will give you variety of information based on the data. Alt text

Built With

PowerShell Version 4.0

Versioning

Last version updated! - Version 1.0

Authors

  • Ender Loc Phan - Initial work - GitRespo

License

Acknowledgments

  • Hat tip to anyone who's code was used
  • Inspiration
  • etc

About

Scripts created to monitor Tier 0 accounts and investigate account's attributes

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors