DCSyncAudit-AD - Active Directory DCSync Rights Auditor - Defensive

项目说明

DCSyncAudit-AD

![Python 3.8+]()
![License: MIT]()
![Security Audit]()
![Blue Team]()
![Acti]()
![MITRE ATT&CK]()

Acti DCSync Rights Auditor — A 100% defensi auditing tool that identifies accounts and groups with AD replication rights (DCSync) and classifies them as legitimate or suspicious.

> DISCLAIMER: For authorized security auditing only. This tool performs READ-ONLY LDAP queries and does NOT perform any replication, exploitation, or credential dumping. Unauthorized use is strictly prohibited.

---

🇫🇷 Description (Français)

DCSyncAudit-AD est un outil d'audit de sécurité 100% défensif pour Acti. Il identifie tous les comptes et groupes disposant des droits de réplication (DCSync) sur le domaine et les classe comme légitimes ou suspects.

Fonctionnalités

Utilisation

---

🇬🇧 Description (English)

DCSyncAudit-AD is a 100% defensi auditing tool for Acti. It identifies all accounts and groups with replication rights (DCSync) on the domain and classifies them as legitimate or suspicious.

Features

Usage

---

Installation

Requirements

Architecture

MITRE ATT&CK Mapping

| Technique | ID | Description |
|-----------|-----|-------------|
| OS Credential Dumping: DCSync | T1003.006 | This tool detects accounts that could perform DCSync |

Compliance Frameworks

Testing

Author

Ayi NEDJIMI —

License

This project is licensed under the MIT License - see the LICENSE file for details.

---

> DISCLAIMER: This tool is intended for authorized security auditing only. It performs read-only analysis and does NOT exploit any . Always obtain proper authorization before auditing any system. Unauthorized use is strictly prohibited and may applicable laws.

项目信息

开发语言：Python

Star 数：1

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Active Directory DCSync Rights Auditor - Defensive security audit tool for identifying accounts with replication rights. Blue Team tool. For authorized security auditing only.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。