whoami

As a cybersecurity researcher and open-source developer, I am all about Active Directory, Entra ID, Passkeys, and PowerShell. I typically publish my findings to my blog. My flagship projects are the DSInternals PowerShell module and Active Directory Firewall.

PowerShell Modules

• 📑DSInternals - Active Directory password auditing, ntds.dit database file manipulation, and much more.
• 🔑DSInternals.Passkeys - Administrative registration of passkeys in Microsoft Entra ID and Okta.
• 🛡️DSInternals.RpcFilters - Management of RPC filters in the Windows Filtering Platform (WFP).

NuGet Packages

Functionality exposed in my PowerShell modules is also available through these NuGet packages, aimed at .NET developers:

• 📑DSInternals.Replication
• 📑DSInternals.DataStore
• 📑DSInternals.SAM
• 📑DSInternals.Common
• 🛡️DSInternals.Win32.RpcFilters
• 🔑DSInternals.Win32.WebAuthn
• 🔑DSInternals.Win32.WebAuthn.Adapter

I have also re-packaged the ManagedEsent project from Microsoft, as the original binaries have broken digital signatures:

• 📎DSInternals.ManagedEsent.Interop
• 📎DSInternals.ManagedEsent.Isam
• 📎DSInternals.ManagedEsent.PersistentDictionary

Group Policy ADMX Templates

• 📜Microsoft Defender Attack Surface Reduction (ASR)
• 📜YubiKey Smart Card Minidriver
• 📜YubiKey PIV Manager

Other Projects

• 🛡️Active Directory Firewall
• 🔎BloodHound OpenGraph Entra ID Authentication Policy Data Collector