ADAuditTasks

Author(s)

• DrIOSx

Tags

ActiveDirectory Audit Security

Functions

Get-ADActiveUserAudit Get-ADHostAudit Get-ADUserLogonAudit Get-ADUserPrivilegeAudit Get-ADUserWildCardAudit Get-HostTag Get-NetworkAudit Merge-ADAuditZip Send-AuditEmail Submit-FTPUpload

Dependencies

This module has no dependencies.

Release Notes

## [0.2.0] - 2023-02-21

### Added

- Successfully ran the following PowerShell script to collect and merge audit reports from an Active Directory domain:

   ```powershell
   $workstations = Get-ADHostAudit -HostType WindowsWorkstations -Report -Verbose
   $servers = Get-ADHostAudit -HostType WindowsServers -Report -Verbose
   $nonWindows = Get-ADHostAudit -HostType "Non-Windows" -Report -Verbose
   $activeUsers = Get-ADActiveUserAudit -Report -Verbose
   $privilegedUsers = Get-ADUserPrivilegeAudit -Report -Verbose
   $wildcardUsers = Get-ADUserWildCardAudit -WildCardIdentifier "svc" -Report -Verbose
   Merge-ADAuditZip -FilePaths $workstations, $servers, $nonWindows, $activeUsers, $privilegedUsers, $wildcardUsers -OpenDirectory
   ```

- Added support for splitting large ZIP files into multiple parts in Merge-ADAuditZip
- Added new parameter -OpenDirectory to Merge-ADAuditZip for opening the output directory after merging files
- Added comment blocks to Merge-ADAuditZip

### Changed

- Improved error handling and logging in Merge-ADAuditZip
- Renamed output file for Merge-ADAuditZip to include timestamp and domain name
- Updated examples and usage information in Merge-ADAuditZip documentation

### Fixed

- Fixed issue with Merge-ADAuditZip where blank output files would prevent zipping remaining files