AUDIT & HARDEN
// HARDEN // DETECT

DC Infrastructure & Legacy Protocol Auditor

Paste DC audit output — Get-SmbServerConfiguration, Get-ADComputer, Get-ADDomain, or registry dumps — to flag SMBv1, NTLMv1, LDAP signing gaps, Print Spooler exposure, RC4/DES Kerberos, and obsolete OS. Fully offline.

⬡
Paste DC infrastructure audit data

Run the collection commands below, paste the results, and get a prioritized hardening checklist with operator paths and remediation. Nothing leaves your browser.