You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are several modes you can chose from when running `Invoke-Locksmith`. You can also use the **Scans** parameter to choose which scans you want to invoke.
94
-
95
-
68
+
96
69
<aname="Mode0"id="Mode0"></a>
97
70
98
71
### Mode 0: Identify Issues, Output to Console (Default)
99
72
100
73
Running `Invoke-Locksmith.ps1` with no parameters or with `-Mode 0` will scan the current Active Directory forest and output all discovered AD CS issues to the console in **Table** format.
101
-
102
74
```powershell
103
75
# Module Syntax
104
76
Invoke-Locksmith
105
77
```
106
-
107
78
```powershell
108
79
# Script Syntax
109
80
.\Invoke-Locksmith.ps1
110
81
```
111
-
112
82
Example Output for Mode 0: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode0.md>
113
83
114
-
115
-
116
84
<aname="Mode1"id="Mode1"></a>
117
85
118
86
### Mode 1: Identify Issues and Fixes, Output to Console
119
-
120
87
This mode scans the current forest and outputs all discovered AD CS issues and possible fixes to the console in **List** format.
121
88
122
89
```powershell
123
90
# Module Syntax
124
91
Invoke-Locksmith -Mode 1
125
92
```
126
-
127
93
```powershell
128
94
# Script Syntax
129
95
.\Invoke-Locksmith.ps1 -Mode 1
130
96
```
131
-
132
97
Example Output for Mode 1: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode1.md>
133
98
134
-
135
-
136
99
<aname="Mode2"id="Mode2"></a>
137
100
138
101
### Mode 2: Identify Issues, Output to CSV
139
-
140
102
Locksmith Mode 2 scans the current forest and outputs all discovered AD CS issues to ADCSIssues.CSV in the present working directory.
141
103
142
104
```powershell
143
105
# Module Syntax
144
106
Invoke-Locksmith -Mode 2
145
107
```
146
-
147
108
```powershell
148
109
# Script Syntax
149
110
.\Invoke-Locksmith.ps1 -Mode 2
150
111
```
151
-
152
112
Example Output for Mode 2: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode2.md>
153
113
154
-
155
-
156
114
<aname="Mode3"id="Mode3"></a>
157
115
158
116
### Mode 3: Identify Issues and Fixes, Output to CSV
159
-
160
117
In Mode 3, Locksmith scans the current forest and outputs all discovered AD CS issues and example fixes to ADCSRemediation.CSV in the present working directory.
161
-
162
118
```powershell
163
119
# Module Syntax
164
120
Invoke-Locksmith -Mode 3
165
121
```
166
-
167
122
```powershell
168
123
# Script Syntax
169
124
.\Invoke-Locksmith.ps1 -Mode 3
170
125
```
171
-
172
126
Example Output for Mode 3: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode3.md>
173
127
174
-
175
-
176
128
<aname="Mode4"id="Mode4"></a>
177
129
178
130
### Mode 4: Fix All Issues
179
-
180
131
Mode 4 is the "easy button." Running Locksmith in Mode 4 will identify all misconfigurations and offer to fix each issue. If there is any possible operational impact, Locksmith will warn you.
181
132
182
133
```powershell
183
134
# Module Syntax
184
135
Invoke-Locksmith -Mode 4
185
136
```
186
-
187
137
```powershell
188
138
# Script Syntax
189
139
.\Invoke-Locksmith.ps1 -Mode 4
190
140
```
191
-
192
141
Example Output for Mode 4: <https://github.com/TrimarcJake/Locksmith/blob/main/examples/Mode4.md>
193
142
194
-
195
-
196
143
<aname="Scans"id="Scans"></a>
197
144
198
145
### Scans: Select Which Scans to Invoke
199
-
200
146
Use the `-Scans` parameter to choose which vulnerabilities to scan for. Acceptable values include `All`, `Auditing`, `ESC1`, `ESC2`, `ESC3`, `ESC4`, `ESC5`, `ESC6`, `ESC8`, `ESC11`, `ESC13`, `ESC15`, `EKEUwu`, or `PromptMe`. The `PromptMe` option presents an interactive list allowing you to select one or more scans.
0 commit comments