Enterprise Infrastructure & Security Tools
Production-tested calculators, firewall rule matrices, and event forensic generators designed for Windows Server administrators, SOC analysts, and Active Directory architects.
Active Directory SRV Record Validator & Generator
Interactive blueprint generator and live diagnostic validator for canonical MS-ADTS Active Directory service locator records. Generates LDAP (389), Kerberos (88), Global Catalog (3268), and Password Change (464) records with automated PowerShell validation tests and Netlogon remediation commands.
Active Directory & Infrastructure Firewall Matrix
Interactive port calculator, protocol direction mapper, and exportable firewall script generator covering AD Core replication, PKI (AD CS), Systems Management (SCCM/WSUS), Observability (Prometheus, Grafana, SCOM), and Enterprise Backups.
AD & Windows Security Event Query Builder
Forensic query builder generating optimized Event Viewer XML XPath queries, high-performance Get-WinEvent PowerShell scripts, and SubStatus error code decoders for Account Lockouts (4740), DCSync (4662), and Kerberoasting (4769).
Enterprise Grafana & Prometheus Infrastructure Studio
Custom multi-select Grafana dashboard and Prometheus alert pack builder for Active Directory Domain Controllers, Windows Server / Hyper-V hosts, and Linux / Proxmox nodes. Generates production-ready Grafana JSON models with area sparklines, table legends, shared crosshairs, and dynamic rate vectors.
ADOpsKit PowerShell Module Suite
Modular, production-tested PowerShell toolkit for enterprise Active Directory administration. Includes parallel health audits, replication backlog checks, tombstone analysis, and automated disaster recovery scripts.
Kerberos MaxTokenSize & PAC Bloat Calculator
Calculate Kerberos token sizes in bytes across nested security groups, claims, and encryption ciphers to prevent HTTP 400 Bad Request logon rejections and IIS header overflows.
Enterprise AD Tiering & Protected Users Policy Generator
Automated User Rights Assignment (URA) matrices and GPO hardening blueprints enforcing Microsoft Enterprise Access Tier 0 (Control Plane), Tier 1, and Tier 2 isolation.