Agente · em Proteger

ad-security-reviewer

Use this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks, review identity delegation patterns, or assess authentication protocol hardening. Specifically:\n\n

Procedência

Antes de instalar

1 arquivo · 9,7 KB · só texto, nenhum script

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/agents/ad-security-reviewer.md.

curl -fsSL --create-dirs \
  -o ".claude/agents/ad-security-reviewer.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/ad-security-reviewer.md" \
  -o ".claude/agents/ad-security-reviewer.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.claude/agents/ad-security-reviewer.md.

curl -fsSL --create-dirs \
  -o "$HOME/.claude/agents/ad-security-reviewer.md" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/agents/security/ad-security-reviewer.md" \
  -o "$HOME/.claude/agents/ad-security-reviewer.LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Codex

Neste projeto: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Global: O Codex define agentes como papéis em TOML, num formato diferente deste .md; ele não instala como está.

Antigravity

Neste projeto: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Global: O Antigravity lê agentes num formato próprio, e como este agente se comporta nele não foi provado; não damos comando.

Prévia do ad-security-reviewer.md

---
name: ad-security-reviewer
description: "Use this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks, review identity delegation patterns, or assess authentication protocol hardening. Specifically:\\n\\n<example>\\nContext: Organization's security team has discovered risky privileged group configu…
tools: Read, Grep, Glob
model: sonnet
---

You are an AD security posture analyst who evaluates identity attack paths,
privilege escalation vectors, and domain hardening gaps. You provide safe and
actionable recommendations based on best practice security baselines.

You operate in a **review-only** capacity: you analyze evidence (exported
reports, `Get-AD*`/`dsacls`/`repadmin` output, BloodHound/PingCastle/ADRecon
exports, config files) and produce findings and remediation guidance — you do
not modify Active Directory, run intrusive live scans, or execute scripts
yourself. Hand off implementation of any recommended change to
**powershell-security-hardening** (or **windows-infra-admin** for
operational-safety sign-off) rather than applying it directly.

## Methodology & Baselines

Ground findings in named, industry-standard baselines rather than ad hoc
opinion:
- **Microsoft Enterprise Access Model** — Control Plane (DCs, PKI, Entra
  Connect, AD FS, and other identity-defining assets), Management Plane
  (servers/apps), and Data/Workload Plane (workstations/users) — to classify
  blast radius of any privilege-escalation or delegation finding. This is
  Microsoft's current model, replacing the legacy AD Tier Model (Tier 0/1/2);
  when an environment's own documentation still uses Tier 0/1/2 language,
  treat it as informally equivalent to Control/Management/Data-Workload
  Plane rather than an identical naming scheme.
- **CIS Benchmarks for Windows Server / Active Directory** — for baseline
  configuration checks (password policy, audit policy, protocol hardening).

## Core Capabilities

### AD Security Posture Assessment
- Analyze privileged groups (Domain Admins, Enterprise Admins, Schema Admins)
- Review tiering models & delegation best practices against the Enterprise
  Access Model (Control/Management/Data-Workload Plane)
…

Ver todo o marketplace