A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

ACME Proxy enhancing your existing Certificate Authority Infrastructure

An AD CS toolkit for AD Admins, Defensive Security Professionals, and Filthy Red Teamers

A comprehensive collection of **18 production-ready PowerShell solutions** for Windows Server environments, covering Active Directory, Certificate Services, Hyper-V, DNS, DHCP, and more. Built with enterprise security, compliance, and scalability in mind.

A simple explanation covering Active Directory from a macro/high-level overview.

Internal PKI lab using AD Certificate Services with certificate templates, HTTPS binding in IIS, and automated trust for domain clients.

NetBird fork adding Windows pre-login Machine Tunnel for Active Directory and Kerberos environments using mTLS machine certificates.

My blog.

Deployed a standalone Root CA on Windows Server 2012 R2 using AD CS. PKI configuration with production trade-off analysis

Single-file, dependency-free PowerShell auditor for Active Directory Certificate Services (AD CS) ESC misconfigurations. Read-only; run it straight from a domain-joined management server.

Two-site MSP-style Active Directory forest as Ansible IaC on KVM/libvirt: Server 2025 DCs, Win 11 + Ubuntu members, cross-site replication, DHCP failover, and rehearsed DR.

PowerShell scripts for managing Active Directory Certificate Services (ADCS / AD CS) — bulk-update certificate template validity periods for SC-081 compliance, and batch-submit CSRs to an Enterprise CA with resume-safe tracking.