Getting Data In

Password policy logs in Active Directory.

aalhabbash1
Path Finder

Hi Splunker;

Is there way for Splunk monitor password policy in AD, such as; what is content this policy about how number of characters used and how must be long the characters and so on.

Best Regards;

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Password policy is set in Group Policy Objects, which Splunk does not monitor. You may, however, be able to write a script that collects this information.

---
If this reply helps you, Karma would be appreciated.
0 Karma

aalhabbash1
Path Finder

Dear Richgalloway,

Thank you to response; if you have this script please share the script with me.

Best Regards;

0 Karma

richgalloway
SplunkTrust
SplunkTrust

I do not have such a script, but it should be easy to create one in PowerShell.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...