MichaelGrafnetter/DSInternals

Health v2 · maintenance only

Flags: no_readme

Adoption not part of the score

1967 stars · 278 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

DSInternals is a PowerShell module and .NET framework for working with Active Directory internals, including offline NTDS.DIT database parsing, DPAPI, SAM/LSA secrets, and password auditing. It provides cmdlets for extracting and analyzing directory service data for security assessment purposes.

Use cases

• audit active directory password hashes from ntds.dit
• extract dpapi backup keys from a domain controller
• dump sam and lsa secrets offline
• test ad passwords against a dictionary
• recover bitlocker recovery keys from active directory
• inspect laps passwords in a domain

When to choose

• you need low-level access to Active Directory database internals
• you are performing AD security audits or red team engagements
• you want a PowerShell-native tool for directory services forensics

When to avoid

• you need a general-purpose AD administration tool rather than security analysis
• you are not comfortable with PowerShell or Windows internals
• you need a GUI-based auditing solution

Facets

library · maturity active

security penetration-testing cryptography cli security penetration-testing developer-tools windows cross-platform dotnet cli active-directory powershell-module ntds dpapi password-audit directory-services

Member repositories

For agents

markdown · JSON · MCP: product_card(name="MichaelGrafnetter/DSInternals")