From db07b97595ff6879acaeac2cc018f0f9f3d52463 Mon Sep 17 00:00:00 2001 From: PaperMtn Date: Tue, 13 Aug 2024 13:47:23 +0100 Subject: [PATCH] README update --- README.md | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/README.md b/README.md index 0a63492..7ab2d85 100644 --- a/README.md +++ b/README.md @@ -119,5 +119,12 @@ Get-ADDBAccount -All -DBPath '.\Active Directory\ntds.dit' -BootKey $bootKey | F ### Step 3: Download the latest HIBP hash file The file can be downloaded from the HIBP API using a .net utility [here](https://github.com/HaveIBeenPwned/PwnedPasswordsDownloader) +### Optional Step: Filter unwanted AD accounts +The PowerShell script in the [scripts](./scripts/Filter-ADUsers) directory can be used to remove unwanted accounts from the IFM output before processing. These include: + +- Disabled accounts +- Computer accounts + + ## Resources - [ntdsutil & IFM](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc732530(v=ws.11))