{"id":167,"title":"Invoke-TrimarcADChecks","content":"Invoke-TrimarcADChecks, Active Directory (AD) ortam\u0131n\u0131z\u0131n g\u00fcvenlik durumunu analiz eden ve iyile\u015ftirmeler \u00f6neren g\u00fc\u00e7l\u00fc bir PowerShell mod\u00fcl\u00fcd\u00fcr. Bu ara\u00e7, \u00f6zellikle AD g\u00fcvenli\u011fini art\u0131rmak isteyen sistem y\u00f6neticileri ve siber g\u00fcvenlik uzmanlar\u0131 i\u00e7in vazge\u00e7ilmez bir \u00e7\u00f6z\u00fcmd\u00fcr. \u0130\u015fte bu mod\u00fcl\u00fcn kurulumu, kullan\u0131m\u0131 ve avantajlar\u0131 hakk\u0131nda detayl\u0131 bir rehber:   Invoke-TrimarcADChecks Nedir? Invoke-TrimarcADChecks, Active Directory ortam\u0131n\u0131zda g\u00fcvenlik a\u00e7\u0131klar\u0131n\u0131 tespit etmek ve bu a\u00e7\u0131klar\u0131 kapatmak i\u00e7in kullan\u0131lan bir PowerShell mod\u00fcl\u00fcd\u00fcr. Bu ara\u00e7, a\u015fa\u011f\u0131daki gibi bir\u00e7ok kritik alan\u0131 kontrol eder: - Ayr\u0131cal\u0131kl\u0131 Hesaplar\u0131n G\u00fcvenli\u011fi - Kerberos Ayarlar\u0131 - GPO (Group Policy Object) G\u00fcvenli\u011fi - DNS G\u00fcvenli\u011fi - AdminSDHolder ve ACL (Access Control List) Yap\u0131land\u0131rmalar\u0131   Invoke-TrimarcADChecks Kurulumu GitHub'dan \u0130ndirme Mod\u00fcl\u00fc GitHub \u00fczerinden indirebilirsiniz: powershell git clone https:\/\/github.com\/TrimarcJake\/Invoke-TrimarcADChecks PowerShell Gallery'den Kurulum PowerShell Gallery \u00fczerinden do\u011frudan kurabilirsiniz: powershell 
Install-Module -Name Invoke-TrimarcADChecks -Force<\/pre>     Invoke-TrimarcADChecks Kullan\u0131m\u0131 Mod\u00fcl\u00fc Import Etme Mod\u00fcl\u00fc kullanmadan \u00f6nce import edin: powershell 
Import-Module Invoke-TrimarcADChecks<\/pre>   Temel Tarama Ba\u015flatma Basit bir tarama ba\u015flatmak i\u00e7in: powershell 
Invoke-TrimarcADChecks<\/pre>   Detayl\u0131 Rapor ile Tarama Detayl\u0131 bir rapor olu\u015fturmak i\u00e7in: powershell 
Invoke-TrimarcADChecks -DetailedReport<\/pre>   Spesifik Kontroller Sadece belirli kontrolleri \u00e7al\u0131\u015ft\u0131rmak i\u00e7in: powershell 
Invoke-TrimarcADChecks -CheckType PrivilegedAccounts, AdminSDHolder<\/pre>   Rapor Olu\u015fturma Raporlar\u0131 farkl\u0131 formatlarda olu\u015fturabilirsiniz: powershell HTML rapor olu\u015fturma 
Invoke-TrimarcADChecks -ReportFormat HTML -OutputPath \"C:\\Reports\\ADSecurity.html\"<\/pre>   CSV rapor olu\u015fturma 
Invoke-TrimarcADChecks -ReportFormat CSV -OutputPath \"C:\\Reports\\ADSecurity.csv\"<\/pre>     Ana Kontrol Alanlar\u0131 Invoke-TrimarcADChecks, a\u015fa\u011f\u0131daki alanlarda kapsaml\u0131 kontroller ger\u00e7ekle\u015ftirir: Ayr\u0131cal\u0131kl\u0131 Hesaplar\u0131n G\u00fcvenli\u011fi: - Admin hesap say\u0131s\u0131. - Son login tarihleri. - Parola politikalar\u0131. Kerberos G\u00fcvenli\u011fi: - Ticket politikalar\u0131. - \u015eifreleme t\u00fcrleri. - Service account kontrolleri. GPO G\u00fcvenli\u011fi: - SYSVOL eri\u015fimleri. - GPO linklerinin kontrol\u00fc. - WMI filtreleri. DNS G\u00fcvenli\u011fi: - DNS zone transfer ayarlar\u0131. - DNSSEC kontrolleri. - DNS scavenging.   \u0130yi Uygulama \u00d6nerileri D\u00fczenli Olarak \u00c7al\u0131\u015ft\u0131r\u0131n: - En az ayda bir tarama yap\u0131n. - Raporlar\u0131 ar\u015fivleyin ve de\u011fi\u015fiklikleri takip edin. Kritik Bulgular\u0131 Hemen Adresleyin: - K\u0131rm\u0131z\u0131 renkli bulgular acil aksiyon gerektirir. - Sar\u0131 renkli bulgular orta \u00f6ncelikli risklerdir. False Positive'leri Dok\u00fcmante Edin: - Yanl\u0131\u015f pozitif sonu\u00e7lar\u0131 not al\u0131n ve gereksiz aksiyon almaktan ka\u00e7\u0131n\u0131n.   \u00d6rnek Kullan\u0131m Senaryolar\u0131 Haftal\u0131k G\u00fcvenlik Taramas\u0131 powershell 
$date = Get-Date -Format \"yyyy-MM-dd\" Invoke-TrimarcADChecks -DetailedReport -OutputPath \"C:\\Reports\\ADSecurity_$date.html\"<\/pre>   Kritik Kontroller powershell 
Invoke-TrimarcADChecks -CheckType PrivilegedAccounts, Kerberos, DNS -Priority High<\/pre>   Belirli Bir Domain i\u00e7in Kontrol powershell 
Invoke-TrimarcADChecks -Domain \"corp.domain.com\"<\/pre>     Hata Giderme Verbose Mod ile \u00c7al\u0131\u015ft\u0131rma powershell 
Invoke-TrimarcADChecks -Verbose<\/pre>   Debug Mod powershell 
Invoke-TrimarcADChecks -Debug<\/pre>   Log Dosyas\u0131 Olu\u015fturma powershell 
Invoke-TrimarcADChecks -LogPath \"C:\\Logs\\ADChecks.log\"<\/pre>     Sonu\u00e7lar\u0131 Yorumlama - K\u0131rm\u0131z\u0131: Acil aksiyon gerektirir. - Sar\u0131: Orta \u00f6ncelikli risk. - Ye\u015fil: \u0130yi durumda. - Gri: Kontrol edilemedi.   Otomatizasyon \u00d6rne\u011fi Scheduled Task Olu\u015fturma Haftal\u0131k otomatik taramalar i\u00e7in: powershell 
$action = New-ScheduledTaskAction -Execute 'Powershell.exe' -Argument '-NoProfile -ExecutionPolicy Bypass -File \"C:\\Scripts\\Run-ADChecks.ps1\"' $trigger = New-ScheduledTaskTrigger -Weekly -DaysOfWeek Monday -At 3am Register-ScheduledTask -Action $action -Trigger $trigger -TaskName \"Weekly AD Security Check\"<\/pre>     \u00d6nemli Notlar Domain Admin Yetkileri Gerektirir: - Script'i \u00e7al\u0131\u015ft\u0131rmak i\u00e7in Domain Admin yetkilerine sahip olman\u0131z gerekir. B\u00fcy\u00fck Ortamlarda \u00c7al\u0131\u015fma S\u00fcresi Uzun Olabilir: - B\u00fcy\u00fck \u00f6l\u00e7ekli a\u011flarda tarama s\u00fcresi uzayabilir. Raporlar\u0131 G\u00fcvenli \u015eekilde Saklay\u0131n: - Raporlar, hassas bilgiler i\u00e7erebilir. Bu nedenle g\u00fcvenli bir \u015fekilde saklanmal\u0131d\u0131r.   Invoke-TrimarcADChecks, Active Directory ortam\u0131n\u0131z\u0131n g\u00fcvenlik durumunu analiz etmek ve iyile\u015ftirmeler \u00f6nermek i\u00e7in g\u00fc\u00e7l\u00fc bir ara\u00e7t\u0131r. D\u00fczenli olarak kullanarak, AD g\u00fcvenli\u011finizi art\u0131rabilir ve siber sald\u0131r\u0131lara kar\u015f\u0131 proaktif bir savunma stratejisi olu\u015fturabilirsiniz.  ","excerpt":"Active Directory ortam\u0131n\u0131z\u0131n g\u00fcvenlik durumunu analiz eden g\u00fc\u00e7l\u00fc bir PowerShell mod\u00fcl\u00fcd\u00fcr.","created_at":"2025-02-06 17:51:11","updated_at":"2026-09-23 19:46:35","category_id":7,"view_count":657,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-02-06 17:51:11","featured_image":"resimyok.jpg","slug":"invoke-trimarcadchecks","category_name":"Cyber Security","category_slug":"cyber-security"}