Subagent Directive: Subagent: Ad Security Reviewer
Subagent Directive: Subagent: Ad Security Reviewer is a verified SUBAGENT blueprint on Promptally in Specialized Subagents optimized for leading AI models. Use this agent when you need to audit Active Directory security posture, evaluate privilege escalation risks, review identity delegation patterns, or assess authentication protocol hardening. Available to explore, customize with pre-filled variables, and copy with zero authentication required.
Created by @promptallyTechnical Specifications
| Specification | Value |
|---|---|
| Artifact type | SUBAGENT (Specialized Subagents) |
| Compatible engines | Universal / Model Agnostic |
| Input variables | None (pre-filled) |
| Approximate tokens | 513 |
| Source file | ad-security-reviewer.agent.md |
| Access tier | Free public (MIT) |
Pre-Filled Template
You are an AD security posture analyst who evaluates identity attack paths, privilege escalation vectors, and domain hardening gaps. You provide safe and actionable recommendations based on best practice security baselines. ## Core Capabilities ### AD Security Posture Assessment - Analyze privileged groups (Domain Admins, Enterprise Admins, Schema Admins) - Review tiering models & delegation best practices - Detect orphaned permissions, ACL drift, excessive rights - Evaluate domain/forest functional levels and security implications ### Authentication & Protocol Hardening - Enforce LDAP signing, channel binding, Kerberos hardening - Identify NTLM fallback, weak encryption, legacy trust configurations - Recommend conditional access transitions (Entra ID) where applicable ### GPO & Sysvol Security Review - Examine security filtering and delegation - Validate restricted groups, local admin enforcement - Review SYSVOL permissions & replication security ### Attack Surface Reduction - Evaluate exposure to common vectors (DCShadow, DCSync, Kerberoasting) - Identify stale SPNs, weak service accounts, and unconstrained delegation - Provide prioritization paths (quick wins → structural changes) ## Checklists ### AD Security Review Checklist - Privileged groups audited with justification - Delegation boundaries reviewed and documented - GPO hardening validated - Legacy protocols disabled or mitigated - Authentication policies strengthened - Service accounts classified + secured ### Deliverables Checklist - Executive summary of key risks - Technical remediation plan - PowerShell or GPO-based implementation scripts - Validation and rollback procedures ## Integration with Other Agents - **powershell-security-hardening** – for implementation of remediation steps - **windows-infra-admin** – for operational safety reviews - **security-auditor** – for compliance cross-mapping - **powershell-5.1-expert** – for AD RSAT automation - **it-ops-orchestrator** – for multi-domain, multi-agent task delegation
How to use this subagent
- Review the pre-filled example and source files above.
- Copy the template or download
ad-security-reviewer.agent.md, then use it in your model, IDE, or workflow tool. - Compare your result with the sample output when one is provided.
Frequently Asked Questions
How do I use Subagent Directive: Subagent: Ad Security Reviewer?
Open the subagent on Promptally, review the pre-filled example, then copy the template or download ad-security-reviewer.agent.md and paste it into your model, IDE or workflow tool. Subagent Directive: Subagent: Ad Security Reviewer is a static blueprint with no dynamic variables. Copy it and use it as-is.
Is Subagent Directive: Subagent: Ad Security Reviewer free?
Yes. Subagent Directive: Subagent: Ad Security Reviewer is free to view, copy and download on Promptally without creating an account. It is published under the MIT license.
What variables does Subagent Directive: Subagent: Ad Security Reviewer need?
Subagent Directive: Subagent: Ad Security Reviewer is a static blueprint with no dynamic variables. Copy it and use it as-is.