https://github.com/techspence/da-excelleratorinator

A PowerShell script to find where admin and privileged accounts are running Scheduled Tasks and Services
https://github.com/techspence/da-excelleratorinator

Last synced: 3 months ago
JSON representation

A PowerShell script to find where admin and privileged accounts are running Scheduled Tasks and Services

• Host: GitHub
• URL: https://github.com/techspence/da-excelleratorinator
• Owner: techspence
• License: other
• Created: 2022-12-07T14:46:18.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2022-12-07T16:06:09.000Z (over 2 years ago)
• Last Synced: 2025-01-15T21:23:57.066Z (4 months ago)
• Language: PowerShell
• Size: 8.79 KB
• Stars: 3
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
![image](https://user-images.githubusercontent.com/7014376/206213652-7abb362b-8253-4be4-9fc1-b94d7b6c1bbc.png)

# DA-ExcelleratorInator

A common windows security misconfiguration is running Scheduled Tasks or Services as a highly privileged account. This can lead to privilege escalation. This script simplifies searching all servers for Scheduled Tasks and Services running as any account in any of the sensitive Active Directory Groups. E.g.: Domain Admins, Account Operators, etc.

## Example 1 - All Tasks and Services and all sensitive accounts

```PowerShell

Invoke-DAExcelleratorInator

```

Find all Scheduled Tasks and Services on all enabled and online servers running as a user who is a member of a sensitive group. This is the same as running Invoke-DAExcelleratorInator -GetTasks -GetServices.

## Example 2 - All Tasks and services for a specific account

```PowerShell

Invoke-DAExcelleratorInator -GetTasks -GetServices -User Admin

```