Seminar – Auditing with PowerShell®: Active Directory®

Auditors performing audits of Windows systems inevitably need to obtain information from Active Directory®, Microsoft’s platform for providing directory services to Windows and other devices. Whether it’s data on user accounts, computer accounts, group membership, or configurations in group policy objects, Active Directory is often a critical data source for Windows system audits.

While Active Directory graphic user interfaces can be used to obtain this information, they are often not efficient to use and some information isn’t easy to find and download. This often results in administrators needing to provide data or screenshots.

PowerShell® provides a better method of obtaining information from Active Directory. As a Microsoft product, PowerShell has a variety of commands for working with Active Directory. These include commands to obtain data on Active Directory objects, such as users, computers, groups, and group policy objects. Using simple PowerShell scripting capabilities, auditors can develop scripts to efficiently collect data from Active Directory and perform audit tests on this data.

This two-day hands-on course will cover the PowerShell commands needed to obtain user, computer, group, and group policy object data from Active Directory. The course will also cover basic audit tests that can be performed using PowerShell on Active Directory objects.  Attendees will be provided access to a virtual server to practice commands and perform hands-on exercises.

Auditors and security professionals who audit Active Directory will benefit from attending this course.

This course builds on the concepts presented in the Seminar – Introduction to Auditing with PowerShell®.

Registration closes on April 10, 2024 @ 5pm.

Register Today!

 

Agenda

 

Materials Provided During the Seminar

Each student attending the seminar will be provided:

• Presentation materials, which include detailed examples
• PowerShell script for working with Active Directory
• Answers to Practice Exercises
• Link to the seminar recording, good for 30 days after the seminar

 

Instructor

 

Virtual Meeting Information

• This event will be presented through Zoom.  The instructor will send an email with the zoom link prior to the event.
• Prior to the event, participants must install the Zoom app on their respective devices. Participants using the web-based Zoom or calling via the phone may not be entitled to CPE credits.
• Participants must respond to all the poll questions via the Zoom polling feature or chat log in order to receive NASBA CPE credits.
• The ISACA Greater Washington, D.C. Chapter will not be responsible for the participant’s inability to respond to the polls.

 

Event Questions and Policies

Registration Questions

If you have any registration questions about this event, please contact the chapter using the Registration Contact Form.

If you have CPE questions after the event has concluded, please contact the chapter using the CPE Contact Form.

 

Cancellation and Refund Policy

Cancellation and refund for advance registrations is allowed if cancellations are submitted through the registration system. Refunds vary depending on the date of cancellation. See ISACA GWDC Event Policies for details.

If ISACA GWDC cancels the event, all registrants will be notified as soon as possible through email at the email address provided during registration. Full refunds will be provided.

 

Complaint Policy

The GWDC welcomes your comments, complaints, suggestions, questions, and other feedback concerning our website information and services. All complaints should be submitted through the Registration Contact Form.

 

CPE Information

Earn up to 14 Continuing Professional Education (CPE) credit in the area of Information Technology. The ISACA® Greater Washington, D.C. Chapter is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.NASBARegistry.org

 

CPE Distribution and Evaluation Survey

CPEs will be distributed via e-mail along with the event evaluation survey after the completion of the event. Attendees must be present for the full event to receive full CPE credit.

 

Learning Objective

After completing this course, students will have basic skills to use PowerShell to obtain, view, and export data from Active Directory. 

 

Hands-on Exercises

Students will be given access to a Windows Server at the beginning of the course to use in practicing commands and hands-on exercises. Instructions will be provided to the students during registration and in advance of the event on the requirements to access the server.

 

CPE-Related Details

• Prerequisites: Students should be familiar with using PowerShell and working with Active Directory.
• Advance Preparation: The instructor will provide materials during the Zoom. Advance preparation for accessing the Windows server will be provided in advance of the course.
• Program Knowledge Level: Intermediate
• Delivery Method:  Group Internet Based
• Field of Study:  Information Technology – Technical