PingCastle

https://www.pingcastle.com/documentation/
Admin
PingCastle is an Active Directory security assessment tool that audits and reports on domain health,...
Tokens:3,468
Snippets:83
Trust Score:9.7
Update:6 months ago
Show doc for...
Tokens:
Raw
### Display PingCastle Help

Source: https://www.pingcastle.com/documentation/run

Lists available command line switches and options.

```bash
PingCastle.exe --help
```

--------------------------------

### Run PingCastle Reporting for GC Overview

Source: https://www.pingcastle.com/documentation/overview

Execute PingCastleReporting.exe with the --gc-overview flag to generate a PowerPoint presentation of the Active Directory Global Catalog overview. Ensure the ad_gc_entitymap.xlsx file is in the current path.

```bash
PingCastleReporting.exe --gc-overview
```

--------------------------------

### Run PingCastle Export via Command Line

Source: https://www.pingcastle.com/documentation/scanner

Executes a specific export type against a target domain server.

```bash
PingCastle.exe --export <type> --server mydomain.com
```

--------------------------------

### Run PingCastle Scanner via Command Line

Source: https://www.pingcastle.com/documentation/scanner

Executes a specific scanner type against a target domain server.

```bash
PingCastle.exe --scanner <type> --server mydomain.com
```

--------------------------------

### Run PingCastle with Logging in Interactive Mode

Source: https://www.pingcastle.com/documentation/run

Enables logging while forcing the interactive mode interface.

```bash
PingCastle.exe --log --interactive
```

--------------------------------

### Generate PingCastle Reporting Template

Source: https://www.pingcastle.com/documentation/entitymap

Command to generate the ad_gc_entitymap.xlsx template file required for business input.

```bash
PingCastleReporting.exe --gc-template
```

--------------------------------

### Generate RSA Key Pair for Encryption

Source: https://www.pingcastle.com/documentation/deploy

Use this command to generate an RSA key pair for encrypting PingCastle reports. The public key is used for encryption, and the private key for decryption. Copy the public key into the .config file for encryption and the private key for decryption.

```bash
PingCastle.exe --generate-key
```

--------------------------------

### Run PingCastle Health Check

Source: https://www.pingcastle.com/documentation/run

Executes a health check against a specified domain.

```bash
PingCastle.exe --healthcheck --server mydomain.com
```

--------------------------------

### Run Health Check Consolidation

Source: https://www.pingcastle.com/documentation/consolidation

Execute the consolidation of health check reports using the command line. This is the default analysis mode.

```bash
PingCastle.exe -–hc-conso
```

--------------------------------

### Encrypt and Decrypt Reports with PingCastle

Source: https://www.pingcastle.com/documentation/deploy

These commands are used to reload and process reports. Use the --encrypt flag to create an encrypted copy of a report using the public key. Use the command without --encrypt to decrypt an encrypted report using the private key.

```bash
PingCastle --reload-report report.xml --encrypt
```

```bash
PingCastle --reload-report encrypted-report.xml
```

--------------------------------

### Export and Use PowerPoint Template

Source: https://www.pingcastle.com/documentation/overview

Use the --export-pptx-template flag to export the default PowerPoint template. Modify this template and then use the --use-pptx-template flag to apply your custom template when generating the report. Only slides with special notes will be altered.

```bash
PingCastleReporting.exe --export-pptx-template
```

```bash
PingCastleReporting.exe --use-pptx-template
```

--------------------------------

### Run PingCastle from a central location

Source: https://www.pingcastle.com/documentation/deploy

Executes health checks across multiple domains or specific forest perimeters from a central administration point.

```bash
PingCastle --healthcheck --server *
```

```bash
PingCastle --healthcheck --server *.forest.root
```

```bash
PingCastle --healthcheck --explore-trust --server child.forest.root
```

```bash
PingCastle --healthcheck --explore-forest-trust --server anotherforest.root
```

--------------------------------

### Run PingCastle on a single domain

Source: https://www.pingcastle.com/documentation/deploy

Executes a health check on the local domain where the command is run.

```bash
PingCastle --healthcheck
```

--------------------------------

### Generate Map with Existing Reports

Source: https://www.pingcastle.com/documentation/map

Use this command when you have existing health check reports to consolidate and build interactive maps.

```bash
PingCastle.exe --hc-conso
```

--------------------------------

### Generate Map Without Existing Reports

Source: https://www.pingcastle.com/documentation/map

Use this command when no health check reports are available. This mode builds the map by performing necessary health check processes for all accessible domains.

```bash
PingCastle.exe --carto
```
Tokens:
Raw