Understand · Identity
ADhuntX
A browser-local CSV review prototype for basic Active Directory hygiene triage.
What it is
A browser-local CSV review prototype for basic Active Directory hygiene triage.
Decision this supports
Identify accounts that deserve a deeper identity-security review.
Current, bounded capabilities
- Reads a user-supplied CSV locally in the browser.
- Highlights basic privilege, password and stale-account heuristics.
- Exports the displayed review data as CSV.
Limitations
It does not calculate effective permissions or attack paths and does not replace AD/Entra evidence, directory connectors or graph analysis.
Next safe action
Use output as a triage queue, then verify each condition against authoritative directory evidence.
How it works
Local CSV import → heuristic review → reviewer triage → authoritative directory validation → approved follow-up.
Input / scope
A synthetic user CSV containing normal, privileged, stale, password-risk, malformed, and unknown-value rows.
Observable output
Browser-local heuristic flags and an exportable review queue with the reason for each flag.
Human decision
The reviewer verifies every flag against authoritative AD or Entra evidence.
Troubleshooting
- Malformed CSV: check headers and delimiters.
- Unknown values: preserve them for review rather than guessing.
- Size limits or empty imports: reduce the fixture and validate locally.
Sources and review
ADhuntX does not query AD or Entra, upload data, calculate effective permissions, build graphs, or analyze attack paths.
Reference toolkit catalogue