sundiata

Identity & access security assessment for Windows Active Directory from the terminal. Identity discovery, account posture, password policy evaluation and sensitive group membership checks — credentials are redacted at collection time and never stored.

Guarantees

  • No live collection — identity data is read from captured/recorded sources only; live collection is refused honestly
  • Credentials are redacted at collection time and never written to disk, logs or reports
  • Deterministic rule engine (SDT-001+) over identity posture, account posture and sensitive memberships
  • Risk scores are transparent: severity_weight × confidence × exposure, capped at 100

Install

git clone --depth 1 https://github.com/QYVORA/qyvora-sundiata && cd qyvora-sundiata && go build ./cmd/sundiata

Usage

  • sundiata assess --sim
  • sundiata recruit --identity identity.yaml
  • sundiata assess --lease identities.yaml
  • sundiata findings
  • sundiata evidence
  • sundiata report -f json --out report.json