Distinct first octets count should be retrievable
AD-SUB-08InfoActive DirectorySites and subnets
Part of Active Directory · Active Directory · Sites and subnets · All checks
Invoke-Maester -TestId AD-SUB-08Overview
Section titled “Overview”Analyzing subnet distribution by first octet provides:
- Addressing scheme visibility: Understanding IP allocation patterns
- Network segmentation insight: How the network is logically divided
- Capacity planning: Identifying available address space
- Documentation: Supporting network topology documentation
Common patterns include using 10.x for corporate, 172.x for datacenters, etc.
Control Type
Section titled “Control Type”Operational
Security Recommendation
Section titled “Security Recommendation”- Document the IP addressing scheme and first octet allocation
- Plan address space to avoid conflicts during acquisitions
- Reserve address space for future growth
- Review addressing scheme during network architecture changes
How the Test Works
Section titled “How the Test Works”This test extracts the first octet from all IPv4 subnets and counts the distinct values.
Related Tests
Section titled “Related Tests”Test-MtAdSubnetFirstTwoOctetsCount- Analyzes /16 networksTest-MtAdSubnetFirstThreeOctetsCount- Analyzes /24 networksTest-MtAdSubnetTotalCount- Counts total subnets
Details
Section titled “Details”Every attribute of this check
| Field | Value |
|---|---|
| Test ID | AD-SUB-08 |
| Severity | Info |
| Suite | Active Directory |
| Product | Active Directory |
| Feature | Sites and subnets |
| Area | Infrastructure hardening |
| Resource type | AdSite |
| MITRE ATT&CK | None |
| PowerShell test | Test-MtAdSubnetFirstOctetCount |
| Services | ActiveDirectory |
| Permissions | ActiveDirectory:Ldap:subnet:ReadProperty |
Source
Section titled “Source”- Test:
tests/ad/site/Test.AD-SUB-08.ps1 - Documentation:
tests/ad/site/Test.AD-SUB-08.md