#service-accounts

Field Note · Jul 8, 2026 · Colten Anderson

Find the service accounts nobody has rotated

The Commvault Metallic breach ended with CISA telling customers to rotate static application secrets. Your Active Directory is full of the same thing: service accounts whose passwords were set once, years ago, and never touched. Here is the PowerShell to find them and put them on a cadence.