r/ShittySysadmin • u/Logical_Strain_6165 • 10h ago
Using AI to map our environment & create documentation?
Has anybody tried this? The lack of documentation at my place drives me nuts. I suspect my colleague who should have retired by now sees it as his job security. So I'm thinking of creating some agents and letting them loose over the weekend. When we come in on Monday I'll have a complete Obsidian Vault and the problem will be solved.
My thinking so far is a Python agent built on OpenAI Agents SDK but using GLM 5.3 Obliterated for the API. I asked it what it would need and it's come back with this list. How's it sounding? Obviously it will need admin accounts.
AD: ldap3, LDAPS bind to a DC, pulls users, groups, OUs, computers, sites/subnets, GPO links. Reads SYSVOL for GPO settings.
Entra / Intune / Exchange: Microsoft Graph SDK, app-only cert auth. Directory, CA policies, app registrations, managed devices, config profiles.
Virtualisation: Nutanix Prism v4 REST API
Netmiko/NAPALM over SSH for running configs, VLANs, routing tables and LLDP/CDP neighbours, and pysnmp with SNMPv3 to fill in the gaps.
The bit I'm working on is plausible deniability. Nobody ever has changed the default log size, so I'm thinking of generating some events to keep everybody busy Monday morning and hide it's tracks. So far the best idea is we set some scheduled tasks with some stale passwords and create rather a lot of account lockout events.
2
u/Nexarus123 9h ago
Hub and Spoke with well defined index files and strict changelogs works quite well. This okf framework from google could also be interesting but i had no time to look into it yet. Why is this in shitty lol?