| | | 1 | | namespace SharpHoundCommonLib.LDAPQueries |
| | | 2 | | { |
| | | 3 | | public static class CommonProperties |
| | | 4 | | { |
| | 1 | 5 | | public static readonly string[] TypeResolutionProps = |
| | 1 | 6 | | { |
| | 1 | 7 | | LDAPProperties.SAMAccountType, LDAPProperties.ObjectSID, LDAPProperties.ObjectGUID, |
| | 1 | 8 | | LDAPProperties.ObjectClass, LDAPProperties.SAMAccountName, LDAPProperties.GroupMSAMembership, |
| | 1 | 9 | | LDAPProperties.Flags |
| | 1 | 10 | | }; |
| | | 11 | | |
| | 1 | 12 | | public static readonly string[] ObjectID = { LDAPProperties.ObjectSID, LDAPProperties.ObjectGUID }; |
| | 1 | 13 | | public static readonly string[] ObjectSID = { LDAPProperties.ObjectSID }; |
| | 1 | 14 | | public static readonly string[] GPCFileSysPath = { LDAPProperties.GPCFileSYSPath }; |
| | | 15 | | |
| | 1 | 16 | | public static readonly string[] BaseQueryProps = |
| | 1 | 17 | | { |
| | 1 | 18 | | LDAPProperties.ObjectSID, LDAPProperties.DistinguishedName, LDAPProperties.ObjectGUID, |
| | 1 | 19 | | LDAPProperties.LegacyLAPSExpirationTime, LDAPProperties.LAPSExpirationTime, LDAPProperties.IsDeleted, |
| | 1 | 20 | | LDAPProperties.UserAccountControl |
| | 1 | 21 | | }; |
| | | 22 | | |
| | 1 | 23 | | public static readonly string[] GroupResolutionProps = |
| | 1 | 24 | | { |
| | 1 | 25 | | LDAPProperties.SAMAccountName, LDAPProperties.DistinguishedName, LDAPProperties.SAMAccountType, |
| | 1 | 26 | | LDAPProperties.Members, LDAPProperties.CanonicalName, LDAPProperties.PrimaryGroupID, |
| | 1 | 27 | | LDAPProperties.DNSHostName |
| | 1 | 28 | | }; |
| | | 29 | | |
| | 1 | 30 | | public static readonly string[] ComputerMethodProps = |
| | 1 | 31 | | { |
| | 1 | 32 | | LDAPProperties.SAMAccountName, LDAPProperties.DistinguishedName, LDAPProperties.DNSHostName, |
| | 1 | 33 | | LDAPProperties.SAMAccountType, LDAPProperties.OperatingSystem, LDAPProperties.PasswordLastSet, |
| | 1 | 34 | | LDAPProperties.LastLogonTimestamp |
| | 1 | 35 | | }; |
| | | 36 | | |
| | 1 | 37 | | public static readonly string[] ACLProps = |
| | 1 | 38 | | { |
| | 1 | 39 | | LDAPProperties.SAMAccountName, LDAPProperties.DistinguishedName, LDAPProperties.DNSHostName, |
| | 1 | 40 | | LDAPProperties.SAMAccountType, LDAPProperties.SecurityDescriptor, |
| | 1 | 41 | | LDAPProperties.DisplayName, LDAPProperties.ObjectClass, LDAPProperties.ObjectSID, LDAPProperties.Name |
| | 1 | 42 | | }; |
| | | 43 | | |
| | 1 | 44 | | public static readonly string[] ObjectPropsProps = |
| | 1 | 45 | | { |
| | 1 | 46 | | LDAPProperties.SAMAccountName, LDAPProperties.DistinguishedName, LDAPProperties.SAMAccountType, |
| | 1 | 47 | | LDAPProperties.PasswordLastSet, LDAPProperties.LastLogon, LDAPProperties.LastLogonTimestamp, |
| | 1 | 48 | | LDAPProperties.ObjectSID, |
| | 1 | 49 | | LDAPProperties.SIDHistory, LDAPProperties.DNSHostName, LDAPProperties.OperatingSystem, |
| | 1 | 50 | | LDAPProperties.ServicePack, LDAPProperties.ServicePrincipalNames, LDAPProperties.DisplayName, |
| | 1 | 51 | | LDAPProperties.Email, LDAPProperties.Title, |
| | 1 | 52 | | LDAPProperties.HomeDirectory, LDAPProperties.Description, LDAPProperties.AdminCount, |
| | 1 | 53 | | LDAPProperties.UserPassword, LDAPProperties.GPCFileSYSPath, LDAPProperties.ObjectClass, |
| | 1 | 54 | | LDAPProperties.DomainFunctionalLevel, LDAPProperties.ObjectGUID, LDAPProperties.Name, |
| | 1 | 55 | | LDAPProperties.GroupPolicyOptions, LDAPProperties.AllowedToDelegateTo, |
| | 1 | 56 | | LDAPProperties.AllowedToActOnBehalfOfOtherIdentity, LDAPProperties.WhenCreated, |
| | 1 | 57 | | LDAPProperties.HostServiceAccount, LDAPProperties.UnixUserPassword, LDAPProperties.MsSFU30Password, |
| | 1 | 58 | | LDAPProperties.UnicodePassword, LDAPProperties.ProfilePath, LDAPProperties.ScriptPath, |
| | 1 | 59 | | LDAPProperties.ExpirePasswordsOnSmartCardOnlyAccounts, LDAPProperties.MachineAccountQuota, |
| | 1 | 60 | | LDAPProperties.SupportedEncryptionTypes, LDAPProperties.DSHeuristics, |
| | 1 | 61 | | LDAPProperties.MinPwdLength, LDAPProperties.PwdProperties, LDAPProperties.MinPwdAge, |
| | 1 | 62 | | LDAPProperties.MaxPwdAge, LDAPProperties.PwdHistoryLength, LDAPProperties.LockoutDuration, |
| | 1 | 63 | | LDAPProperties.LockoutThreshold, LDAPProperties.LockOutObservationWindow |
| | 1 | 64 | | }; |
| | | 65 | | |
| | 1 | 66 | | public static readonly string[] ContainerProps = |
| | 1 | 67 | | { |
| | 1 | 68 | | LDAPProperties.DisplayName, LDAPProperties.Name, LDAPProperties.ObjectGUID, LDAPProperties.GPLink, |
| | 1 | 69 | | LDAPProperties.GroupPolicyOptions, LDAPProperties.ObjectClass |
| | 1 | 70 | | }; |
| | | 71 | | |
| | 1 | 72 | | public static readonly string[] SPNTargetProps = |
| | 1 | 73 | | { |
| | 1 | 74 | | LDAPProperties.ServicePrincipalNames, LDAPProperties.SAMAccountName, LDAPProperties.SAMAccountType |
| | 1 | 75 | | }; |
| | | 76 | | |
| | 1 | 77 | | public static readonly string[] DomainTrustProps = |
| | 1 | 78 | | { |
| | 1 | 79 | | LDAPProperties.TrustAttributes, LDAPProperties.SecurityIdentifier, LDAPProperties.TrustDirection, |
| | 1 | 80 | | LDAPProperties.TrustType, LDAPProperties.CanonicalName |
| | 1 | 81 | | }; |
| | | 82 | | |
| | 1 | 83 | | public static readonly string[] GPOLocalGroupProps = |
| | 1 | 84 | | { |
| | 1 | 85 | | LDAPProperties.GPLink, LDAPProperties.Name |
| | 1 | 86 | | }; |
| | | 87 | | |
| | 1 | 88 | | public static readonly string[] CertAbuseProps = |
| | 1 | 89 | | { |
| | 1 | 90 | | LDAPProperties.CertificateTemplates, LDAPProperties.Flags, LDAPProperties.DNSHostName, LDAPProperties.CACert |
| | 1 | 91 | | LDAPProperties.PKIEnrollmentFlag, LDAPProperties.DisplayName, LDAPProperties.Name, LDAPProperties.TemplateSc |
| | 1 | 92 | | LDAPProperties.PKIOverlappedPeriod, LDAPProperties.PKIExpirationPeriod, LDAPProperties.ExtendedKeyUsage, LDA |
| | 1 | 93 | | LDAPProperties.CertificateApplicationPolicy, LDAPProperties.CertificatePolicy, LDAPProperties.IssuancePolici |
| | 1 | 94 | | LDAPProperties.ApplicationPolicies, LDAPProperties.PKIPrivateKeyFlag, LDAPProperties.OIDGroupLink |
| | 1 | 95 | | }; |
| | | 96 | | |
| | 1 | 97 | | public static readonly string[] StealthProperties = { |
| | 1 | 98 | | LDAPProperties.HomeDirectory, LDAPProperties.ScriptPath, LDAPProperties.ProfilePath |
| | 1 | 99 | | }; |
| | | 100 | | } |
| | | 101 | | } |