API Reference
TestimoX API Reference
Complete API documentation auto-generated from source documentation.
Quick Start
Frequently used types and entry points.
AdDataStager
Executes the plan to warm ADPlayground caches once per domain/object type.
AdPlan
Full plan of what data to stage before rule execution.
BuiltinRules
Built-in rules for Testimo (kept for backward compatibility)
Comparer
Helper class for value comparison.
ConsoleTheme
Color set aligned to a console background profile. Values are Spectre color names or hex (e.g. "#RRG...
DataBus
Default IDataBus implementation that defers to ADPlayground gatherers. Caches are pre-warmed by the...
All Namespaces
Browse all 1030 types organized by namespace.
TestimoX (11)
TestimoX.Baselines (30)
BaselineCatalog BaselineCisWindows11V3p0 BaselineCisWindows11V4p0 BaselineCisWindowsServer2016V3p0 BaselineCisWindowsServer2019V3p0 BaselineCisWindowsServer2022V4p0 BaselineCisWindowsServer2025V1p0 BaselineComparer BaselineComparisonRow BaselineControlVariants BaselineListEntry BaselineMsbWindows101507V1p0 BaselineMsbWindows101607V1p0 BaselineMsbWindows101809V1p0 BaselineMsbWindows1122h2V22H2 BaselineMsbWindows1123h2V23H2 BaselineMsbWindows1124h2V24H2 BaselineMsbWindowsServer2016V1p0 BaselineMsbWindowsServer2019V1p0 BaselineMsbWindowsServer2022V1p0 BaselineMsbWindowsServer2025V1p0 BaselinePingCastle BaselinePurpleKnight BaselineService BaselineStigWindows11v2r4 BaselineStigWindowsServer2016V2R10 BaselineStigWindowsServer2019V3R5 BaselineStigWindowsServer2022V2R5 BaselineStigWindowsServer2025V1R0 CxProduct
TestimoX.Baselines.BaselinePingCastle (1)
TestimoX.Baselines.BaselinePurpleKnight (5)
TestimoX.Baselines.Crosswalk (35)
AccountPolicyField AuditSubcategory BaselineAccountPolicy BaselineAudit BaselineMaps BaselineNetlogon BaselineRegistryKey BaselineSecurityOption CoverageRow CrosswalkBuilder CrosswalkBuilderExtensions CrosswalkCatalog CrosswalkDocMap CrosswalkDocRow CrosswalkMatchRow CrosswalkService CrosswalkSuggester CrosswalkTypedMaps DocEntry DocSuggester DocVendor GapItem Hive LinkBuilder PingCastleDoc PingCastleDocExt PurpleKnightDoc PurpleKnightDocExt RuleBuilderLinkExtensions RuleCrosswalk RuleCrosswalkReport UnifiedAnchorKey Vendor VendorMatch VendorRef
TestimoX.Baselines.Crosswalk.CrosswalkSuggester (1)
TestimoX.Baselines.Crosswalk.DocSuggester (1)
TestimoX.Caching (1)
TestimoX.Configuration (14)
TestimoX.Configuration.Engine (23)
AllowAllLicenseGate CrosswalkReportConfig EngineConfig GpoConfig HtmlCatalogSource HtmlReportConfig HtmlReportTheme ILicenseGate InfrastructureConfig JsonReportConfig LdapConfig LoggingConfig PolicyCacheConfig PowerShellCacheMode PowerShellCatalogMode PowerShellRuleCacheOptions PowerShellRuntimeConfig PowerShellRuntimeConfigFactory ReportFeature ReportingConfig StagingConfig SysvolConfig WordReportConfig
TestimoX.Configuration.Providers (4)
TestimoX.Configuration.Rules (7)
TestimoX.Configuration.Run (1)
TestimoX.Configuration.Runner (1)
TestimoX.Configuration.Service (15)
TestimoX.Configuration.Service.Export (2)
TestimoX.Configuration.Service.Schedule (3)
TestimoX.Configuration.Storage (5)
TestimoX.Configuration.TestimoConfiguration (2)
TestimoX.Crosswalk (2)
TestimoX.Definitions (55)
ActionType Area Category CSharpRule CSharpRuleExtensions EmojiConverter FilterCondition FilteredResults FilterOperator HighlightColor HighlightTarget Importance Logger OperationType OperationTypeConverter ParameterRef PermissionRequired PowerShellHashtableAdapter PowerShellMethod PowerShellModule PowerShellVersion ReportHints ReportSectionDescriptor RequirementSet RowHighlightDescriptor Rule RuleComplete RuleContainer RuleContainerDomain RuleContainerDomainController RuleContainerForest RuleCost RuleExample RuleGuidance RuleLink RuleLinkRelation RuleSourceType RuleVendorRef RuleVisibility Scope ScoreKind Source SourceDetails StatusColorHelper SummaryCounterDescriptor SummaryFieldDescriptor SummaryParameterDescriptor Test TestDetails TestimoEmoji TestimoStatus TestParameters TestResult TestState ViewMode
TestimoX.Discovery (2)
TestimoX.Exceptions (3)
TestimoX.Execution (47)
CentralizedErrorHandler CorrelationContext ErrorRecoveryPolicy ExecutionConfiguration ExecutionConfigurationArtifacts ExecutionWizard GroupingMode InteractiveEntryPoints PostRunPresenter PreRunPresenter RequirementEvaluator RetryExecutor RuleExecutionContext RuleExecutionResult RuleIntrospection RuleInventoryEntry RuleListEntry RuleListing RuleMigrationState RuleOverview RuleParameters RuleResultEnvelope RuleSelectionCancelledException RuleSelectionOptions RuleSelectionParsing RuleSelectionProfile RuleSelectionProfileCatalog RuleSelectionProfileInfo RuleSelectionService RuleSelector RuleSelectorOptions RuleSummaryBuilder RuleSummaryRow RunEngineFactory StagingMode TestimoRunner TestimoRunResult ToolingRuleCatalogRow ToolingRuleDataSeries ToolingRuleDiscoveryRequest ToolingRuleDiscoveryResult ToolingRuleExecutionResult ToolingRuleOrigin ToolingRuleRunRequest ToolingRuleRunResult ToolingRuleService ToolingRuleTestResult
TestimoX.Execution.Pipeline (3)
TestimoX.Execution.Pipeline.Middleware (2)
TestimoX.Execution.Pipeline.Steps (7)
TestimoX.Execution.Progress (26)
DefaultProgressRendererFactory DeferredProgressSink FullscreenSpectreProgressRenderer ILogSink IProgressRenderer IProgressRendererFactory IProgressSink LogLevel NoopProgressRenderer PlainTextProgressRenderer ProgressChannel ProgressLayout (Progress) ProgressMode (Progress) ProgressPreset RunCompleted RunHeartbeat RunStarted SpectreTuiProgressRenderer TaskCompleted TaskDescriptor TaskOutcome TaskQueued TaskStarted TaskStatusKind TaskUpdate TestSummary
TestimoX.Execution.Ui (4)
TestimoX.Infrastructure (9)
TestimoX.Licensing (1)
TestimoX.Planning (14)
TestimoX.PowerShell (12)
TestimoX.Profiling (1)
TestimoX.Providers (6)
TestimoX.Reporting (1)
TestimoX.Reporting.Html (4)
TestimoX.Reporting.Html.HtmlReports (1)
TestimoX.Reporting.Html.RenderValue (4)
TestimoX.Reporting.Json (2)
TestimoX.Reporting.Word (1)
TestimoX.Rules (5)
TestimoX.Rules.Domain (2)
TestimoX.Rules.Domain.Accounts (1)
TestimoX.Rules.Domain.Backup (1)
TestimoX.Rules.Domain.Computers (12)
ComputersAesDisabled ComputersObsoleteDomainControllers ComputersObsoleteServers ComputersObsoleteWorkstations ComputersPrimaryGroupCompliance ComputersRbcdExposure ComputersUnconstrainedDelegation DomainComputerSecurityBaselinePosture DomainComputersLapsCoverage DomainComputersLapsDelegation DomainComputersLapsDsrmDelegation DomainComputersLifecycle
TestimoX.Rules.Domain.Delegation (6)
TestimoX.Rules.Domain.Dhcp (1)
TestimoX.Rules.Domain.Directory (16)
AdminSdHolderAclDrift DirectoryAclPostureInventory DirectoryDangerousExtendedRights DirectoryDefaultOuChanged DirectoryDisplaySpecifiersForeignPaths DirectoryEmptyOrganizationalUnits DirectoryLdapConnectivity DirectoryUnprotectedOus DirectoryWellKnownFolderPosture DomainAdminGroupDelegationRisk DomainDsHeuristics DomainDuplicateAccounts DomainLapsOuDelegation DomainObjectsRecentCreation DomainOuDelegationRisk DsHeuristicsCompliance
TestimoX.Rules.Domain.Dns (7)
TestimoX.Rules.Domain.Domain (7)
TestimoX.Rules.Domain.DomainControllers (7)
TestimoX.Rules.Domain.Gpo (67)
DomainAuthentication DomainGpoAnalysis DomainGpoAnonymousExposureConfiguration DomainGpoBlockedInheritance DomainGpoBrokenGpos DomainGpoBrokenLinks DomainGpoDangerousUserRightsExposure DomainGpoDefaultPoliciesRecentChanges DomainGpoDefenderAsrPolicy DomainGpoDelegationExposure DomainGpoDuplicates DomainGpoEventLogPolicyBaseline DomainGpoEveryoneAuthorizedGpo DomainGpoEveryoneIncludesAnonymousDisabled DomainGpoExternalArtifacts DomainGpoFiles DomainGpoFirewallProfilesBaseline DomainGpoFirewallScriptBlock DomainGpoFolderOptionsExposure DomainGpoHardenedPaths DomainGpoInventoryHealth DomainGpoKdcProxyPolicy DomainGpoKerberosClientArmoring DomainGpoKerberosCryptoBaseline DomainGpoKerberosKdcArmoring DomainGpoKerberosPacHardeningBaseline DomainGpoLapsDsrmPolicy DomainGpoLapsPolicy DomainGpoLdapHardening DomainGpoLimitBlankPasswordUse DomainGpoLinks DomainGpoList DomainGpoLlmnrWdigestConfiguration DomainGpoLogonUxUacBaseline DomainGpoLsaProtectionBaseline DomainGpoMissingSysvolFiles DomainGpoNameResolutionBaseline DomainGpoNetlogonConfiguration DomainGpoNetSessionHardening DomainGpoNoLmHash DomainGpoNtlmRestrictConfiguration DomainGpoOrganizationalUnit DomainGpoOwners DomainGpoPassword DomainGpoPermissionBaseline DomainGpoPermissionConsistency DomainGpoPermissions DomainGpoPermissionsAdministrative DomainGpoPermissionsRead DomainGpoPermissionsRoot DomainGpoPermissionsUnknown DomainGpoPku2uPolicy DomainGpoPowerShellAuditing DomainGpoPowerShellLoggingBaseline DomainGpoRdpRedirectionPolicyBaseline DomainGpoRecoveryConsoleAutoAdminLogon DomainGpoRedirect DomainGpoSchannelPolicyBaseline DomainGpoScriptPreferenceExposure DomainGpoServicePolicy DomainGpoSysvolPosture DomainGpoTerminalServicesTimeout DomainGpoTimeServicePolicy DomainGpoUpdates DomainGpoWinRmPolicyBaseline DomainGpoWpadHardeningExample DomainGpoWsusConfiguration
TestimoX.Rules.Domain.Groups (10)
DomainPrimaryGroupReadability DomainPrivilegedGroupOwnerRisk DomainPrivilegedGroupRecentChanges DomainUnprivilegedGroupRecentChanges GroupsCriticalMembership GroupsForeignSecurityPrincipalsPrivilegedExposure GroupsOperatorsEmpty GroupsOrphanedForeignSecurityPrincipals GroupsPreWindows2000Exposure GroupsPrivilegedDelegationRisk
TestimoX.Rules.Domain.Kerberos (6)
TestimoX.Rules.Domain.PKI (6)
TestimoX.Rules.Domain.Security (3)
TestimoX.Rules.Domain.SYSVOL (5)
TestimoX.Rules.Domain.Technical (1)
TestimoX.Rules.Domain.Trusts (3)
TestimoX.Rules.Domain.Users (15)
AdminPrivilegedActivityPosture DomainExchangeUserAliasPosture DomainUsersCredentialHygiene DomainUsersSmartCardConfiguration UsersAdminProtection UsersBuiltInAdministrator UsersGppStoredPasswords UsersGuestAccount UsersPasswordNeverExpires UsersPrimaryGroupCompliance UsersPrivilegedDelegationProtection UsersPrivilegedEmailPresent UsersPrivilegedInactivity UsersStaleAccounts UsersUnconstrainedDelegation
TestimoX.Rules.DomainController.Audit (2)
TestimoX.Rules.DomainController.Backup (1)
TestimoX.Rules.DomainController.Dns (4)
TestimoX.Rules.DomainController.Health (4)
TestimoX.Rules.DomainController.Ldap (3)
TestimoX.Rules.DomainController.Netlogon (1)
TestimoX.Rules.DomainController.Network (1)
TestimoX.Rules.DomainController.PKI (1)
TestimoX.Rules.DomainController.Security (31)
DomainControllerAppControlRuntimeLocal DomainControllerBackupPostureRuntimeLocal DomainControllerBrowserPolicyRuntimeLocal DomainControllerCertificatePostureRuntimeLocal DomainControllerCredentialPostureLocal DomainControllerDiskSpacePosture DomainControllerDsaFileLocationPostureLocal DomainControllerExploitProtectionRuntimeLocal DomainControllerFeaturePostureRuntimeLocal DomainControllerFileSystemLocal DomainControllerLanManager DomainControllerLocalIdentityRuntimeLocal DomainControllerLogonUxUacLocal DomainControllerLsaProtectionLocal DomainControllerMdmPostureRuntimeLocal DomainControllerMssLegacyNetworkPostureLocal DomainControllerNetSessionEnumerationLocal DomainControllerNetworkHardeningRuntimeLocal DomainControllerNtdsParametersLocal DomainControllerNullSession DomainControllerOfficePostureRuntimeLocal DomainControllerOptionalFeaturePostureLocal DomainControllerPersistencePostureRuntimeLocal DomainControllerPlatformSecurityRuntimeLocal DomainControllerPortPosture DomainControllerPrivacyPostureRuntimeLocal DomainControllerRdpSecurityLocal DomainControllerRemoteAccessRuntimeLocal DomainControllerSchannelProtocolsLocal DomainControllerVsCodeExtensionsRuntimeLocal DomainControllerWinRmSecurityLocal
TestimoX.Rules.DomainController.Services (2)
TestimoX.Rules.DomainController.Servicing (3)
TestimoX.Rules.DomainController.Servicing.DomainControllerRebootCadence (1)
TestimoX.Rules.DomainController.Smb (4)
TestimoX.Rules.DomainController.Sysvol (1)
TestimoX.Rules.DomainController.Time (3)
TestimoX.Rules.Dummy (5)
TestimoX.Rules.Forest (20)
DummyForestBackup ForestBackupMetadataPosture ForestConfigurationPartitionContainerOwnerPosture ForestConfigurationPartitionOwnerPosture ForestDhcpInfrastructurePosture ForestDirectoryDiscoveryDiagnostics ForestDuplicateComputerHostnames ForestFsmoRolePosture ForestFunctionalLevel ForestKdsRootKeyPosture ForestKerberosDuplicateSpns ForestOptionalFeaturePosture ForestRecycleBinAndLifetimes ForestReplicationPosture ForestSiteConnectionPosture ForestSiteLinkPosture ForestSubnetCoveragePosture ForestTrustsOverview RootDseAnonymousBind StaleAdminAccountsManual
TestimoX.Rules.Forest.PKI (3)
TestimoX.Rules.Forest.Schema (4)
TestimoX.Rules.Placeholders.PurpleKnight (187)
PkPlaceholder_AbnormalPasswordRefreshRule PkPlaceholder_AccountswithaltSecurityIdentitiesconfiguredRule PkPlaceholder_AccountswithConstrainedDelegationconfiguredtoghostSPNRule PkPlaceholder_AccountswithConstrainedDelegationconfiguredtokrbtgtRule PkPlaceholder_ADCertificateAuthoritywithWebEnrollmentESC8Rule PkPlaceholder_AdministrativeunitsarenotbeingusedRule PkPlaceholder_AdminswitholdpasswordsRule PkPlaceholder_ADobjectscreatedwithinthelast10daysRule PkPlaceholder_ADprivilegedusersthataresyncedtoEntraIDRule PkPlaceholder_AnonymousaccesstoActiveDirectoryenabledRule PkPlaceholder_AnonymousNSPIaccesstoADenabledRule PkPlaceholder_ApplicationexpiredsecretsandcertificatesRule PkPlaceholder_ApplicationinstancepropertylockdisabledRule PkPlaceholder_ApplicationnameandgeographiclocationadditionalcontextsaredisabledonMFARule PkPlaceholder_BuiltindomainAdministratoraccountusedwithinthelasttwoweeksRule PkPlaceholder_BuiltindomainAdministratoraccountwitholdpassword180daysRule PkPlaceholder_BuiltinguestaccountisenabledRule PkPlaceholder_CertificateBasedAuthenticationPersistenceRule PkPlaceholder_CertificatetemplatesthatallowrequesterstospecifyasubjectAltNameRule PkPlaceholder_Certificatetemplateswith3ormoreinsecureconfigurationsRule PkPlaceholder_ChangestoADDisplaySpecifiersinthepast90daysRule PkPlaceholder_ChangestoDefaultDomainPolicyorDefaultDomainControllersPolicyinthelast7daysRule PkPlaceholder_Changestodefaultsecuritydescriptorschemainthelast90daysRule PkPlaceholder_ChangestoMSLAPSreadpermissionsRule PkPlaceholder_ChangestoPreWindows2000CompatibleAccessGroupmembershipRule PkPlaceholder_Changestoprivilegedgroupmembershipinthelast7daysRule PkPlaceholder_Changestounprivilegedgroupmembershipinthelast7daysRule PkPlaceholder_CheckforguestshavingpermissiontoinviteotherguestsRule PkPlaceholder_CheckforriskyAPIpermissionsgrantedtoapplicationserviceprincipalsRule PkPlaceholder_CheckforuserswithweakornoMFARule PkPlaceholder_CheckiflegacyauthenticationisallowedRule PkPlaceholder_ComputerAccountsinPrivilegedGroupsRule PkPlaceholder_ComputeraccounttakeoverthroughKerberosResourceBasedConstrainedDelegationRBCDRule PkPlaceholder_ComputeroruseraccountswithSPNthathaveunconstraineddelegationRule PkPlaceholder_ComputerswitholderOSversionsRule PkPlaceholder_Computerswithpasswordlastsetover90daysagoRule PkPlaceholder_ConditionalAccesspoliciescontainprivateIPaddressesRule PkPlaceholder_ConditionalAccesspoliciesthatcontainMFATrustedIPsRule PkPlaceholder_ConditionalAccessPolicydoesnotrequireMFAonprivilegedaccountsRule PkPlaceholder_ConditionalAccessPolicythatdisableadmintokenpersistenceRule PkPlaceholder_ConditionalAccessPolicythatdoesnotrequireapasswordchangefromhighriskusersRule PkPlaceholder_ConditionalAccessPolicythatdoesnotrequireMFAwhensigninriskhasbeenidentifiedRule PkPlaceholder_ConditionalAccesspolicywithContinuousAccessEvaluationdisabledRule PkPlaceholder_CustombannedpasswordprotectionnotinuseRule PkPlaceholder_DangerouscontrolpathsexposecertificatecontainersRule PkPlaceholder_DangerouscontrolpathsexposecertificatetemplatesRule PkPlaceholder_DangerousGPOlogonscriptpathRule PkPlaceholder_DangerousTrustAttributeSetRule PkPlaceholder_DangeroususerrightsgrantedbyGPORule PkPlaceholder_DetectMFApolicychangesforgroupsandusersRule PkPlaceholder_DistributedCOMUsersgrouporPerformanceLogUsersgrouparenotemptyRule PkPlaceholder_DomainControllerownerisnotanadministratorRule PkPlaceholder_DomainControllersininconsistentstateRule PkPlaceholder_DomainControllersthathavenotauthenticatedtothedomainformorethan45daysRule PkPlaceholder_DomainControllerswitholdpasswordsRule PkPlaceholder_DomainControllerswithResourceBasedConstrainedDelegationRBCDenabledRule PkPlaceholder_DomainswithobsoletefunctionallevelsRule PkPlaceholder_DomaintrusttoathirdpartydomainwithoutquarantineRule PkPlaceholder_EnabledadminaccountsthatareinactiveRule PkPlaceholder_EnsureallnonprivilegeduserscancompleteMFARule PkPlaceholder_EnterpriseapplicationsusingSAMLforSSORule PkPlaceholder_EnterpriseKeyAdminswithfullaccesstodomainRule PkPlaceholder_EntraConnectsyncaccountpasswordresetRule PkPlaceholder_EntracustomRoleswithriskypermissionsRule PkPlaceholder_EntraIDprivilegedusersthatarealsoprivilegedinADRule PkPlaceholder_EntratenantissusceptibletoHiddenConsentGrantattackRule PkPlaceholder_EphemeralAdminsRule PkPlaceholder_EvidenceofMimikatzDCShadowattackRule PkPlaceholder_FGPPnotappliedtoGlobalgroupRule PkPlaceholder_FIDO2AttestationisnotenforcedRule PkPlaceholder_ForeignSecurityPrincipalsinPrivilegedGroupRule PkPlaceholder_Forestcontainsmorethan50privilegedaccountsRule PkPlaceholder_GlobalAdministratorsthatsignedinduringthelast14daysRule PkPlaceholder_GMSAnotinuseRule PkPlaceholder_GMSAobjectswitholdpasswordsRule PkPlaceholder_GPOlinkingdelegationattheADSitelevelRule PkPlaceholder_GPOlinkingdelegationatthedomaincontrollerOUlevelRule PkPlaceholder_GPOlinkingdelegationatthedomainlevelRule PkPlaceholder_GPOWeakLMHashstorageenabledRule PkPlaceholder_GPOwithScheduledTasksconfiguredRule PkPlaceholder_Guestaccountsthatwereinactiveformorethan30daysRule PkPlaceholder_Guestinvitesnotacceptedinlast30dayRule PkPlaceholder_GuestusersarenotrestrictedRule PkPlaceholder_HighprivilegedcustomrolesRule PkPlaceholder_InheritanceenabledonAdminSDHolderobjectRule PkPlaceholder_KerberosKRBTGTaccountwitholdpasswordRule PkPlaceholder_KerberosprotocoltransitiondelegationconfiguredRule PkPlaceholder_KrbtgtaccountwithResourceBasedConstrainedDelegationRBCDenabledRule PkPlaceholder_LDAPsigningisnotrequiredonDomainControllersRule PkPlaceholder_Lessthan2GlobalAdministratorsexistRule PkPlaceholder_ListofRiskyusersmediumorhighlevelRule PkPlaceholder_MFAbombingattackoccurredinthepastdayRule PkPlaceholder_MFAnotconfiguredforprivilegedaccountsRule PkPlaceholder_Morethan10PrivilegedAdministratorsexistRule PkPlaceholder_Morethan5GlobalAdministratorsexistRule PkPlaceholder_NewAPItokenwascreatedRule PkPlaceholder_NewpermissionhasbeengrantedtoagroupRule PkPlaceholder_NewpermissionhasbeengrantedtoauserRule PkPlaceholder_NewSuperAdminpermissionhasbeengrantedtoagroupRule PkPlaceholder_NewSuperAdminpermissionhasbeengrantedtoauserRule PkPlaceholder_NonadminuserscancreatetenantsRule PkPlaceholder_NonadminuserscanregistercustomapplicationsRule PkPlaceholder_NondefaultaccesstoDPAPIkeyRule PkPlaceholder_NondefaultprincipalswithDCSyncrightsonthedomainRule PkPlaceholder_NondefaultvalueonmsMcsAdmPwdSearchFlagsRule PkPlaceholder_NonprivilegeduserswithaccesstogMSApasswordsRule PkPlaceholder_NonstandardschemapermissionsRule PkPlaceholder_NonsyncedEntrauserthatiseligibleforaprivilegedroleRule PkPlaceholder_NTFRSSYSVOLReplicationRule PkPlaceholder_ObjectsinprivilegedgroupswithoutadminCount1SDPropRule PkPlaceholder_ObjectswithconstraineddelegationconfiguredRule PkPlaceholder_ObjectswithReanimateTombstonesextendedrightRule PkPlaceholder_OperatorgroupsnolongerprotectedbyAdminSDHolderandSDPropRule PkPlaceholder_OperatorsGroupsthatarenotemptyRule PkPlaceholder_OUpermissionsenablingBadSuccessordMSAescalationRule PkPlaceholder_OutboundforesttrustwithSIDHistoryenabledRule PkPlaceholder_PasswordhashsynchronizationisnotenabledRule PkPlaceholder_PasswordpolicycheckRule PkPlaceholder_PermanentActivePrivilegedRoleAssignmentRule PkPlaceholder_PermissionchangesonAdminSDHolderobjectRule PkPlaceholder_PrimaryuserswithSPNnotsupportingAESencryptiononKerberosRule PkPlaceholder_PrincipalswithconstrainedauthenticationdelegationenabledforaDCserviceRule PkPlaceholder_PrincipalswithconstraineddelegationusingprotocoltransitionenabledforaDCserviceRule PkPlaceholder_PrintspoolerserviceisenabledonaDCRule PkPlaceholder_PrivilegedaccountswithapasswordthatneverexpiresRule PkPlaceholder_PrivilegedaccountswithmailboxRule PkPlaceholder_PrivilegedgroupcontainsguestaccountRule PkPlaceholder_PrivilegedobjectswithunprivilegedownersRule PkPlaceholder_PrivilegedusercredentialscachedonRODCRule PkPlaceholder_PrivilegedusersthataredisabledRule PkPlaceholder_PrivilegeduserswithSPNdefinedRule PkPlaceholder_PrivilegedUserswithWeakPasswordPolicyRule PkPlaceholder_ProhibitedEntraIDRolesAssignedRule PkPlaceholder_ProtectedUsersgroupnotinuseRule PkPlaceholder_QuerypoliciesthathavetheattributeofLDAPdenylistsetRule PkPlaceholder_RC4orDESencryptiontypearesupportedbyDomainControllersRule PkPlaceholder_RecentprivilegedaccountcreationactivityRule PkPlaceholder_RecentSIDHistorychangesonobjectsRule PkPlaceholder_ReportsuspiciousMFAactivitydisabledRule PkPlaceholder_ResourceBasedConstrainedDelegationappliedtoAZUREADSSOACCaccountRule PkPlaceholder_ReversiblepasswordsfoundinGPOsRule PkPlaceholder_RiskyRODCcredentialcachingRule PkPlaceholder_SecuritydefaultsnotenabledRule PkPlaceholder_SecurityquestionsareinuseRule PkPlaceholder_SelfservicepasswordresetenabledforprivilegedrolesRule PkPlaceholder_ShadowCredentialsonprivilegedobjectsRule PkPlaceholder_SmartcardpasswordrotationdisabledRule PkPlaceholder_SMBSigningisnotrequiredonDomainControllersRule PkPlaceholder_SMBv1isenabledonDomainControllersRule PkPlaceholder_SSOcomputeraccountwithpasswordlastsetover90daysagoRule PkPlaceholder_SuspiciouscredentialsonMicrosoftserviceprincipalsRule PkPlaceholder_SuspiciousDirectorySynchronizationAccountsrolememberRule PkPlaceholder_SYSVOLExecutableChangesRule PkPlaceholder_TrustaccountswitholdpasswordsRule PkPlaceholder_UnexpectedaccountsinCertPublishersGroupRule PkPlaceholder_UnprivilegedaccountswithadminCount1Rule PkPlaceholder_UnprivilegedownerofaprivilegedgroupRule PkPlaceholder_UnprivilegedprincipalsasDNSAdminsRule PkPlaceholder_UnprivilegeduserscanaddcomputeraccountstothedomainRule PkPlaceholder_UnresolvedEntraIDprivilegedrolemembersRule PkPlaceholder_UnrestricteduserconsentallowedRule PkPlaceholder_UnsecuredDNSconfigurationRule PkPlaceholder_UseraccountsthatstorepasswordswithreversibleencryptionRule PkPlaceholder_UseraccountsthatuseDESencryptionRule PkPlaceholder_UseraccountsusingSmartCardauthenticationwitholdpasswordRule PkPlaceholder_UseraccountswithpasswordnotrequiredRule PkPlaceholder_Useractivationinthelast7daysRule PkPlaceholder_UserconsentisallowedforriskyapplicationsRule PkPlaceholder_Userdeactivationinthelast7daysRule PkPlaceholder_UsersandcomputerswithnondefaultPrimaryGroupIDsRule PkPlaceholder_UsersandcomputerswithoutreadablePGIDRule PkPlaceholder_UsersarenotusingtheirprivilegedrolesRule PkPlaceholder_UserscancreatesecuritygroupsRule PkPlaceholder_Usersordevicesinactiveforatleast90daysRule PkPlaceholder_UserswithKerberospreauthenticationdisabledRule PkPlaceholder_UserswitholdpasswordsRule PkPlaceholder_UserswithoutMultiFactorAuthenticationMFARule PkPlaceholder_UserswithPasswordNeverExpiresflagsetRule PkPlaceholder_UserswithpermissionstosetServerTrustAccountRule PkPlaceholder_UserswithSPNdefinedRule PkPlaceholder_UserswiththeattributeuserPasswordsetRule PkPlaceholder_WeakcertificatecipherRule PkPlaceholder_WellknownprivilegedSIDsinSIDHistoryRule PkPlaceholder_WritableshortcutsfoundinGPORule PkPlaceholder_WriteaccesstoRBCDonDCRule PkPlaceholder_WriteaccesstoRBCDonkrbtgtaccountRule PkPlaceholder_ZerologonvulnerabilityRule
TestimoX.Rules.Servers.Gpo (1)
TestimoX.Rules.Workstations.Gpo (1)
TestimoX.RulesPowerShell (6)
TestimoX.RulesPowerShell.Generated (4)
TestimoX.RulesPowerShell.RulesGenerated.Domain (34)
ComputersUnsupportedMainstreamRule ComputersUnsupportedRule DHCPAuthorizedRule DNSForwardersRule DNSScavengingForPrimaryDNSServerRule DNSZonesAgingRule DNSZonesDomain0ADELRule DNSZonesForest0ADELRule DomainControllersRule DomainFSMORolesRule DomainLDAPRule DuplicateObjectsRule ExchangeUsersRule GroupPolicyADMRule GroupPolicyOwnersRule GroupPolicyPermissionConsistencyRule GroupPolicyPermissionRule GroupPolicyRule GroupPolicySysvolRule MachineQuotaRule NetLogonOwnerRule OrganizationalUnitsEmptyRule OrganizationalUnitsProtectedRule OrphanedSecurityPrincipalsRule PasswordComplexityRule SecurityComputersRule SecurityDelegatedObjectsRule SecurityGroupsAccountOperatorsRule SecurityGroupsSchemaAdminsRule SecurityKRBGTRule SecurityUsersAccountAdministratorRule SecurityUsersRule SysVOLDFSRRule WellKnownFoldersRule
TestimoX.RulesPowerShell.RulesGenerated.DomainController (37)
DCDNSForwadersRule DFSRule DiagnosticsRule DiskSpaceRule DnsNameServersRule DNSResolveExternalRule DNSResolveInternalRule EventLogsRule FileSystemRule GroupPolicySYSVOLDCRule InformationRule LanManagerSettingsRule LanManServerRule LdapInsecureBindingsRule LdapRule MSSLegacyRule NetSessionEnumerationRule NetworkCardSettingsRule NTDSParametersRule OperatingSystemRule PingableRule PortsRule RDPPortsRule RDPSecurityRule ServicesRule ServiceWINRMRule SMBProtocolsRule SMBSharesPermissionsRule SMBSharesRule TimeSettingsRule TimeSynchronizationExternalRule TimeSynchronizationInternalRule UNCHardenedPathsRule WindowsFeaturesOptionalRule WindowsRemoteManagementRule WindowsRolesAndFeaturesRule WindowsUpdatesRule
TestimoX.RulesPowerShell.RulesGenerated.Forest (18)
BackupRule DuplicateSPNRule ForestConfigurationPartitionOwnersContainerRule ForestConfigurationPartitionOwnersRule ForestDHCPRule ForestFSMORolesRule ForestSubnetsRule OptionalFeaturesRule OrphanedAdminsRule ReplicationRule ReplicationStatusRule RootKDSRule SiteLinksConnectionsRule SiteLinksRule SitesRule TombstoneLifetimeRule TrustsRule VurnerableSchemaClassRule
TestimoX.Scoring (6)
TestimoX.Services (34)
MetricsDuration MetricsLatency ServiceActionResult ServiceApiKeyInfo ServiceBaselineInfo ServiceBaselineReader ServiceConfigDeployment ServiceConfigReader ServiceControllerManager ServiceEndpointMetrics ServiceExecutableResolver ServiceFileDeployer ServiceHealthStatus ServiceHistoryReader ServiceInstaller ServiceInstallRequest ServiceInstallResult ServiceInstanceMetrics ServiceLogReader ServiceMetricsSnapshot ServiceNameValidator ServicePathResolver ServicePaths ServiceProcessHealth ServiceProcessResult ServiceProcessRunner ServiceRunHistory ServiceRuntimeStatus ServiceRuntimeStatusBuilder ServiceSchedulePreviewer ServiceSinkMetrics ServiceStatusInfo ServiceStatusReader ServiceUninstallResult