TestimoX

API Reference

Class

AclAssessmentService

Edit on GitHub
Namespace ADPlayground.Acl
Assembly ADPlayground
Source ADPlayground/ACL/AclAssessmentService.cs:70
Modifiers static

Central ACL assessment utilities: turn raw ACEs or findings into standardized, typed results. Hosts and analyzers should use this to avoid duplicating masks and special-cases.

Inheritance

  • Object
  • AclAssessmentService

Methods

AssessAce 2 overloads
public static AclAceAssessment AssessAce(String domainName, RawDirectoryAce ace, String objectDistinguishedName = null, Boolean preferFastIdentityResolution = false) #
ADPlayground/ACL/AclAssessmentService.cs:139
Returns: AclAceAssessment

Assess a single ACE in the context of a domain and directory object.

Parameters

arg1 System.String requiredposition: 0
arg2 System.DirectoryServices.ActiveDirectoryAccessRule requiredposition: 1
arg3 System.String = null optionalposition: 2
arg4 System.Boolean = false optionalposition: 3
AssessAce(System.String domainName, ADPlayground.Acl.RawDirectoryAce ace, System.String objectDistinguishedName, System.Boolean preferFastIdentityResolution) #

Assess a raw directory ACE without projecting it through ActiveDirectoryAccessRule.

Parameters

domainName System.String required
ace ADPlayground.Acl.RawDirectoryAce required
objectDistinguishedName System.String required
preferFastIdentityResolution System.Boolean required
AssessGpoFinding(System.String arg1, ADPlayground.Gpo.GpoAclFinding arg2) #

Assess a GPO-specific finding (legacy analyzer output) using centralized rules.

Parameters

arg1 System.String required
arg2 ADPlayground.Gpo.GpoAclFinding required