TestimoX

API Reference

Class

SidHistoryUsageScanRequest

Namespace ADPlayground.Acl
Assembly ADPlayground
Modifiers sealed

Input options for SIDHistory usage scans (NTFS + SMB share ACLs).

Inheritance

  • Object
  • SidHistoryUsageScanRequest

Constructors

public SidHistoryUsageScanRequest() #

Properties

public IReadOnlyList<String> Paths { get; set; } #

Root paths to scan (local or UNC).

public IReadOnlyList<String> SharePaths { get; set; } #

Explicit share paths to scan (UNC roots).

public IReadOnlyList<String> ComputerNames { get; set; } #

Computer names to enumerate shares from.

public Boolean IncludeNtfs { get; set; } #

Include NTFS ACL scanning.

public Boolean IncludeShareAcls { get; set; } #

Include SMB share ACL scanning.

public Boolean ResolveIdentities { get; set; } #

Resolve identities for flagged SIDs.

public Boolean CorrelateSidHistory { get; set; } #

Attempt SIDHistory correlation.

public Boolean IncludeAllClassifications { get; set; } #

Include all classifications (otherwise only SIDHistory matches).

public Nullable<Int32> DepthLimit { get; set; } #

Maximum recursion depth; null for unlimited.

public Nullable<Int32> MaxDegreeOfParallelism { get; set; } #

Max degree of parallelism for ACL reads.

public Boolean FollowReparsePoints { get; set; } #

Follow reparse points (junctions/symlinks) when true.

public IReadOnlyList<String> AllowList { get; set; } #

Additional SID strings to allow.

public IReadOnlyList<String> DeadDomainPrefixes { get; set; } #

SID prefixes representing known defunct domains.

public Boolean IncludeTrusts { get; set; } #

Include trusted domains/forests when classifying SIDs.

public Func<String, Boolean> PathFilter { get; set; } #

Overrides for scanner path filter.