API Reference
Class
GpoAclExposureSnapshot
Provides a reusable view of GPO ACL assignments for security analysis.
Inheritance
- Object
- GpoAclExposureSnapshot
Constructors
public GpoAclExposureSnapshot() #Inherited Methods
Properties
public String DomainName { get; set; } #Domain name for which the snapshot was collected.
public IReadOnlyList<GpoAclExposureRecord> Findings { get; set; } #All ACL findings discovered on GPOs within the domain.
public IReadOnlyList<GpoAclExposureRecord> AnonymousAssignments { get; set; } #Findings where the ANONYMOUS LOGON SID holds write permissions.
public IReadOnlyList<GpoAclExposureRecord> EveryoneAssignments { get; set; } #Findings where the Everyone well-known SID holds write permissions.
public IReadOnlyList<GpoAclExposureRecord> AuthenticatedUsersAssignments { get; set; } #Findings where Authenticated Users hold write permissions.
public IReadOnlyList<GpoAclExposureRecord> AnonymousApplyAssignments { get; set; } #Findings where ANONYMOUS LOGON is granted the Apply Group Policy extended right.
public IReadOnlyList<GpoAclExposureRecord> EveryoneApplyAssignments { get; set; } #Findings where Everyone is granted the Apply Group Policy extended right.