TestimoX

API Reference

Class

ScriptAnalysisResult

Namespace ADPlayground.Gpo
Assembly ADPlayground
Modifiers sealed

Heuristic analysis outcome for a script discovered in GPOs (startup/logon etc.). Designed for surfacing suspicious patterns without blocking execution.

Inheritance

  • Object
  • ScriptAnalysisResult

Constructors

Properties

public ScriptSeverity Severity { get; set; } #

Overall severity derived from findings/indicators.

public Int32 Score { get; set; } #

Numeric score used for ordering/triage.

public String[] Findings { get; set; } #

Human‑readable list of findings (e.g., "Downloads from internet").

public String[] Indicators { get; set; } #

Technical indicators (regex hits, keywords, URLs).

public String DecodedPayloadSnippet { get; set; } #

Optional snippet of decoded payload for review.

public String FilePath { get; set; } #

Script file path if known.

public String CommandLine { get; set; } #

Command line used by the GPO script entry (if applicable).