TestimoX

API Reference

Class

IdentityExposurePathFinder

Namespace ADPlayground.IdentityExposure
Assembly ADPlayground
Modifiers sealed

Computes costed paths through an identity exposure graph.

Inheritance

  • Object
  • IdentityExposurePathFinder

Constructors

public IdentityExposurePathFinder() #

Methods

public IReadOnlyList<IdentityExposureEdgeImpactRow> AnalyzeEdgeImpactToZones(IdentityExposureGraph graph, Int32 maxCandidates, CancellationToken cancellationToken = null) #
Returns: IReadOnlyList<IdentityExposureEdgeImpactRow>

Estimates risk-reduction impact for edges used by current cheapest paths into zones.

Parameters

graph ADPlayground.IdentityExposure.IdentityExposureGraph requiredposition: 0
Identity exposure graph.
maxCandidates System.Int32 requiredposition: 1
Maximum impact candidates to return.
cancellationToken System.Threading.CancellationToken = null optionalposition: 2
Cancellation token.

Returns

Edge impact rows ordered by blocked paths, cost increases, and affected path count.

public IReadOnlyList<IdentityExposureZoneIsolationRow> AnalyzeZoneIsolation(IdentityExposureGraph graph, CancellationToken cancellationToken = null) #
Returns: IReadOnlyList<IdentityExposureZoneIsolationRow>

Computes isolation metrics for each security zone in the graph.

Parameters

graph ADPlayground.IdentityExposure.IdentityExposureGraph requiredposition: 0
Identity exposure graph.
cancellationToken System.Threading.CancellationToken = null optionalposition: 1
Cancellation token.

Returns

Zone isolation rows ordered by exposure severity.

public IReadOnlyList<IdentityExposurePath> FindCheapestPathsToZones(IdentityExposureGraph graph, Int32 maxPaths, CancellationToken cancellationToken = null) #
Returns: IReadOnlyList<IdentityExposurePath>

Finds the cheapest path from each non-zone source to any zone object.

Parameters

graph ADPlayground.IdentityExposure.IdentityExposureGraph requiredposition: 0
Identity exposure graph.
maxPaths System.Int32 requiredposition: 1
Maximum number of paths to return.
cancellationToken System.Threading.CancellationToken = null optionalposition: 2
Cancellation token.

Returns

Cheapest paths ordered by cost and length.

public IReadOnlyList<IdentityExposurePath> FindRankedPathsToZones(IdentityExposureGraph graph, Int32 maxPaths, Int32 maxPathsPerSource = 3, Int32 maxDepth = 32, CancellationToken cancellationToken = null) #
Returns: IReadOnlyList<IdentityExposurePath>

Finds multiple ranked simple paths from non-zone sources to zone objects.

Parameters

graph ADPlayground.IdentityExposure.IdentityExposureGraph requiredposition: 0
Identity exposure graph.
maxPaths System.Int32 requiredposition: 1
Maximum total paths to return.
maxPathsPerSource System.Int32 = 3 optionalposition: 2
Maximum paths returned for each source object.
maxDepth System.Int32 = 32 optionalposition: 3
Maximum relationship depth. Values less than one use a safe default.
cancellationToken System.Threading.CancellationToken = null optionalposition: 4
Cancellation token.

Returns

Ranked simple paths ordered by cost, length, source, and target.

public IReadOnlyList<IdentityExposureReachabilityRow> FindReachableNodes(IdentityExposureGraph graph, String sourceId, Int32 maxDepth = 32, CancellationToken cancellationToken = null) #
Returns: IReadOnlyList<IdentityExposureReachabilityRow>

Finds all nodes reachable from a source, ordered by cheapest cost and shortest path.

Parameters

graph ADPlayground.IdentityExposure.IdentityExposureGraph requiredposition: 0
Identity exposure graph.
sourceId System.String requiredposition: 1
Source node identifier.
maxDepth System.Int32 = 32 optionalposition: 2
Maximum relationship depth. Values less than one use a safe default.
cancellationToken System.Threading.CancellationToken = null optionalposition: 3
Cancellation token.

Returns

Reachability rows for all reachable nodes except the source.