TestimoX

API Reference

Class

SpnHygieneSnapshot

Namespace ADPlayground.Kerberos.SpnHygieneService
Assembly ADPlayground
Modifiers sealed

Aggregated SPN hygiene information for a domain.

Inheritance

  • Object
  • SpnHygieneSnapshot

Constructors

Properties

public String DomainName { get; set; } #

DNS domain name evaluated.

public Int32 TotalServiceAccounts { get; set; } #

Total number of SPN-bearing accounts.

public List<String> PrivilegedWithSpn { get; set; } #

Privileged accounts that have SPNs set.

public List<SpnInvalidEntry> InvalidSpns { get; set; } #

Invalid or unresolvable SPNs with reasons.

public List<ValueTuple<String, Int32>> AccountsSpnCounts { get; set; } #

Per-account SPN counts for hotspot detection.

public Int32 MaxSpnCount { get; set; } #

Maximum SPN count across accounts.

public List<ServiceClassInfo> ServiceClasses { get; set; } #

All observed service classes with counts.

public List<ServiceClassInfo> TopClasses { get; set; } #

Top N service classes by occurrence.

public List<ServiceClassInfo> UnexpectedClasses { get; set; } #

Service classes that are not included in the allowlist.

public List<ServiceClassInfo> BlockedClassesUsed { get; set; } #

Service classes that appear in the blocklist.

public List<SpnInvalidEntry> UnresolvableTargets { get; set; } #

SPNs whose targets failed DNS resolution checks.