TestimoX

API Reference

Class

KerberosHealthStatus

Namespace ADPlayground
Assembly ADPlayground

Kerberos health status with all security metrics. This class should ideally be in a shared location if used across multiple projects.

Inheritance

  • Object
  • KerberosHealthStatus

Constructors

Properties

public String Domain { get; set; } #

Domain name assessed.

public DateTime CheckedAt { get; set; } #

Time of assessment in UTC.

public Int32 UnconstrainedDelegationCount { get; set; } #

Number of accounts with unconstrained delegation.

public Int32 DuplicateSpnCount { get; set; } #

Number of duplicate SPNs detected.

public Int32 WeakEncryptionCount { get; set; } #

Number of accounts using weak encryption.

public Int32 NoPreAuthCount { get; set; } #

Number of accounts without Kerberos pre-authentication.

public String[] UnconstrainedDelegationAccounts { get; set; } #

Sample of accounts with unconstrained delegation.

public String[] DuplicateSpns { get; set; } #

Sample of duplicate SPNs.

public String[] WeakEncryptionAccounts { get; set; } #

Sample of accounts using weak encryption.

public String[] NoPreAuthAccounts { get; set; } #

Sample of accounts without Kerberos pre-authentication.

public Boolean IsHealthy { get; set; } #

Indicates whether the domain is considered healthy.

public Int32 RiskScore { get; set; } #

Overall risk score from 0 to 100.

public String Error { get; set; } #

Error message produced during assessment, if any.

public String Summary { get; } #

Gets a summary description of the health status.