TestimoX

API Reference

Class

DangerousExtendedRightsService

Edit on GitHub
Namespace ADPlayground.Security
Assembly ADPlayground
Source ADPlayground/Security/DangerousExtendedRightsService.cs:124
Modifiers static

Minimal scan for dangerous extended or write rights on sensitive directory objects by non‑privileged principals. Targets: Domain root DN and CN=AdminSDHolder,CN=System,<domain>.

Inheritance

  • Object
  • DangerousExtendedRightsService

Methods

public static View Evaluate(String domainName, String domainDn = null) #
ADPlayground/Security/DangerousExtendedRightsService.cs:124
Returns: View

Evaluates dangerous extended or write rights on sensitive directory objects.

Parameters

domainName System.String requiredposition: 0
DNS name of the Active Directory domain.
domainDn System.String = null optionalposition: 1
Distinguished name of the domain (DC=...); required for evaluation.

Returns

Aggregated View with counts and detailed findings.