TestimoX

API Reference

Class

DcShadowIndicatorService

Edit on GitHub
Namespace ADPlayground.Security
Assembly ADPlayground
Source ADPlayground/Security/DcShadowIndicatorService.cs:101
Modifiers static

Detects principals with replication extended rights (DCShadow indicators) on critical containers. Low-priv: reads ACLs via DirectoryEntry.ObjectSecurity.

Inheritance

  • Object
  • DcShadowIndicatorService

Methods

public static View Evaluate(String domainName) #
ADPlayground/Security/DcShadowIndicatorService.cs:101
Returns: View

Evaluates replication extended-right indicators for the specified domain.

Parameters

domainName System.String requiredposition: 0
DNS name of the Active Directory domain.

Returns

Aggregated View with discovered findings.