TestimoX

API Reference

Class

SidHistoryDangerousEvaluator

Edit on GitHub
Namespace ADPlayground.Trusts
Assembly ADPlayground
Source ADPlayground/Trusts/SidHistoryDangerousEvaluator.cs:39
Modifiers static

Evaluates sIDHistory values and produces a view of entries with privileged or risky RIDs (e.g., 500/512/519/544/548/549/550/551/552).

Inheritance

  • Object
  • SidHistoryDangerousEvaluator

Methods

public static View Evaluate(String domainName) #
ADPlayground/Trusts/SidHistoryDangerousEvaluator.cs:39
Returns: View

Runs the evaluation for a given domain.

Parameters

domainName System.String requiredposition: 0
DNS name of the domain.

Returns

Domain view containing risky sIDHistory items.