TestimoX

API Reference

Class

AdminPrivilegedActivityPostureService

Edit on GitHub
Namespace ADPlayground.Users
Assembly ADPlayground
Source ADPlayground/DNSDebugLogging/DnsLogIpSummary.cs:15
Modifiers static

Provides a consolidated view of privileged account activity (recent/inactive) and password age posture for a given domain. This service composes existing evaluators to keep TestimoX rules thin and focused on presentation.

Inheritance

  • Object
  • AdminPrivilegedActivityPostureService

Methods

public static async Task<View> EvaluateAsync(String domainName, Int32 recentThresholdDays = 14, Int32 inactiveThresholdDays = 35, Int32 passwordMaxAgeDays = 365, Boolean resolveTrueLastLogon = false, Boolean includeDisabledAccounts = false, CancellationToken cancellationToken = null) #
Returns: Task<View>

Builds the combined view for the specified domain using provided thresholds.

Parameters

domainName System.String requiredposition: 0
DNS domain name.
recentThresholdDays System.Int32 = 14 optionalposition: 1
Recent logon threshold in days (default 14).
inactiveThresholdDays System.Int32 = 35 optionalposition: 2
Inactive threshold in days (default 35).
passwordMaxAgeDays System.Int32 = 365 optionalposition: 3
Maximum allowed password age in days (default 365).
resolveTrueLastLogon System.Boolean = false optionalposition: 4
When true, resolves authoritative lastLogon across DCs (slower).
includeDisabledAccounts System.Boolean = false optionalposition: 5
When true, includes disabled privileged accounts in inactivity analysis.
cancellationToken System.Threading.CancellationToken = null optionalposition: 6
Cancellation token.

Returns

Materialized combined View.