TestimoX .NET ADPlayground .NET ComputerX .NET TestimoX PowerShell ADPlayground PowerShell ComputerX PowerShell

Rules Pricing Docs Ecosystem

Back to project

Type filters

Namespace

Showing 1030 of 1030 types

Main API 6

CAdDataStager CAdPlan CBuiltinRules CComparer CConsoleTheme CDataBus

TestimoX 11

CConfigurationLoader CConsoleHelper CDiskInfo CDiskQuery CFileConfiguration CInternalLogger CLogEventArgs CLoggingMessages CLogMessageFormatter CTestimo CTestimoHostBuildInfo

Baselines 30

CBaselineCatalog CBaselineCisWindows11V3p0 CBaselineCisWindows11V4p0 CBaselineCisWindowsServer2016V3p0 CBaselineCisWindowsServer2019V3p0 CBaselineCisWindowsServer2022V4p0 CBaselineCisWindowsServer2025V1p0 CBaselineComparer CBaselineComparisonRow CBaselineControlVariants CBaselineListEntry CBaselineMsbWindows101507V1p0 CBaselineMsbWindows101607V1p0 CBaselineMsbWindows101809V1p0 CBaselineMsbWindows1122h2V22H2 CBaselineMsbWindows1123h2V23H2 CBaselineMsbWindows1124h2V24H2 CBaselineMsbWindowsServer2016V1p0 CBaselineMsbWindowsServer2019V1p0 CBaselineMsbWindowsServer2022V1p0 CBaselineMsbWindowsServer2025V1p0 CBaselinePingCastle CBaselinePurpleKnight CBaselineService CBaselineStigWindows11v2r4 CBaselineStigWindowsServer2016V2R10 CBaselineStigWindowsServer2019V3R5 CBaselineStigWindowsServer2022V2R5 CBaselineStigWindowsServer2025V1R0 ECxProduct

BaselinePingCastle 1

BaselinePurpleKnight 5

CPkField CPkFramework CPkIndicator CPkJsonPackage CPkProduct

Crosswalk 35

EAccountPolicyField EAuditSubcategory EBaselineAccountPolicy EBaselineAudit CBaselineMaps EBaselineNetlogon EBaselineRegistryKey EBaselineSecurityOption CCoverageRow CCrosswalkBuilder CCrosswalkBuilderExtensions CCrosswalkCatalog CCrosswalkDocMap CCrosswalkDocRow CCrosswalkMatchRow CCrosswalkService CCrosswalkSuggester CCrosswalkTypedMaps CDocEntry CDocSuggester EDocVendor CGapItem EHive CLinkBuilder EPingCastleDoc CPingCastleDocExt EPurpleKnightDoc CPurpleKnightDocExt CRuleBuilderLinkExtensions CRuleCrosswalk CRuleCrosswalkReport CUnifiedAnchorKey EVendor CVendorMatch CVendorRef

CrosswalkSuggester 1

CLinkSuggestion

DocSuggester 1

Caching 1

CRuleResultCache

Configuration 14

CConfigurationValidator CConfigurationWatcher EConsoleView CGeneratedFileResult CJsonUtil EOutputChannels EPreflightMode CPreflightModeParser EProgressLayout (Configuration) EProgressMode (Configuration) CRuleOverrideCatalog CRuleThresholds CTestimoConfiguration EVerbosityLevel

Engine 23

CAllowAllLicenseGate CCrosswalkReportConfig CEngineConfig CGpoConfig EHtmlCatalogSource CHtmlReportConfig EHtmlReportTheme IILicenseGate CInfrastructureConfig CJsonReportConfig CLdapConfig CLoggingConfig CPolicyCacheConfig EPowerShellCacheMode EPowerShellCatalogMode CPowerShellRuleCacheOptions CPowerShellRuntimeConfig CPowerShellRuntimeConfigFactory EReportFeature CReportingConfig CStagingConfig CSysvolConfig CWordReportConfig

Providers 4

CCliConfigurationProvider CEnvironmentConfigurationProvider IIConfigurationProvider CJsonConfigurationProvider

Rules 7

CRuleConfig CRuleConfigApplier CRuleConfigExporter CRuleExportResult CTestConfig CTestDetailsOverride CTestParametersOverride

Run 1

Runner 1

CTestimoConfigRunner

Service 15

CAdSnapshotConfig CComputersSnapshotConfig CExportConfig CGpoSnapshotConfig CGroupsSnapshotConfig CManagementConfig CPluginAllowRule CProtectedApiKey CServiceConfig CServiceConfigTemplateBuilder CServiceConfigTemplateOptions CSinkConfig CTestRunConfig CUsersSnapshotConfig CWebUiConfig

Export 2

EExportSelectionMode CExportShapeConfig

Schedule 3

CBackoffConfig CScheduleConfig EScheduleMode

Storage 5

EMatchPolicy ERawPolicy CStorageConfig CStorageConfigParser EStoragePolicy

TestimoConfiguration 2

EColorMode EComplianceDisplayMode

Crosswalk 2

CCrosswalkSnapshot CRuleCrosswalkDto

Definitions 55

EActionType EArea ECategory ECSharpRule CCSharpRuleExtensions CEmojiConverter CFilterCondition CFilteredResults EFilterOperator EHighlightColor EHighlightTarget EImportance CLogger EOperationType COperationTypeConverter CParameterRef EPermissionRequired CPowerShellHashtableAdapter EPowerShellMethod CPowerShellModule EPowerShellVersion CReportHints CReportSectionDescriptor CRequirementSet CRowHighlightDescriptor CRule CRuleComplete CRuleContainer CRuleContainerDomain CRuleContainerDomainController CRuleContainerForest ERuleCost CRuleExample CRuleGuidance CRuleLink ERuleLinkRelation ERuleSourceType CRuleVendorRef ERuleVisibility EScope EScoreKind CSource CSourceDetails CStatusColorHelper CSummaryCounterDescriptor CSummaryFieldDescriptor CSummaryParameterDescriptor CTest CTestDetails ETestimoEmoji ETestimoStatus CTestParameters CTestResult CTestState EViewMode

Discovery 2

CRuleDiscoveryEngine CRuleDiscoveryOptions

Exceptions 3

CActiveDirectoryConnectivityException CPowerShellModuleNotFoundException CRuleExecutionTimeoutException

Execution 47

CCentralizedErrorHandler CCorrelationContext CErrorRecoveryPolicy CExecutionConfiguration CExecutionConfigurationArtifacts CExecutionWizard EGroupingMode CInteractiveEntryPoints CPostRunPresenter CPreRunPresenter CRequirementEvaluator CRetryExecutor CRuleExecutionContext CRuleExecutionResult CRuleIntrospection CRuleInventoryEntry CRuleListEntry CRuleListing ERuleMigrationState CRuleOverview CRuleParameters CRuleResultEnvelope CRuleSelectionCancelledException CRuleSelectionOptions CRuleSelectionParsing ERuleSelectionProfile CRuleSelectionProfileCatalog CRuleSelectionProfileInfo CRuleSelectionService CRuleSelector CRuleSelectorOptions CRuleSummaryBuilder CRuleSummaryRow CRunEngineFactory EStagingMode CTestimoRunner CTestimoRunResult CToolingRuleCatalogRow CToolingRuleDataSeries CToolingRuleDiscoveryRequest CToolingRuleDiscoveryResult CToolingRuleExecutionResult EToolingRuleOrigin CToolingRuleRunRequest CToolingRuleRunResult CToolingRuleService CToolingRuleTestResult

Pipeline 3

IIRuleExecutionStep CRuleExecutionPipeline CStepResult

Middleware 2

IIRuleExecutionMiddleware CLoggingMiddleware

Steps 7

CEnvironmentSetupStep CHostPreflightStep CLdapPreflightStep CMethodExecutionStep CParameterValidationStep CResultProcessingStep CTestExecutionStep

Progress 26

CDefaultProgressRendererFactory CDeferredProgressSink CFullscreenSpectreProgressRenderer IILogSink IIProgressRenderer IIProgressRendererFactory IIProgressSink ELogLevel CNoopProgressRenderer CPlainTextProgressRenderer CProgressChannel EProgressLayout (Progress) EProgressMode (Progress) EProgressPreset SRunCompleted SRunHeartbeat SRunStarted CSpectreTuiProgressRenderer STaskCompleted STaskDescriptor ETaskOutcome STaskQueued STaskStarted ETaskStatusKind STaskUpdate STestSummary

Ui 4

IITestimoUi CPromptOutcome`1 CSpectreDefaultUiAdapter CSpectrePromptHelper

Infrastructure 9

CBackgroundOperation`1 CCircuitBreaker CDynamicSemaphoreManager CPooledPowerShell CProxyInfo CProxySettings CResourceLeakDetector CResourceManager CTaskExtensions

Licensing 1

CLicenseApplier

Planning 11

CAdDataPlanner CComputerDataRequirement CComputerDataUnion EDataSetKind CGpoDataRequirement CGroupDataRequirement IIDataBus CPlanningContext CRuleDataRequirements CUserDataRequirement CUserDataUnion

PowerShell 12

CAlternativeSourceStrategy IIModuleLoadStrategy CImportModuleStrategy CInstallAndImportStrategy CModuleDependencyResolver CModuleInfo CModuleLoadResult EModuleLoadStatus CModuleLoadSummary CPowerShellExecutionEnvironment CPowerShellModuleManager CRunspacePool

Profiling 1

Providers 6

CCSharpRuleProvider CEmbeddedResourceProvider CGeneratedPowerShellProvider IIRuleProvider CPowerShellRuleProvider CRuleProviderInfo

Reporting 1

Html 4

CGuidanceExportDto CHtmlReports CRenderValue CVendorAnchorDto

HtmlReports 1

RenderValue 4

CListValue CMapValue CScalarValue CTableValue

Json 2

CJsonReports CJsonStreamExporter

Word 1

Rules 4

CBuiltinRulesCSharp CExternalRuleImporter CLazyRuleLoader CRuleRegistry

Domain 2

CDomainObjectStatistics CKerberosSecurityCheck

Accounts 1

CDomainServiceAccountsUsage

Backup 1

CDomainBackupMetadata

Computers 12

CComputersAesDisabled CComputersObsoleteDomainControllers CComputersObsoleteServers CComputersObsoleteWorkstations CComputersPrimaryGroupCompliance CComputersRbcdExposure CComputersUnconstrainedDelegation CDomainComputerSecurityBaselinePosture CDomainComputersLapsCoverage CDomainComputersLapsDelegation CDomainComputersLapsDsrmDelegation CDomainComputersLifecycle

Delegation 6

CDomainAccountDelegationPosture CDomainBroadTrusteeDelegationExposure CDomainConstrainedDelegationOverview CDomainConstrainedDelegationTargets CDomainConstrainedDelegationToDcServices CDomainDelegationInventory

Dhcp 1

CDomainDhcpAuthorizationPosture

Directory 16

CAdminSdHolderAclDrift CDirectoryAclPostureInventory CDirectoryDangerousExtendedRights CDirectoryDefaultOuChanged CDirectoryDisplaySpecifiersForeignPaths CDirectoryEmptyOrganizationalUnits CDirectoryLdapConnectivity CDirectoryUnprotectedOus CDirectoryWellKnownFolderPosture CDomainAdminGroupDelegationRisk CDomainDsHeuristics CDomainDuplicateAccounts CDomainLapsOuDelegation CDomainObjectsRecentCreation CDomainOuDelegationRisk CDsHeuristicsCompliance

Dns 7

CDnsAdminsMembership CDnsDelegationRisk CDnsZonesDynamicUpdatesSecure CDnsZonesReadExposure CDnsZonesSecurity CDomainDnsApplicationPartitionOwnerPosture CDomainDnsForwarderConsistency

Domain 7

CDomainFineGrainedPasswordPolicies CDomainFsmoRolePosture CDomainFunctionalLevel CDomainMachineAccountQuota CDomainPasswordPolicy CDomainPasswordPolicyRollup CDomainRidMasterHealth

DomainControllers 7

CDomainControllersAuditPolicy CDomainControllersDeploymentHealth CDomainControllersDnsAndSiteRegistration CDomainControllersOverallPosture CDomainControllersRodcPolicy CDomainControllersRodcSysvolWriteAccess CDomainControllersSpoolerExposure

Gpo 67

CDomainAuthentication CDomainGpoAnalysis CDomainGpoAnonymousExposureConfiguration CDomainGpoBlockedInheritance CDomainGpoBrokenGpos CDomainGpoBrokenLinks CDomainGpoDangerousUserRightsExposure CDomainGpoDefaultPoliciesRecentChanges CDomainGpoDefenderAsrPolicy CDomainGpoDelegationExposure CDomainGpoDuplicates CDomainGpoEventLogPolicyBaseline CDomainGpoEveryoneAuthorizedGpo CDomainGpoEveryoneIncludesAnonymousDisabled CDomainGpoExternalArtifacts CDomainGpoFiles CDomainGpoFirewallProfilesBaseline CDomainGpoFirewallScriptBlock CDomainGpoFolderOptionsExposure CDomainGpoHardenedPaths CDomainGpoInventoryHealth CDomainGpoKdcProxyPolicy CDomainGpoKerberosClientArmoring CDomainGpoKerberosCryptoBaseline CDomainGpoKerberosKdcArmoring CDomainGpoKerberosPacHardeningBaseline CDomainGpoLapsDsrmPolicy CDomainGpoLapsPolicy CDomainGpoLdapHardening CDomainGpoLimitBlankPasswordUse CDomainGpoLinks CDomainGpoList CDomainGpoLlmnrWdigestConfiguration CDomainGpoLogonUxUacBaseline CDomainGpoLsaProtectionBaseline CDomainGpoMissingSysvolFiles CDomainGpoNameResolutionBaseline CDomainGpoNetlogonConfiguration CDomainGpoNetSessionHardening CDomainGpoNoLmHash CDomainGpoNtlmRestrictConfiguration CDomainGpoOrganizationalUnit CDomainGpoOwners CDomainGpoPassword CDomainGpoPermissionBaseline CDomainGpoPermissionConsistency CDomainGpoPermissions CDomainGpoPermissionsAdministrative CDomainGpoPermissionsRead CDomainGpoPermissionsRoot CDomainGpoPermissionsUnknown CDomainGpoPku2uPolicy CDomainGpoPowerShellAuditing CDomainGpoPowerShellLoggingBaseline CDomainGpoRdpRedirectionPolicyBaseline CDomainGpoRecoveryConsoleAutoAdminLogon CDomainGpoRedirect CDomainGpoSchannelPolicyBaseline CDomainGpoScriptPreferenceExposure CDomainGpoServicePolicy CDomainGpoSysvolPosture CDomainGpoTerminalServicesTimeout CDomainGpoTimeServicePolicy CDomainGpoUpdates CDomainGpoWinRmPolicyBaseline CDomainGpoWpadHardeningExample CDomainGpoWsusConfiguration

Groups 10

CDomainPrimaryGroupReadability CDomainPrivilegedGroupOwnerRisk CDomainPrivilegedGroupRecentChanges CDomainUnprivilegedGroupRecentChanges CGroupsCriticalMembership CGroupsForeignSecurityPrincipalsPrivilegedExposure CGroupsOperatorsEmpty CGroupsOrphanedForeignSecurityPrincipals CGroupsPreWindows2000Exposure CGroupsPrivilegedDelegationRisk

Kerberos 6

CDomainKerberosCryptoOverview CDomainKerberosDesConfiguration CDomainKerberosDuplicateSpns CDomainKerberosRc4Only CDomainServiceAccountsSpnHygiene CDomainSpnHygieneOverview

PKI 6

CPkiCaRocaConfirmed CPkiCaRocaSuspected CPkiCaWeakKeySize CPkiCaWeakRsaComponent CPkiCaWeakSignature CPkiEnrollmentHttpsRequired

Security 3

CDomainDcShadowIndicators CDomainShadowCredentialsRisk CKrbtgtHealth

SYSVOL 5

CDomainSysvolReplicationPosture CSysvolGpoConsistency CSysvolLegacyAdmFiles CSysvolNetlogonOwners CSysvolNetlogonPermissions

Technical 1

CDomainTechnicalAzureAdSso

Trusts 3

CDomainTrustsConfiguration CDomainTrustSidHistory CTrustAzureAdSso

Users 15

CAdminPrivilegedActivityPosture CDomainExchangeUserAliasPosture CDomainUsersCredentialHygiene CDomainUsersSmartCardConfiguration CUsersAdminProtection CUsersBuiltInAdministrator CUsersGppStoredPasswords CUsersGuestAccount CUsersPasswordNeverExpires CUsersPrimaryGroupCompliance CUsersPrivilegedDelegationProtection CUsersPrivilegedEmailPresent CUsersPrivilegedInactivity CUsersStaleAccounts CUsersUnconstrainedDelegation

Audit 2

CDomainControllerAuditPolicyLocal CDomainControllerEventLogPolicyLocal

Backup 1

CDomainControllerSystemStateBackup

Dns 4

CDomainControllerDnsDynamicUpdates CDomainControllerDnsPrimaryZoneNameServerPosture CDomainControllerDnsServerPosture CDomainControllerDnsZoneTransfer

Health 4

CDomainControllerDiagnosticPosture CDomainControllerInformationPosture CDomainControllerOperatingSystemPosture CDomainControllerPingPosture

Ldap 3

CDomainControllerLdapChannelBinding CDomainControllerLdapConnectivity CDomainControllerLdapSigning

Netlogon 1

CDomainControllerNetlogonSiteCoverage

Network 1

CDomainControllerNetworkAdapterPosture

PKI 1

CDomainControllerPkiEnrollmentChannelBinding

Security 31

CDomainControllerAppControlRuntimeLocal CDomainControllerBackupPostureRuntimeLocal CDomainControllerBrowserPolicyRuntimeLocal CDomainControllerCertificatePostureRuntimeLocal CDomainControllerCredentialPostureLocal CDomainControllerDiskSpacePosture CDomainControllerDsaFileLocationPostureLocal CDomainControllerExploitProtectionRuntimeLocal CDomainControllerFeaturePostureRuntimeLocal CDomainControllerFileSystemLocal CDomainControllerLanManager CDomainControllerLocalIdentityRuntimeLocal CDomainControllerLogonUxUacLocal CDomainControllerLsaProtectionLocal CDomainControllerMdmPostureRuntimeLocal CDomainControllerMssLegacyNetworkPostureLocal CDomainControllerNetSessionEnumerationLocal CDomainControllerNetworkHardeningRuntimeLocal CDomainControllerNtdsParametersLocal CDomainControllerNullSession CDomainControllerOfficePostureRuntimeLocal CDomainControllerOptionalFeaturePostureLocal CDomainControllerPersistencePostureRuntimeLocal CDomainControllerPlatformSecurityRuntimeLocal CDomainControllerPortPosture CDomainControllerPrivacyPostureRuntimeLocal CDomainControllerRdpSecurityLocal CDomainControllerRemoteAccessRuntimeLocal CDomainControllerSchannelProtocolsLocal CDomainControllerVsCodeExtensionsRuntimeLocal CDomainControllerWinRmSecurityLocal

Services 2

CDomainControllerCriticalServices CDomainControllerWebClientDisabled

Servicing 3

CDomainControllerRebootCadence CDomainControllerSecureBootCertificateRolloutLocal CDomainControllerWindowsUpdatePosture

DomainControllerRebootCadence 1

CRebootCadenceRow

Smb 4

CDomainControllerSmbCompliance CDomainControllerSmbSharePermissions CDomainControllerSmbShares CDomainControllerSmbSigning

Sysvol 1

CDomainControllerSysvolReplication

Time 3

CDomainControllerTimeServiceStatus CDomainControllerTimeSynchronizationExternal CDomainControllerTimeSynchronizationInternal

Dummy 5

CDummyDomainStaleAdminAccounts CDummyExampleNewRule CDummyForestReplicationStatus CDummySystemHealthCheck CDummyTestimoDebug

Forest 20

CDummyForestBackup CForestBackupMetadataPosture CForestConfigurationPartitionContainerOwnerPosture CForestConfigurationPartitionOwnerPosture CForestDhcpInfrastructurePosture CForestDirectoryDiscoveryDiagnostics CForestDuplicateComputerHostnames CForestFsmoRolePosture CForestFunctionalLevel CForestKdsRootKeyPosture CForestKerberosDuplicateSpns CForestOptionalFeaturePosture CForestRecycleBinAndLifetimes CForestReplicationPosture CForestSiteConnectionPosture CForestSiteLinkPosture CForestSubnetCoveragePosture CForestTrustsOverview CRootDseAnonymousBind CStaleAdminAccountsManual

PKI 3

CForestPkiConfiguration CForestPkiTemplatesConfiguration CForestPkiTemplatesRiskOverview

Schema 4

CForestExchangeSchemaVulnerabilityPosture CForestSchemaDefaultSecurityDescriptorChanges CForestSchemaJavaExposure CForestSchemaLapsAttributes

PurpleKnight 187

CPkPlaceholder_AbnormalPasswordRefreshRule CPkPlaceholder_AccountswithaltSecurityIdentitiesconfiguredRule CPkPlaceholder_AccountswithConstrainedDelegationconfiguredtoghostSPNRule CPkPlaceholder_AccountswithConstrainedDelegationconfiguredtokrbtgtRule CPkPlaceholder_ADCertificateAuthoritywithWebEnrollmentESC8Rule CPkPlaceholder_AdministrativeunitsarenotbeingusedRule CPkPlaceholder_AdminswitholdpasswordsRule CPkPlaceholder_ADobjectscreatedwithinthelast10daysRule CPkPlaceholder_ADprivilegedusersthataresyncedtoEntraIDRule CPkPlaceholder_AnonymousaccesstoActiveDirectoryenabledRule CPkPlaceholder_AnonymousNSPIaccesstoADenabledRule CPkPlaceholder_ApplicationexpiredsecretsandcertificatesRule CPkPlaceholder_ApplicationinstancepropertylockdisabledRule CPkPlaceholder_ApplicationnameandgeographiclocationadditionalcontextsaredisabledonMFARule CPkPlaceholder_BuiltindomainAdministratoraccountusedwithinthelasttwoweeksRule CPkPlaceholder_BuiltindomainAdministratoraccountwitholdpassword180daysRule CPkPlaceholder_BuiltinguestaccountisenabledRule CPkPlaceholder_CertificateBasedAuthenticationPersistenceRule CPkPlaceholder_CertificatetemplatesthatallowrequesterstospecifyasubjectAltNameRule CPkPlaceholder_Certificatetemplateswith3ormoreinsecureconfigurationsRule CPkPlaceholder_ChangestoADDisplaySpecifiersinthepast90daysRule CPkPlaceholder_ChangestoDefaultDomainPolicyorDefaultDomainControllersPolicyinthelast7daysRule CPkPlaceholder_Changestodefaultsecuritydescriptorschemainthelast90daysRule CPkPlaceholder_ChangestoMSLAPSreadpermissionsRule CPkPlaceholder_ChangestoPreWindows2000CompatibleAccessGroupmembershipRule CPkPlaceholder_Changestoprivilegedgroupmembershipinthelast7daysRule CPkPlaceholder_Changestounprivilegedgroupmembershipinthelast7daysRule CPkPlaceholder_CheckforguestshavingpermissiontoinviteotherguestsRule CPkPlaceholder_CheckforriskyAPIpermissionsgrantedtoapplicationserviceprincipalsRule CPkPlaceholder_CheckforuserswithweakornoMFARule CPkPlaceholder_CheckiflegacyauthenticationisallowedRule CPkPlaceholder_ComputerAccountsinPrivilegedGroupsRule CPkPlaceholder_ComputeraccounttakeoverthroughKerberosResourceBasedConstrainedDelegationRBCDRule CPkPlaceholder_ComputeroruseraccountswithSPNthathaveunconstraineddelegationRule CPkPlaceholder_ComputerswitholderOSversionsRule CPkPlaceholder_Computerswithpasswordlastsetover90daysagoRule CPkPlaceholder_ConditionalAccesspoliciescontainprivateIPaddressesRule CPkPlaceholder_ConditionalAccesspoliciesthatcontainMFATrustedIPsRule CPkPlaceholder_ConditionalAccessPolicydoesnotrequireMFAonprivilegedaccountsRule CPkPlaceholder_ConditionalAccessPolicythatdisableadmintokenpersistenceRule CPkPlaceholder_ConditionalAccessPolicythatdoesnotrequireapasswordchangefromhighriskusersRule CPkPlaceholder_ConditionalAccessPolicythatdoesnotrequireMFAwhensigninriskhasbeenidentifiedRule CPkPlaceholder_ConditionalAccesspolicywithContinuousAccessEvaluationdisabledRule CPkPlaceholder_CustombannedpasswordprotectionnotinuseRule CPkPlaceholder_DangerouscontrolpathsexposecertificatecontainersRule CPkPlaceholder_DangerouscontrolpathsexposecertificatetemplatesRule CPkPlaceholder_DangerousGPOlogonscriptpathRule CPkPlaceholder_DangerousTrustAttributeSetRule CPkPlaceholder_DangeroususerrightsgrantedbyGPORule CPkPlaceholder_DetectMFApolicychangesforgroupsandusersRule CPkPlaceholder_DistributedCOMUsersgrouporPerformanceLogUsersgrouparenotemptyRule CPkPlaceholder_DomainControllerownerisnotanadministratorRule CPkPlaceholder_DomainControllersininconsistentstateRule CPkPlaceholder_DomainControllersthathavenotauthenticatedtothedomainformorethan45daysRule CPkPlaceholder_DomainControllerswitholdpasswordsRule CPkPlaceholder_DomainControllerswithResourceBasedConstrainedDelegationRBCDenabledRule CPkPlaceholder_DomainswithobsoletefunctionallevelsRule CPkPlaceholder_DomaintrusttoathirdpartydomainwithoutquarantineRule CPkPlaceholder_EnabledadminaccountsthatareinactiveRule CPkPlaceholder_EnsureallnonprivilegeduserscancompleteMFARule CPkPlaceholder_EnterpriseapplicationsusingSAMLforSSORule CPkPlaceholder_EnterpriseKeyAdminswithfullaccesstodomainRule CPkPlaceholder_EntraConnectsyncaccountpasswordresetRule CPkPlaceholder_EntracustomRoleswithriskypermissionsRule CPkPlaceholder_EntraIDprivilegedusersthatarealsoprivilegedinADRule CPkPlaceholder_EntratenantissusceptibletoHiddenConsentGrantattackRule CPkPlaceholder_EphemeralAdminsRule CPkPlaceholder_EvidenceofMimikatzDCShadowattackRule CPkPlaceholder_FGPPnotappliedtoGlobalgroupRule CPkPlaceholder_FIDO2AttestationisnotenforcedRule CPkPlaceholder_ForeignSecurityPrincipalsinPrivilegedGroupRule CPkPlaceholder_Forestcontainsmorethan50privilegedaccountsRule CPkPlaceholder_GlobalAdministratorsthatsignedinduringthelast14daysRule CPkPlaceholder_GMSAnotinuseRule CPkPlaceholder_GMSAobjectswitholdpasswordsRule CPkPlaceholder_GPOlinkingdelegationattheADSitelevelRule CPkPlaceholder_GPOlinkingdelegationatthedomaincontrollerOUlevelRule CPkPlaceholder_GPOlinkingdelegationatthedomainlevelRule CPkPlaceholder_GPOWeakLMHashstorageenabledRule CPkPlaceholder_GPOwithScheduledTasksconfiguredRule CPkPlaceholder_Guestaccountsthatwereinactiveformorethan30daysRule CPkPlaceholder_Guestinvitesnotacceptedinlast30dayRule CPkPlaceholder_GuestusersarenotrestrictedRule CPkPlaceholder_HighprivilegedcustomrolesRule CPkPlaceholder_InheritanceenabledonAdminSDHolderobjectRule CPkPlaceholder_KerberosKRBTGTaccountwitholdpasswordRule CPkPlaceholder_KerberosprotocoltransitiondelegationconfiguredRule CPkPlaceholder_KrbtgtaccountwithResourceBasedConstrainedDelegationRBCDenabledRule CPkPlaceholder_LDAPsigningisnotrequiredonDomainControllersRule CPkPlaceholder_Lessthan2GlobalAdministratorsexistRule CPkPlaceholder_ListofRiskyusersmediumorhighlevelRule CPkPlaceholder_MFAbombingattackoccurredinthepastdayRule CPkPlaceholder_MFAnotconfiguredforprivilegedaccountsRule CPkPlaceholder_Morethan10PrivilegedAdministratorsexistRule CPkPlaceholder_Morethan5GlobalAdministratorsexistRule CPkPlaceholder_NewAPItokenwascreatedRule CPkPlaceholder_NewpermissionhasbeengrantedtoagroupRule CPkPlaceholder_NewpermissionhasbeengrantedtoauserRule CPkPlaceholder_NewSuperAdminpermissionhasbeengrantedtoagroupRule CPkPlaceholder_NewSuperAdminpermissionhasbeengrantedtoauserRule CPkPlaceholder_NonadminuserscancreatetenantsRule CPkPlaceholder_NonadminuserscanregistercustomapplicationsRule CPkPlaceholder_NondefaultaccesstoDPAPIkeyRule CPkPlaceholder_NondefaultprincipalswithDCSyncrightsonthedomainRule CPkPlaceholder_NondefaultvalueonmsMcsAdmPwdSearchFlagsRule CPkPlaceholder_NonprivilegeduserswithaccesstogMSApasswordsRule CPkPlaceholder_NonstandardschemapermissionsRule CPkPlaceholder_NonsyncedEntrauserthatiseligibleforaprivilegedroleRule CPkPlaceholder_NTFRSSYSVOLReplicationRule CPkPlaceholder_ObjectsinprivilegedgroupswithoutadminCount1SDPropRule CPkPlaceholder_ObjectswithconstraineddelegationconfiguredRule CPkPlaceholder_ObjectswithReanimateTombstonesextendedrightRule CPkPlaceholder_OperatorgroupsnolongerprotectedbyAdminSDHolderandSDPropRule CPkPlaceholder_OperatorsGroupsthatarenotemptyRule CPkPlaceholder_OUpermissionsenablingBadSuccessordMSAescalationRule CPkPlaceholder_OutboundforesttrustwithSIDHistoryenabledRule CPkPlaceholder_PasswordhashsynchronizationisnotenabledRule CPkPlaceholder_PasswordpolicycheckRule CPkPlaceholder_PermanentActivePrivilegedRoleAssignmentRule CPkPlaceholder_PermissionchangesonAdminSDHolderobjectRule CPkPlaceholder_PrimaryuserswithSPNnotsupportingAESencryptiononKerberosRule CPkPlaceholder_PrincipalswithconstrainedauthenticationdelegationenabledforaDCserviceRule CPkPlaceholder_PrincipalswithconstraineddelegationusingprotocoltransitionenabledforaDCserviceRule CPkPlaceholder_PrintspoolerserviceisenabledonaDCRule CPkPlaceholder_PrivilegedaccountswithapasswordthatneverexpiresRule CPkPlaceholder_PrivilegedaccountswithmailboxRule CPkPlaceholder_PrivilegedgroupcontainsguestaccountRule CPkPlaceholder_PrivilegedobjectswithunprivilegedownersRule CPkPlaceholder_PrivilegedusercredentialscachedonRODCRule CPkPlaceholder_PrivilegedusersthataredisabledRule CPkPlaceholder_PrivilegeduserswithSPNdefinedRule CPkPlaceholder_PrivilegedUserswithWeakPasswordPolicyRule CPkPlaceholder_ProhibitedEntraIDRolesAssignedRule CPkPlaceholder_ProtectedUsersgroupnotinuseRule CPkPlaceholder_QuerypoliciesthathavetheattributeofLDAPdenylistsetRule CPkPlaceholder_RC4orDESencryptiontypearesupportedbyDomainControllersRule CPkPlaceholder_RecentprivilegedaccountcreationactivityRule CPkPlaceholder_RecentSIDHistorychangesonobjectsRule CPkPlaceholder_ReportsuspiciousMFAactivitydisabledRule CPkPlaceholder_ResourceBasedConstrainedDelegationappliedtoAZUREADSSOACCaccountRule CPkPlaceholder_ReversiblepasswordsfoundinGPOsRule CPkPlaceholder_RiskyRODCcredentialcachingRule CPkPlaceholder_SecuritydefaultsnotenabledRule CPkPlaceholder_SecurityquestionsareinuseRule CPkPlaceholder_SelfservicepasswordresetenabledforprivilegedrolesRule CPkPlaceholder_ShadowCredentialsonprivilegedobjectsRule CPkPlaceholder_SmartcardpasswordrotationdisabledRule CPkPlaceholder_SMBSigningisnotrequiredonDomainControllersRule CPkPlaceholder_SMBv1isenabledonDomainControllersRule CPkPlaceholder_SSOcomputeraccountwithpasswordlastsetover90daysagoRule CPkPlaceholder_SuspiciouscredentialsonMicrosoftserviceprincipalsRule CPkPlaceholder_SuspiciousDirectorySynchronizationAccountsrolememberRule CPkPlaceholder_SYSVOLExecutableChangesRule CPkPlaceholder_TrustaccountswitholdpasswordsRule CPkPlaceholder_UnexpectedaccountsinCertPublishersGroupRule CPkPlaceholder_UnprivilegedaccountswithadminCount1Rule CPkPlaceholder_UnprivilegedownerofaprivilegedgroupRule CPkPlaceholder_UnprivilegedprincipalsasDNSAdminsRule CPkPlaceholder_UnprivilegeduserscanaddcomputeraccountstothedomainRule CPkPlaceholder_UnresolvedEntraIDprivilegedrolemembersRule CPkPlaceholder_UnrestricteduserconsentallowedRule CPkPlaceholder_UnsecuredDNSconfigurationRule CPkPlaceholder_UseraccountsthatstorepasswordswithreversibleencryptionRule CPkPlaceholder_UseraccountsthatuseDESencryptionRule CPkPlaceholder_UseraccountsusingSmartCardauthenticationwitholdpasswordRule CPkPlaceholder_UseraccountswithpasswordnotrequiredRule CPkPlaceholder_Useractivationinthelast7daysRule CPkPlaceholder_UserconsentisallowedforriskyapplicationsRule CPkPlaceholder_Userdeactivationinthelast7daysRule CPkPlaceholder_UsersandcomputerswithnondefaultPrimaryGroupIDsRule CPkPlaceholder_UsersandcomputerswithoutreadablePGIDRule CPkPlaceholder_UsersarenotusingtheirprivilegedrolesRule CPkPlaceholder_UserscancreatesecuritygroupsRule CPkPlaceholder_Usersordevicesinactiveforatleast90daysRule CPkPlaceholder_UserswithKerberospreauthenticationdisabledRule CPkPlaceholder_UserswitholdpasswordsRule CPkPlaceholder_UserswithoutMultiFactorAuthenticationMFARule CPkPlaceholder_UserswithPasswordNeverExpiresflagsetRule CPkPlaceholder_UserswithpermissionstosetServerTrustAccountRule CPkPlaceholder_UserswithSPNdefinedRule CPkPlaceholder_UserswiththeattributeuserPasswordsetRule CPkPlaceholder_WeakcertificatecipherRule CPkPlaceholder_WellknownprivilegedSIDsinSIDHistoryRule CPkPlaceholder_WritableshortcutsfoundinGPORule CPkPlaceholder_WriteaccesstoRBCDonDCRule CPkPlaceholder_WriteaccesstoRBCDonkrbtgtaccountRule CPkPlaceholder_ZerologonvulnerabilityRule

Gpo 1

CServersGpoSmbSigningBaseline

Gpo 1

CWorkstationsGpoSmbSigningBaseline

RulesPowerShell 6

EPowerShellRule CPowerShellRuleConverter CPowerShellRuleDiskCache CPowerShellRuleExtensions CPowerShellRuleParser CPowerShellRuleRuntimeState

Generated 4

CPowerShellRuleCatalog CPowerShellRuleCatalogData CPowerShellRuleDto CPowerShellRuleSerialization

Domain 34

CComputersUnsupportedMainstreamRule CComputersUnsupportedRule CDHCPAuthorizedRule CDNSForwardersRule CDNSScavengingForPrimaryDNSServerRule CDNSZonesAgingRule CDNSZonesDomain0ADELRule CDNSZonesForest0ADELRule CDomainControllersRule CDomainFSMORolesRule CDomainLDAPRule CDuplicateObjectsRule CExchangeUsersRule CGroupPolicyADMRule CGroupPolicyOwnersRule CGroupPolicyPermissionConsistencyRule CGroupPolicyPermissionRule CGroupPolicyRule CGroupPolicySysvolRule CMachineQuotaRule CNetLogonOwnerRule COrganizationalUnitsEmptyRule COrganizationalUnitsProtectedRule COrphanedSecurityPrincipalsRule CPasswordComplexityRule CSecurityComputersRule CSecurityDelegatedObjectsRule CSecurityGroupsAccountOperatorsRule CSecurityGroupsSchemaAdminsRule CSecurityKRBGTRule CSecurityUsersAccountAdministratorRule CSecurityUsersRule CSysVOLDFSRRule CWellKnownFoldersRule

DomainController 37

CDCDNSForwadersRule CDFSRule CDiagnosticsRule CDiskSpaceRule CDnsNameServersRule CDNSResolveExternalRule CDNSResolveInternalRule CEventLogsRule CFileSystemRule CGroupPolicySYSVOLDCRule CInformationRule CLanManagerSettingsRule CLanManServerRule CLdapInsecureBindingsRule CLdapRule CMSSLegacyRule CNetSessionEnumerationRule CNetworkCardSettingsRule CNTDSParametersRule COperatingSystemRule CPingableRule CPortsRule CRDPPortsRule CRDPSecurityRule CServicesRule CServiceWINRMRule CSMBProtocolsRule CSMBSharesPermissionsRule CSMBSharesRule CTimeSettingsRule CTimeSynchronizationExternalRule CTimeSynchronizationInternalRule CUNCHardenedPathsRule CWindowsFeaturesOptionalRule CWindowsRemoteManagementRule CWindowsRolesAndFeaturesRule CWindowsUpdatesRule

Forest 18

CBackupRule CDuplicateSPNRule CForestConfigurationPartitionOwnersContainerRule CForestConfigurationPartitionOwnersRule CForestDHCPRule CForestFSMORolesRule CForestSubnetsRule COptionalFeaturesRule COrphanedAdminsRule CReplicationRule CReplicationStatusRule CRootKDSRule CSiteLinksConnectionsRule CSiteLinksRule CSitesRule CTombstoneLifetimeRule CTrustsRule CVurnerableSchemaClassRule

Scoring 6

CRunScoreSummary EScopeGroup CScopeScore CScopeScoring CScoringEngine CScoringResult

Services 34

CMetricsDuration CMetricsLatency CServiceActionResult CServiceApiKeyInfo CServiceBaselineInfo CServiceBaselineReader CServiceConfigDeployment CServiceConfigReader CServiceControllerManager CServiceEndpointMetrics CServiceExecutableResolver CServiceFileDeployer CServiceHealthStatus CServiceHistoryReader CServiceInstaller CServiceInstallRequest CServiceInstallResult CServiceInstanceMetrics CServiceLogReader CServiceMetricsSnapshot CServiceNameValidator CServicePathResolver CServicePaths CServiceProcessHealth CServiceProcessResult CServiceProcessRunner CServiceRunHistory CServiceRuntimeStatus CServiceRuntimeStatusBuilder CServiceSchedulePreviewer CServiceSinkMetrics CServiceStatusInfo CServiceStatusReader CServiceUninstallResult

Storage 15

CComputersExtras CComputersSnapshotProviderAdapter CFileResultStore IIResultStore CNoopResultStore CResultStoreFactory SReuseDecision CRunCompletionSummary CRunContext CStagingDiagnostics CStagingStore CStoreCatalog CStoreReader CUsersExtras CUsersSnapshotProviderAdapter

FileResultStore 1

StagingDiagnostics 1

StoreCatalog 1

StoreReader 2

Supersedence 1

CRuleSupersedenceResolver

Testimo 1

CRuleDiscoveryDebugInfo

Testing 13

CParam CParamScaleBand CPropertyAccessor CReportViewBuilder CRiskCalculator ERiskLevel CRiskScore CRuleBuilder CRuleBuilderExtensions CScaleBand CScaleBuilder CScaleDefinition CTestBuilder

RuleBuilderExtensions 1

CGuidanceBuilder

TestBuilder 2

CObjectTestBuilder CPropertyTestBuilder

Theming 8

CConsoleCapabilities EConsoleColorTone CConsoleGlyphs CConsolePalette CConsoleVisualManager CConsoleVisualProfile CEmojiText CThemeResolver

Types 4

EComparisonOperation SComparisonResult IITypeConverter CTypeCompatibilityEngine

Converters 6

CDateTimeConverter CEnumConverter CGpoBooleanConverter CNumericConverter CPSObjectConverter CStringConverter

No matching types.

API Reference / EventLogsRule

API Reference

Class

EventLogsRule

Namespace TestimoX.RulesPowerShell.RulesGenerated.DomainController

Generated from DomainController/EventLogs.ps1.

Inheritance

Object
EventLogsRule

On this page

Overview
Inheritance

TestimoX

Windows-first Active Directory assessment, monitoring, and reference surfaces with verified CLI, PowerShell, and .NET paths.

Reference

.NET API Reference
PowerShell API Reference
Documentation Hub
Rule Catalog

Products

ADPlayground
ComputerX
Monitoring
Pricing

Company

GitHub
Evotec Services
Contact

Built with PowerForge.

Developed by Evotec Services