@etcsec-com/etc-collector 1.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (617) hide show
  1. package/.env.example +60 -0
  2. package/.env.test.example +33 -0
  3. package/.github/workflows/ci.yml +83 -0
  4. package/.github/workflows/release.yml +246 -0
  5. package/.prettierrc.json +10 -0
  6. package/CHANGELOG.md +15 -0
  7. package/Dockerfile +57 -0
  8. package/LICENSE +190 -0
  9. package/README.md +194 -0
  10. package/dist/api/controllers/audit.controller.d.ts +21 -0
  11. package/dist/api/controllers/audit.controller.d.ts.map +1 -0
  12. package/dist/api/controllers/audit.controller.js +179 -0
  13. package/dist/api/controllers/audit.controller.js.map +1 -0
  14. package/dist/api/controllers/auth.controller.d.ts +16 -0
  15. package/dist/api/controllers/auth.controller.d.ts.map +1 -0
  16. package/dist/api/controllers/auth.controller.js +146 -0
  17. package/dist/api/controllers/auth.controller.js.map +1 -0
  18. package/dist/api/controllers/export.controller.d.ts +27 -0
  19. package/dist/api/controllers/export.controller.d.ts.map +1 -0
  20. package/dist/api/controllers/export.controller.js +80 -0
  21. package/dist/api/controllers/export.controller.js.map +1 -0
  22. package/dist/api/controllers/health.controller.d.ts +5 -0
  23. package/dist/api/controllers/health.controller.d.ts.map +1 -0
  24. package/dist/api/controllers/health.controller.js +16 -0
  25. package/dist/api/controllers/health.controller.js.map +1 -0
  26. package/dist/api/controllers/jobs.controller.d.ts +13 -0
  27. package/dist/api/controllers/jobs.controller.d.ts.map +1 -0
  28. package/dist/api/controllers/jobs.controller.js +125 -0
  29. package/dist/api/controllers/jobs.controller.js.map +1 -0
  30. package/dist/api/controllers/providers.controller.d.ts +15 -0
  31. package/dist/api/controllers/providers.controller.d.ts.map +1 -0
  32. package/dist/api/controllers/providers.controller.js +112 -0
  33. package/dist/api/controllers/providers.controller.js.map +1 -0
  34. package/dist/api/dto/AuditRequest.dto.d.ts +6 -0
  35. package/dist/api/dto/AuditRequest.dto.d.ts.map +1 -0
  36. package/dist/api/dto/AuditRequest.dto.js +3 -0
  37. package/dist/api/dto/AuditRequest.dto.js.map +1 -0
  38. package/dist/api/dto/AuditResponse.dto.d.ts +17 -0
  39. package/dist/api/dto/AuditResponse.dto.d.ts.map +1 -0
  40. package/dist/api/dto/AuditResponse.dto.js +3 -0
  41. package/dist/api/dto/AuditResponse.dto.js.map +1 -0
  42. package/dist/api/dto/TokenRequest.dto.d.ts +6 -0
  43. package/dist/api/dto/TokenRequest.dto.d.ts.map +1 -0
  44. package/dist/api/dto/TokenRequest.dto.js +3 -0
  45. package/dist/api/dto/TokenRequest.dto.js.map +1 -0
  46. package/dist/api/dto/TokenResponse.dto.d.ts +12 -0
  47. package/dist/api/dto/TokenResponse.dto.d.ts.map +1 -0
  48. package/dist/api/dto/TokenResponse.dto.js +3 -0
  49. package/dist/api/dto/TokenResponse.dto.js.map +1 -0
  50. package/dist/api/middlewares/authenticate.d.ts +12 -0
  51. package/dist/api/middlewares/authenticate.d.ts.map +1 -0
  52. package/dist/api/middlewares/authenticate.js +141 -0
  53. package/dist/api/middlewares/authenticate.js.map +1 -0
  54. package/dist/api/middlewares/errorHandler.d.ts +3 -0
  55. package/dist/api/middlewares/errorHandler.d.ts.map +1 -0
  56. package/dist/api/middlewares/errorHandler.js +30 -0
  57. package/dist/api/middlewares/errorHandler.js.map +1 -0
  58. package/dist/api/middlewares/rateLimit.d.ts +3 -0
  59. package/dist/api/middlewares/rateLimit.d.ts.map +1 -0
  60. package/dist/api/middlewares/rateLimit.js +34 -0
  61. package/dist/api/middlewares/rateLimit.js.map +1 -0
  62. package/dist/api/middlewares/validate.d.ts +4 -0
  63. package/dist/api/middlewares/validate.d.ts.map +1 -0
  64. package/dist/api/middlewares/validate.js +31 -0
  65. package/dist/api/middlewares/validate.js.map +1 -0
  66. package/dist/api/routes/audit.routes.d.ts +5 -0
  67. package/dist/api/routes/audit.routes.d.ts.map +1 -0
  68. package/dist/api/routes/audit.routes.js +24 -0
  69. package/dist/api/routes/audit.routes.js.map +1 -0
  70. package/dist/api/routes/auth.routes.d.ts +6 -0
  71. package/dist/api/routes/auth.routes.d.ts.map +1 -0
  72. package/dist/api/routes/auth.routes.js +22 -0
  73. package/dist/api/routes/auth.routes.js.map +1 -0
  74. package/dist/api/routes/export.routes.d.ts +5 -0
  75. package/dist/api/routes/export.routes.d.ts.map +1 -0
  76. package/dist/api/routes/export.routes.js +16 -0
  77. package/dist/api/routes/export.routes.js.map +1 -0
  78. package/dist/api/routes/health.routes.d.ts +4 -0
  79. package/dist/api/routes/health.routes.d.ts.map +1 -0
  80. package/dist/api/routes/health.routes.js +11 -0
  81. package/dist/api/routes/health.routes.js.map +1 -0
  82. package/dist/api/routes/index.d.ts +10 -0
  83. package/dist/api/routes/index.d.ts.map +1 -0
  84. package/dist/api/routes/index.js +20 -0
  85. package/dist/api/routes/index.js.map +1 -0
  86. package/dist/api/routes/providers.routes.d.ts +5 -0
  87. package/dist/api/routes/providers.routes.d.ts.map +1 -0
  88. package/dist/api/routes/providers.routes.js +13 -0
  89. package/dist/api/routes/providers.routes.js.map +1 -0
  90. package/dist/api/validators/audit.schemas.d.ts +60 -0
  91. package/dist/api/validators/audit.schemas.d.ts.map +1 -0
  92. package/dist/api/validators/audit.schemas.js +55 -0
  93. package/dist/api/validators/audit.schemas.js.map +1 -0
  94. package/dist/api/validators/auth.schemas.d.ts +17 -0
  95. package/dist/api/validators/auth.schemas.d.ts.map +1 -0
  96. package/dist/api/validators/auth.schemas.js +21 -0
  97. package/dist/api/validators/auth.schemas.js.map +1 -0
  98. package/dist/app.d.ts +3 -0
  99. package/dist/app.d.ts.map +1 -0
  100. package/dist/app.js +62 -0
  101. package/dist/app.js.map +1 -0
  102. package/dist/config/config.schema.d.ts +65 -0
  103. package/dist/config/config.schema.d.ts.map +1 -0
  104. package/dist/config/config.schema.js +95 -0
  105. package/dist/config/config.schema.js.map +1 -0
  106. package/dist/config/index.d.ts +4 -0
  107. package/dist/config/index.d.ts.map +1 -0
  108. package/dist/config/index.js +75 -0
  109. package/dist/config/index.js.map +1 -0
  110. package/dist/container.d.ts +47 -0
  111. package/dist/container.d.ts.map +1 -0
  112. package/dist/container.js +137 -0
  113. package/dist/container.js.map +1 -0
  114. package/dist/data/database.d.ts +13 -0
  115. package/dist/data/database.d.ts.map +1 -0
  116. package/dist/data/database.js +68 -0
  117. package/dist/data/database.js.map +1 -0
  118. package/dist/data/jobs/token-cleanup.job.d.ts +23 -0
  119. package/dist/data/jobs/token-cleanup.job.d.ts.map +1 -0
  120. package/dist/data/jobs/token-cleanup.job.js +96 -0
  121. package/dist/data/jobs/token-cleanup.job.js.map +1 -0
  122. package/dist/data/migrations/migration.runner.d.ts +13 -0
  123. package/dist/data/migrations/migration.runner.d.ts.map +1 -0
  124. package/dist/data/migrations/migration.runner.js +136 -0
  125. package/dist/data/migrations/migration.runner.js.map +1 -0
  126. package/dist/data/models/Token.model.d.ts +30 -0
  127. package/dist/data/models/Token.model.d.ts.map +1 -0
  128. package/dist/data/models/Token.model.js +3 -0
  129. package/dist/data/models/Token.model.js.map +1 -0
  130. package/dist/data/repositories/token.repository.d.ts +16 -0
  131. package/dist/data/repositories/token.repository.d.ts.map +1 -0
  132. package/dist/data/repositories/token.repository.js +97 -0
  133. package/dist/data/repositories/token.repository.js.map +1 -0
  134. package/dist/providers/azure/auth.provider.d.ts +5 -0
  135. package/dist/providers/azure/auth.provider.d.ts.map +1 -0
  136. package/dist/providers/azure/auth.provider.js +13 -0
  137. package/dist/providers/azure/auth.provider.js.map +1 -0
  138. package/dist/providers/azure/azure-errors.d.ts +40 -0
  139. package/dist/providers/azure/azure-errors.d.ts.map +1 -0
  140. package/dist/providers/azure/azure-errors.js +121 -0
  141. package/dist/providers/azure/azure-errors.js.map +1 -0
  142. package/dist/providers/azure/azure-retry.d.ts +41 -0
  143. package/dist/providers/azure/azure-retry.d.ts.map +1 -0
  144. package/dist/providers/azure/azure-retry.js +85 -0
  145. package/dist/providers/azure/azure-retry.js.map +1 -0
  146. package/dist/providers/azure/graph-client.d.ts +26 -0
  147. package/dist/providers/azure/graph-client.d.ts.map +1 -0
  148. package/dist/providers/azure/graph-client.js +146 -0
  149. package/dist/providers/azure/graph-client.js.map +1 -0
  150. package/dist/providers/azure/graph.provider.d.ts +23 -0
  151. package/dist/providers/azure/graph.provider.d.ts.map +1 -0
  152. package/dist/providers/azure/graph.provider.js +161 -0
  153. package/dist/providers/azure/graph.provider.js.map +1 -0
  154. package/dist/providers/azure/queries/app.queries.d.ts +6 -0
  155. package/dist/providers/azure/queries/app.queries.d.ts.map +1 -0
  156. package/dist/providers/azure/queries/app.queries.js +9 -0
  157. package/dist/providers/azure/queries/app.queries.js.map +1 -0
  158. package/dist/providers/azure/queries/policy.queries.d.ts +6 -0
  159. package/dist/providers/azure/queries/policy.queries.d.ts.map +1 -0
  160. package/dist/providers/azure/queries/policy.queries.js +9 -0
  161. package/dist/providers/azure/queries/policy.queries.js.map +1 -0
  162. package/dist/providers/azure/queries/user.queries.d.ts +7 -0
  163. package/dist/providers/azure/queries/user.queries.d.ts.map +1 -0
  164. package/dist/providers/azure/queries/user.queries.js +10 -0
  165. package/dist/providers/azure/queries/user.queries.js.map +1 -0
  166. package/dist/providers/interfaces/IGraphProvider.d.ts +31 -0
  167. package/dist/providers/interfaces/IGraphProvider.d.ts.map +1 -0
  168. package/dist/providers/interfaces/IGraphProvider.js +3 -0
  169. package/dist/providers/interfaces/IGraphProvider.js.map +1 -0
  170. package/dist/providers/interfaces/ILDAPProvider.d.ts +37 -0
  171. package/dist/providers/interfaces/ILDAPProvider.d.ts.map +1 -0
  172. package/dist/providers/interfaces/ILDAPProvider.js +3 -0
  173. package/dist/providers/interfaces/ILDAPProvider.js.map +1 -0
  174. package/dist/providers/ldap/acl-parser.d.ts +8 -0
  175. package/dist/providers/ldap/acl-parser.d.ts.map +1 -0
  176. package/dist/providers/ldap/acl-parser.js +157 -0
  177. package/dist/providers/ldap/acl-parser.js.map +1 -0
  178. package/dist/providers/ldap/ad-mappers.d.ts +8 -0
  179. package/dist/providers/ldap/ad-mappers.d.ts.map +1 -0
  180. package/dist/providers/ldap/ad-mappers.js +162 -0
  181. package/dist/providers/ldap/ad-mappers.js.map +1 -0
  182. package/dist/providers/ldap/ldap-client.d.ts +33 -0
  183. package/dist/providers/ldap/ldap-client.d.ts.map +1 -0
  184. package/dist/providers/ldap/ldap-client.js +195 -0
  185. package/dist/providers/ldap/ldap-client.js.map +1 -0
  186. package/dist/providers/ldap/ldap-errors.d.ts +48 -0
  187. package/dist/providers/ldap/ldap-errors.d.ts.map +1 -0
  188. package/dist/providers/ldap/ldap-errors.js +120 -0
  189. package/dist/providers/ldap/ldap-errors.js.map +1 -0
  190. package/dist/providers/ldap/ldap-retry.d.ts +14 -0
  191. package/dist/providers/ldap/ldap-retry.d.ts.map +1 -0
  192. package/dist/providers/ldap/ldap-retry.js +102 -0
  193. package/dist/providers/ldap/ldap-retry.js.map +1 -0
  194. package/dist/providers/ldap/ldap-sanitizer.d.ts +12 -0
  195. package/dist/providers/ldap/ldap-sanitizer.d.ts.map +1 -0
  196. package/dist/providers/ldap/ldap-sanitizer.js +104 -0
  197. package/dist/providers/ldap/ldap-sanitizer.js.map +1 -0
  198. package/dist/providers/ldap/ldap.provider.d.ts +21 -0
  199. package/dist/providers/ldap/ldap.provider.d.ts.map +1 -0
  200. package/dist/providers/ldap/ldap.provider.js +165 -0
  201. package/dist/providers/ldap/ldap.provider.js.map +1 -0
  202. package/dist/providers/ldap/queries/computer.queries.d.ts +6 -0
  203. package/dist/providers/ldap/queries/computer.queries.d.ts.map +1 -0
  204. package/dist/providers/ldap/queries/computer.queries.js +9 -0
  205. package/dist/providers/ldap/queries/computer.queries.js.map +1 -0
  206. package/dist/providers/ldap/queries/group.queries.d.ts +6 -0
  207. package/dist/providers/ldap/queries/group.queries.d.ts.map +1 -0
  208. package/dist/providers/ldap/queries/group.queries.js +9 -0
  209. package/dist/providers/ldap/queries/group.queries.js.map +1 -0
  210. package/dist/providers/ldap/queries/user.queries.d.ts +7 -0
  211. package/dist/providers/ldap/queries/user.queries.d.ts.map +1 -0
  212. package/dist/providers/ldap/queries/user.queries.js +10 -0
  213. package/dist/providers/ldap/queries/user.queries.js.map +1 -0
  214. package/dist/providers/smb/smb.provider.d.ts +68 -0
  215. package/dist/providers/smb/smb.provider.d.ts.map +1 -0
  216. package/dist/providers/smb/smb.provider.js +382 -0
  217. package/dist/providers/smb/smb.provider.js.map +1 -0
  218. package/dist/server.d.ts +2 -0
  219. package/dist/server.d.ts.map +1 -0
  220. package/dist/server.js +44 -0
  221. package/dist/server.js.map +1 -0
  222. package/dist/services/audit/ad-audit.service.d.ts +70 -0
  223. package/dist/services/audit/ad-audit.service.d.ts.map +1 -0
  224. package/dist/services/audit/ad-audit.service.js +1019 -0
  225. package/dist/services/audit/ad-audit.service.js.map +1 -0
  226. package/dist/services/audit/attack-graph.service.d.ts +62 -0
  227. package/dist/services/audit/attack-graph.service.d.ts.map +1 -0
  228. package/dist/services/audit/attack-graph.service.js +702 -0
  229. package/dist/services/audit/attack-graph.service.js.map +1 -0
  230. package/dist/services/audit/audit.service.d.ts +4 -0
  231. package/dist/services/audit/audit.service.d.ts.map +1 -0
  232. package/dist/services/audit/audit.service.js +10 -0
  233. package/dist/services/audit/audit.service.js.map +1 -0
  234. package/dist/services/audit/azure-audit.service.d.ts +37 -0
  235. package/dist/services/audit/azure-audit.service.d.ts.map +1 -0
  236. package/dist/services/audit/azure-audit.service.js +153 -0
  237. package/dist/services/audit/azure-audit.service.js.map +1 -0
  238. package/dist/services/audit/detectors/ad/accounts.detector.d.ts +37 -0
  239. package/dist/services/audit/detectors/ad/accounts.detector.d.ts.map +1 -0
  240. package/dist/services/audit/detectors/ad/accounts.detector.js +881 -0
  241. package/dist/services/audit/detectors/ad/accounts.detector.js.map +1 -0
  242. package/dist/services/audit/detectors/ad/adcs.detector.d.ts +21 -0
  243. package/dist/services/audit/detectors/ad/adcs.detector.d.ts.map +1 -0
  244. package/dist/services/audit/detectors/ad/adcs.detector.js +227 -0
  245. package/dist/services/audit/detectors/ad/adcs.detector.js.map +1 -0
  246. package/dist/services/audit/detectors/ad/advanced.detector.d.ts +63 -0
  247. package/dist/services/audit/detectors/ad/advanced.detector.d.ts.map +1 -0
  248. package/dist/services/audit/detectors/ad/advanced.detector.js +867 -0
  249. package/dist/services/audit/detectors/ad/advanced.detector.js.map +1 -0
  250. package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts +16 -0
  251. package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts.map +1 -0
  252. package/dist/services/audit/detectors/ad/attack-paths.detector.js +369 -0
  253. package/dist/services/audit/detectors/ad/attack-paths.detector.js.map +1 -0
  254. package/dist/services/audit/detectors/ad/compliance.detector.d.ts +28 -0
  255. package/dist/services/audit/detectors/ad/compliance.detector.d.ts.map +1 -0
  256. package/dist/services/audit/detectors/ad/compliance.detector.js +896 -0
  257. package/dist/services/audit/detectors/ad/compliance.detector.js.map +1 -0
  258. package/dist/services/audit/detectors/ad/computers.detector.d.ts +30 -0
  259. package/dist/services/audit/detectors/ad/computers.detector.d.ts.map +1 -0
  260. package/dist/services/audit/detectors/ad/computers.detector.js +799 -0
  261. package/dist/services/audit/detectors/ad/computers.detector.js.map +1 -0
  262. package/dist/services/audit/detectors/ad/gpo.detector.d.ts +17 -0
  263. package/dist/services/audit/detectors/ad/gpo.detector.d.ts.map +1 -0
  264. package/dist/services/audit/detectors/ad/gpo.detector.js +257 -0
  265. package/dist/services/audit/detectors/ad/gpo.detector.js.map +1 -0
  266. package/dist/services/audit/detectors/ad/groups.detector.d.ts +19 -0
  267. package/dist/services/audit/detectors/ad/groups.detector.d.ts.map +1 -0
  268. package/dist/services/audit/detectors/ad/groups.detector.js +488 -0
  269. package/dist/services/audit/detectors/ad/groups.detector.js.map +1 -0
  270. package/dist/services/audit/detectors/ad/index.d.ts +15 -0
  271. package/dist/services/audit/detectors/ad/index.d.ts.map +1 -0
  272. package/dist/services/audit/detectors/ad/index.js +51 -0
  273. package/dist/services/audit/detectors/ad/index.js.map +1 -0
  274. package/dist/services/audit/detectors/ad/kerberos.detector.d.ts +17 -0
  275. package/dist/services/audit/detectors/ad/kerberos.detector.d.ts.map +1 -0
  276. package/dist/services/audit/detectors/ad/kerberos.detector.js +293 -0
  277. package/dist/services/audit/detectors/ad/kerberos.detector.js.map +1 -0
  278. package/dist/services/audit/detectors/ad/monitoring.detector.d.ts +23 -0
  279. package/dist/services/audit/detectors/ad/monitoring.detector.d.ts.map +1 -0
  280. package/dist/services/audit/detectors/ad/monitoring.detector.js +328 -0
  281. package/dist/services/audit/detectors/ad/monitoring.detector.js.map +1 -0
  282. package/dist/services/audit/detectors/ad/network.detector.d.ts +39 -0
  283. package/dist/services/audit/detectors/ad/network.detector.d.ts.map +1 -0
  284. package/dist/services/audit/detectors/ad/network.detector.js +257 -0
  285. package/dist/services/audit/detectors/ad/network.detector.js.map +1 -0
  286. package/dist/services/audit/detectors/ad/password.detector.d.ts +14 -0
  287. package/dist/services/audit/detectors/ad/password.detector.d.ts.map +1 -0
  288. package/dist/services/audit/detectors/ad/password.detector.js +235 -0
  289. package/dist/services/audit/detectors/ad/password.detector.js.map +1 -0
  290. package/dist/services/audit/detectors/ad/permissions.detector.d.ts +20 -0
  291. package/dist/services/audit/detectors/ad/permissions.detector.d.ts.map +1 -0
  292. package/dist/services/audit/detectors/ad/permissions.detector.js +392 -0
  293. package/dist/services/audit/detectors/ad/permissions.detector.js.map +1 -0
  294. package/dist/services/audit/detectors/ad/trusts.detector.d.ts +11 -0
  295. package/dist/services/audit/detectors/ad/trusts.detector.d.ts.map +1 -0
  296. package/dist/services/audit/detectors/ad/trusts.detector.js +186 -0
  297. package/dist/services/audit/detectors/ad/trusts.detector.js.map +1 -0
  298. package/dist/services/audit/detectors/azure/app-security.detector.d.ts +11 -0
  299. package/dist/services/audit/detectors/azure/app-security.detector.d.ts.map +1 -0
  300. package/dist/services/audit/detectors/azure/app-security.detector.js +184 -0
  301. package/dist/services/audit/detectors/azure/app-security.detector.js.map +1 -0
  302. package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts +10 -0
  303. package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts.map +1 -0
  304. package/dist/services/audit/detectors/azure/conditional-access.detector.js +130 -0
  305. package/dist/services/audit/detectors/azure/conditional-access.detector.js.map +1 -0
  306. package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts +8 -0
  307. package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts.map +1 -0
  308. package/dist/services/audit/detectors/azure/privilege-security.detector.js +113 -0
  309. package/dist/services/audit/detectors/azure/privilege-security.detector.js.map +1 -0
  310. package/dist/services/audit/detectors/azure/user-security.detector.d.ts +14 -0
  311. package/dist/services/audit/detectors/azure/user-security.detector.d.ts.map +1 -0
  312. package/dist/services/audit/detectors/azure/user-security.detector.js +198 -0
  313. package/dist/services/audit/detectors/azure/user-security.detector.js.map +1 -0
  314. package/dist/services/audit/detectors/index.d.ts +2 -0
  315. package/dist/services/audit/detectors/index.d.ts.map +1 -0
  316. package/dist/services/audit/detectors/index.js +38 -0
  317. package/dist/services/audit/detectors/index.js.map +1 -0
  318. package/dist/services/audit/response-formatter.d.ts +176 -0
  319. package/dist/services/audit/response-formatter.d.ts.map +1 -0
  320. package/dist/services/audit/response-formatter.js +240 -0
  321. package/dist/services/audit/response-formatter.js.map +1 -0
  322. package/dist/services/audit/scoring.service.d.ts +15 -0
  323. package/dist/services/audit/scoring.service.d.ts.map +1 -0
  324. package/dist/services/audit/scoring.service.js +139 -0
  325. package/dist/services/audit/scoring.service.js.map +1 -0
  326. package/dist/services/auth/crypto.service.d.ts +19 -0
  327. package/dist/services/auth/crypto.service.d.ts.map +1 -0
  328. package/dist/services/auth/crypto.service.js +135 -0
  329. package/dist/services/auth/crypto.service.js.map +1 -0
  330. package/dist/services/auth/errors.d.ts +19 -0
  331. package/dist/services/auth/errors.d.ts.map +1 -0
  332. package/dist/services/auth/errors.js +46 -0
  333. package/dist/services/auth/errors.js.map +1 -0
  334. package/dist/services/auth/token.service.d.ts +41 -0
  335. package/dist/services/auth/token.service.d.ts.map +1 -0
  336. package/dist/services/auth/token.service.js +208 -0
  337. package/dist/services/auth/token.service.js.map +1 -0
  338. package/dist/services/config/config.service.d.ts +6 -0
  339. package/dist/services/config/config.service.d.ts.map +1 -0
  340. package/dist/services/config/config.service.js +64 -0
  341. package/dist/services/config/config.service.js.map +1 -0
  342. package/dist/services/export/export.service.d.ts +28 -0
  343. package/dist/services/export/export.service.d.ts.map +1 -0
  344. package/dist/services/export/export.service.js +28 -0
  345. package/dist/services/export/export.service.js.map +1 -0
  346. package/dist/services/export/formatters/csv.formatter.d.ts +8 -0
  347. package/dist/services/export/formatters/csv.formatter.d.ts.map +1 -0
  348. package/dist/services/export/formatters/csv.formatter.js +46 -0
  349. package/dist/services/export/formatters/csv.formatter.js.map +1 -0
  350. package/dist/services/export/formatters/json.formatter.d.ts +40 -0
  351. package/dist/services/export/formatters/json.formatter.d.ts.map +1 -0
  352. package/dist/services/export/formatters/json.formatter.js +58 -0
  353. package/dist/services/export/formatters/json.formatter.js.map +1 -0
  354. package/dist/services/jobs/azure-job-runner.d.ts +38 -0
  355. package/dist/services/jobs/azure-job-runner.d.ts.map +1 -0
  356. package/dist/services/jobs/azure-job-runner.js +199 -0
  357. package/dist/services/jobs/azure-job-runner.js.map +1 -0
  358. package/dist/services/jobs/index.d.ts +4 -0
  359. package/dist/services/jobs/index.d.ts.map +1 -0
  360. package/dist/services/jobs/index.js +20 -0
  361. package/dist/services/jobs/index.js.map +1 -0
  362. package/dist/services/jobs/job-runner.d.ts +64 -0
  363. package/dist/services/jobs/job-runner.d.ts.map +1 -0
  364. package/dist/services/jobs/job-runner.js +952 -0
  365. package/dist/services/jobs/job-runner.js.map +1 -0
  366. package/dist/services/jobs/job-store.d.ts +27 -0
  367. package/dist/services/jobs/job-store.d.ts.map +1 -0
  368. package/dist/services/jobs/job-store.js +261 -0
  369. package/dist/services/jobs/job-store.js.map +1 -0
  370. package/dist/services/jobs/job.types.d.ts +67 -0
  371. package/dist/services/jobs/job.types.d.ts.map +1 -0
  372. package/dist/services/jobs/job.types.js +36 -0
  373. package/dist/services/jobs/job.types.js.map +1 -0
  374. package/dist/types/ad.types.d.ts +74 -0
  375. package/dist/types/ad.types.d.ts.map +1 -0
  376. package/dist/types/ad.types.js +3 -0
  377. package/dist/types/ad.types.js.map +1 -0
  378. package/dist/types/adcs.types.d.ts +58 -0
  379. package/dist/types/adcs.types.d.ts.map +1 -0
  380. package/dist/types/adcs.types.js +38 -0
  381. package/dist/types/adcs.types.js.map +1 -0
  382. package/dist/types/attack-graph.types.d.ts +135 -0
  383. package/dist/types/attack-graph.types.d.ts.map +1 -0
  384. package/dist/types/attack-graph.types.js +58 -0
  385. package/dist/types/attack-graph.types.js.map +1 -0
  386. package/dist/types/audit.types.d.ts +34 -0
  387. package/dist/types/audit.types.d.ts.map +1 -0
  388. package/dist/types/audit.types.js +3 -0
  389. package/dist/types/audit.types.js.map +1 -0
  390. package/dist/types/azure.types.d.ts +61 -0
  391. package/dist/types/azure.types.d.ts.map +1 -0
  392. package/dist/types/azure.types.js +3 -0
  393. package/dist/types/azure.types.js.map +1 -0
  394. package/dist/types/config.types.d.ts +63 -0
  395. package/dist/types/config.types.d.ts.map +1 -0
  396. package/dist/types/config.types.js +3 -0
  397. package/dist/types/config.types.js.map +1 -0
  398. package/dist/types/error.types.d.ts +33 -0
  399. package/dist/types/error.types.d.ts.map +1 -0
  400. package/dist/types/error.types.js +70 -0
  401. package/dist/types/error.types.js.map +1 -0
  402. package/dist/types/finding.types.d.ts +133 -0
  403. package/dist/types/finding.types.d.ts.map +1 -0
  404. package/dist/types/finding.types.js +3 -0
  405. package/dist/types/finding.types.js.map +1 -0
  406. package/dist/types/gpo.types.d.ts +39 -0
  407. package/dist/types/gpo.types.d.ts.map +1 -0
  408. package/dist/types/gpo.types.js +15 -0
  409. package/dist/types/gpo.types.js.map +1 -0
  410. package/dist/types/token.types.d.ts +26 -0
  411. package/dist/types/token.types.d.ts.map +1 -0
  412. package/dist/types/token.types.js +3 -0
  413. package/dist/types/token.types.js.map +1 -0
  414. package/dist/types/trust.types.d.ts +45 -0
  415. package/dist/types/trust.types.d.ts.map +1 -0
  416. package/dist/types/trust.types.js +71 -0
  417. package/dist/types/trust.types.js.map +1 -0
  418. package/dist/utils/entity-converter.d.ts +17 -0
  419. package/dist/utils/entity-converter.d.ts.map +1 -0
  420. package/dist/utils/entity-converter.js +285 -0
  421. package/dist/utils/entity-converter.js.map +1 -0
  422. package/dist/utils/graph.util.d.ts +66 -0
  423. package/dist/utils/graph.util.d.ts.map +1 -0
  424. package/dist/utils/graph.util.js +382 -0
  425. package/dist/utils/graph.util.js.map +1 -0
  426. package/dist/utils/logger.d.ts +7 -0
  427. package/dist/utils/logger.d.ts.map +1 -0
  428. package/dist/utils/logger.js +86 -0
  429. package/dist/utils/logger.js.map +1 -0
  430. package/dist/utils/type-name-normalizer.d.ts +5 -0
  431. package/dist/utils/type-name-normalizer.d.ts.map +1 -0
  432. package/dist/utils/type-name-normalizer.js +218 -0
  433. package/dist/utils/type-name-normalizer.js.map +1 -0
  434. package/docker-compose.yml +26 -0
  435. package/docs/api/README.md +178 -0
  436. package/docs/api/openapi.yaml +1524 -0
  437. package/eslint.config.js +54 -0
  438. package/jest.config.js +38 -0
  439. package/package.json +97 -0
  440. package/scripts/fetch-ad-cert.sh +142 -0
  441. package/src/.gitkeep +0 -0
  442. package/src/api/.gitkeep +0 -0
  443. package/src/api/controllers/.gitkeep +0 -0
  444. package/src/api/controllers/audit.controller.ts +313 -0
  445. package/src/api/controllers/auth.controller.ts +258 -0
  446. package/src/api/controllers/export.controller.ts +153 -0
  447. package/src/api/controllers/health.controller.ts +16 -0
  448. package/src/api/controllers/jobs.controller.ts +187 -0
  449. package/src/api/controllers/providers.controller.ts +165 -0
  450. package/src/api/dto/.gitkeep +0 -0
  451. package/src/api/dto/AuditRequest.dto.ts +8 -0
  452. package/src/api/dto/AuditResponse.dto.ts +19 -0
  453. package/src/api/dto/TokenRequest.dto.ts +8 -0
  454. package/src/api/dto/TokenResponse.dto.ts +14 -0
  455. package/src/api/middlewares/.gitkeep +0 -0
  456. package/src/api/middlewares/authenticate.ts +203 -0
  457. package/src/api/middlewares/errorHandler.ts +54 -0
  458. package/src/api/middlewares/rateLimit.ts +35 -0
  459. package/src/api/middlewares/validate.ts +32 -0
  460. package/src/api/routes/.gitkeep +0 -0
  461. package/src/api/routes/audit.routes.ts +77 -0
  462. package/src/api/routes/auth.routes.ts +71 -0
  463. package/src/api/routes/export.routes.ts +34 -0
  464. package/src/api/routes/health.routes.ts +14 -0
  465. package/src/api/routes/index.ts +40 -0
  466. package/src/api/routes/providers.routes.ts +24 -0
  467. package/src/api/validators/.gitkeep +0 -0
  468. package/src/api/validators/audit.schemas.ts +59 -0
  469. package/src/api/validators/auth.schemas.ts +59 -0
  470. package/src/app.ts +87 -0
  471. package/src/config/.gitkeep +0 -0
  472. package/src/config/config.schema.ts +108 -0
  473. package/src/config/index.ts +82 -0
  474. package/src/container.ts +221 -0
  475. package/src/data/.gitkeep +0 -0
  476. package/src/data/database.ts +78 -0
  477. package/src/data/jobs/token-cleanup.job.ts +166 -0
  478. package/src/data/migrations/.gitkeep +0 -0
  479. package/src/data/migrations/001_initial_schema.sql +47 -0
  480. package/src/data/migrations/migration.runner.ts +125 -0
  481. package/src/data/models/.gitkeep +0 -0
  482. package/src/data/models/Token.model.ts +35 -0
  483. package/src/data/repositories/.gitkeep +0 -0
  484. package/src/data/repositories/token.repository.ts +160 -0
  485. package/src/providers/.gitkeep +0 -0
  486. package/src/providers/azure/.gitkeep +0 -0
  487. package/src/providers/azure/auth.provider.ts +14 -0
  488. package/src/providers/azure/azure-errors.ts +189 -0
  489. package/src/providers/azure/azure-retry.ts +168 -0
  490. package/src/providers/azure/graph-client.ts +315 -0
  491. package/src/providers/azure/graph.provider.ts +294 -0
  492. package/src/providers/azure/queries/app.queries.ts +9 -0
  493. package/src/providers/azure/queries/policy.queries.ts +9 -0
  494. package/src/providers/azure/queries/user.queries.ts +10 -0
  495. package/src/providers/interfaces/.gitkeep +0 -0
  496. package/src/providers/interfaces/IGraphProvider.ts +117 -0
  497. package/src/providers/interfaces/ILDAPProvider.ts +142 -0
  498. package/src/providers/ldap/.gitkeep +0 -0
  499. package/src/providers/ldap/acl-parser.ts +231 -0
  500. package/src/providers/ldap/ad-mappers.ts +280 -0
  501. package/src/providers/ldap/ldap-client.ts +259 -0
  502. package/src/providers/ldap/ldap-errors.ts +188 -0
  503. package/src/providers/ldap/ldap-retry.ts +267 -0
  504. package/src/providers/ldap/ldap-sanitizer.ts +273 -0
  505. package/src/providers/ldap/ldap.provider.ts +293 -0
  506. package/src/providers/ldap/queries/computer.queries.ts +9 -0
  507. package/src/providers/ldap/queries/group.queries.ts +9 -0
  508. package/src/providers/ldap/queries/user.queries.ts +10 -0
  509. package/src/providers/smb/smb.provider.ts +653 -0
  510. package/src/server.ts +60 -0
  511. package/src/services/.gitkeep +0 -0
  512. package/src/services/audit/.gitkeep +0 -0
  513. package/src/services/audit/ad-audit.service.ts +1481 -0
  514. package/src/services/audit/attack-graph.service.ts +1104 -0
  515. package/src/services/audit/audit.service.ts +12 -0
  516. package/src/services/audit/azure-audit.service.ts +286 -0
  517. package/src/services/audit/detectors/ad/accounts.detector.ts +1232 -0
  518. package/src/services/audit/detectors/ad/adcs.detector.ts +449 -0
  519. package/src/services/audit/detectors/ad/advanced.detector.ts +1270 -0
  520. package/src/services/audit/detectors/ad/attack-paths.detector.ts +600 -0
  521. package/src/services/audit/detectors/ad/compliance.detector.ts +1421 -0
  522. package/src/services/audit/detectors/ad/computers.detector.ts +1188 -0
  523. package/src/services/audit/detectors/ad/gpo.detector.ts +485 -0
  524. package/src/services/audit/detectors/ad/groups.detector.ts +685 -0
  525. package/src/services/audit/detectors/ad/index.ts +84 -0
  526. package/src/services/audit/detectors/ad/kerberos.detector.ts +424 -0
  527. package/src/services/audit/detectors/ad/monitoring.detector.ts +501 -0
  528. package/src/services/audit/detectors/ad/network.detector.ts +538 -0
  529. package/src/services/audit/detectors/ad/password.detector.ts +324 -0
  530. package/src/services/audit/detectors/ad/permissions.detector.ts +637 -0
  531. package/src/services/audit/detectors/ad/trusts.detector.ts +315 -0
  532. package/src/services/audit/detectors/azure/app-security.detector.ts +246 -0
  533. package/src/services/audit/detectors/azure/conditional-access.detector.ts +186 -0
  534. package/src/services/audit/detectors/azure/privilege-security.detector.ts +176 -0
  535. package/src/services/audit/detectors/azure/user-security.detector.ts +280 -0
  536. package/src/services/audit/detectors/index.ts +18 -0
  537. package/src/services/audit/response-formatter.ts +604 -0
  538. package/src/services/audit/scoring.service.ts +234 -0
  539. package/src/services/auth/.gitkeep +0 -0
  540. package/src/services/auth/crypto.service.ts +230 -0
  541. package/src/services/auth/errors.ts +47 -0
  542. package/src/services/auth/token.service.ts +420 -0
  543. package/src/services/config/.gitkeep +0 -0
  544. package/src/services/config/config.service.ts +75 -0
  545. package/src/services/export/.gitkeep +0 -0
  546. package/src/services/export/export.service.ts +99 -0
  547. package/src/services/export/formatters/csv.formatter.ts +124 -0
  548. package/src/services/export/formatters/json.formatter.ts +160 -0
  549. package/src/services/jobs/azure-job-runner.ts +312 -0
  550. package/src/services/jobs/index.ts +9 -0
  551. package/src/services/jobs/job-runner.ts +1280 -0
  552. package/src/services/jobs/job-store.ts +384 -0
  553. package/src/services/jobs/job.types.ts +182 -0
  554. package/src/types/.gitkeep +0 -0
  555. package/src/types/ad.types.ts +91 -0
  556. package/src/types/adcs.types.ts +107 -0
  557. package/src/types/attack-graph.types.ts +260 -0
  558. package/src/types/audit.types.ts +42 -0
  559. package/src/types/azure.types.ts +68 -0
  560. package/src/types/config.types.ts +79 -0
  561. package/src/types/error.types.ts +69 -0
  562. package/src/types/finding.types.ts +284 -0
  563. package/src/types/gpo.types.ts +72 -0
  564. package/src/types/smb2.d.ts +73 -0
  565. package/src/types/token.types.ts +32 -0
  566. package/src/types/trust.types.ts +140 -0
  567. package/src/utils/.gitkeep +0 -0
  568. package/src/utils/entity-converter.ts +453 -0
  569. package/src/utils/graph.util.ts +609 -0
  570. package/src/utils/logger.ts +111 -0
  571. package/src/utils/type-name-normalizer.ts +302 -0
  572. package/tests/.gitkeep +0 -0
  573. package/tests/e2e/.gitkeep +0 -0
  574. package/tests/fixtures/.gitkeep +0 -0
  575. package/tests/integration/.gitkeep +0 -0
  576. package/tests/integration/README.md +156 -0
  577. package/tests/integration/ad-audit.integration.test.ts +216 -0
  578. package/tests/integration/api/.gitkeep +0 -0
  579. package/tests/integration/api/endpoints.integration.test.ts +431 -0
  580. package/tests/integration/auth/jwt-authentication.integration.test.ts +358 -0
  581. package/tests/integration/providers/.gitkeep +0 -0
  582. package/tests/integration/providers/azure-basic.integration.test.ts +167 -0
  583. package/tests/integration/providers/ldap-basic.integration.test.ts +152 -0
  584. package/tests/integration/providers/ldap-connectivity.test.ts +44 -0
  585. package/tests/integration/providers/ldap-provider.integration.test.ts +347 -0
  586. package/tests/mocks/.gitkeep +0 -0
  587. package/tests/setup.ts +16 -0
  588. package/tests/unit/.gitkeep +0 -0
  589. package/tests/unit/api/middlewares/authenticate.test.ts +446 -0
  590. package/tests/unit/providers/.gitkeep +0 -0
  591. package/tests/unit/providers/azure/azure-errors.test.ts +193 -0
  592. package/tests/unit/providers/azure/azure-retry.test.ts +254 -0
  593. package/tests/unit/providers/azure/graph-provider.test.ts +313 -0
  594. package/tests/unit/providers/ldap/ad-mappers.test.ts +392 -0
  595. package/tests/unit/providers/ldap/ldap-provider.test.ts +376 -0
  596. package/tests/unit/providers/ldap/ldap-retry.test.ts +377 -0
  597. package/tests/unit/providers/ldap/ldap-sanitizer.test.ts +301 -0
  598. package/tests/unit/sample.test.ts +19 -0
  599. package/tests/unit/services/.gitkeep +0 -0
  600. package/tests/unit/services/audit/detectors/ad/accounts.detector.test.ts +393 -0
  601. package/tests/unit/services/audit/detectors/ad/advanced.detector.test.ts +380 -0
  602. package/tests/unit/services/audit/detectors/ad/computers.detector.test.ts +440 -0
  603. package/tests/unit/services/audit/detectors/ad/groups.detector.test.ts +276 -0
  604. package/tests/unit/services/audit/detectors/ad/kerberos.detector.test.ts +215 -0
  605. package/tests/unit/services/audit/detectors/ad/password.detector.test.ts +226 -0
  606. package/tests/unit/services/audit/detectors/ad/permissions.detector.test.ts +244 -0
  607. package/tests/unit/services/audit/detectors/azure/app-security.detector.test.ts +349 -0
  608. package/tests/unit/services/audit/detectors/azure/conditional-access.detector.test.ts +374 -0
  609. package/tests/unit/services/audit/detectors/azure/privilege-security.detector.test.ts +374 -0
  610. package/tests/unit/services/audit/detectors/azure/user-security.detector.test.ts +297 -0
  611. package/tests/unit/services/auth/crypto.service.test.ts +296 -0
  612. package/tests/unit/services/auth/token.service.test.ts +579 -0
  613. package/tests/unit/services/export/export.service.test.ts +241 -0
  614. package/tests/unit/services/export/formatters/csv.formatter.test.ts +270 -0
  615. package/tests/unit/services/export/formatters/json.formatter.test.ts +258 -0
  616. package/tests/unit/utils/.gitkeep +0 -0
  617. package/tsconfig.json +50 -0
@@ -0,0 +1,382 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ exports.SMBProvider = void 0;
4
+ exports.formatKerberosPolicy = formatKerberosPolicy;
5
+ exports.getDefaultKerberosPolicy = getDefaultKerberosPolicy;
6
+ const child_process_1 = require("child_process");
7
+ const util_1 = require("util");
8
+ const promises_1 = require("fs/promises");
9
+ const os_1 = require("os");
10
+ const path_1 = require("path");
11
+ const logger_1 = require("../../utils/logger");
12
+ const execAsync = (0, util_1.promisify)(child_process_1.exec);
13
+ const DEFAULT_DOMAIN_POLICY_GUID = '{31B2F340-016D-11D2-945F-00C04FB984F9}';
14
+ class SMBProvider {
15
+ config;
16
+ constructor(config) {
17
+ this.config = {
18
+ timeout: 15000,
19
+ ...config,
20
+ };
21
+ }
22
+ async connect() {
23
+ logger_1.logger.debug('SMB provider ready (using smbclient)', { host: this.config.host, share: this.config.share });
24
+ }
25
+ async disconnect() {
26
+ }
27
+ buildSmbCommand() {
28
+ const { host, share, domain, username, password } = this.config;
29
+ const escapedPassword = password.replace(/'/g, "'\\''");
30
+ return `smbclient '//${host}/${share}' -U '${domain}\\${username}%${escapedPassword}' -c`;
31
+ }
32
+ async readFile(path) {
33
+ const timeout = this.config.timeout || 15000;
34
+ const tempFile = (0, path_1.join)((0, os_1.tmpdir)(), `smb_${Date.now()}_${Math.random().toString(36).substring(7)}`);
35
+ const smbPath = path.replace(/\\/g, '/');
36
+ const cmd = `${this.buildSmbCommand()} 'get "${smbPath}" "${tempFile}"'`;
37
+ try {
38
+ logger_1.logger.debug('SMB readFile', { path: smbPath, tempFile });
39
+ await execAsync(cmd, { timeout });
40
+ const content = await (0, promises_1.readFile)(tempFile, 'utf8');
41
+ try {
42
+ await (0, promises_1.unlink)(tempFile);
43
+ }
44
+ catch {
45
+ }
46
+ return content;
47
+ }
48
+ catch (error) {
49
+ try {
50
+ await (0, promises_1.unlink)(tempFile);
51
+ }
52
+ catch {
53
+ }
54
+ const message = error instanceof Error ? error.message : 'Unknown error';
55
+ logger_1.logger.debug('SMB readFile failed', { path: smbPath, error: message });
56
+ throw new Error(`SMB readFile failed: ${message}`);
57
+ }
58
+ }
59
+ async readBinaryFile(path) {
60
+ const timeout = this.config.timeout || 15000;
61
+ const tempFile = (0, path_1.join)((0, os_1.tmpdir)(), `smb_${Date.now()}_${Math.random().toString(36).substring(7)}`);
62
+ const smbPath = path.replace(/\\/g, '/');
63
+ const cmd = `${this.buildSmbCommand()} 'get "${smbPath}" "${tempFile}"'`;
64
+ try {
65
+ await execAsync(cmd, { timeout });
66
+ const content = await (0, promises_1.readFile)(tempFile);
67
+ try {
68
+ await (0, promises_1.unlink)(tempFile);
69
+ }
70
+ catch {
71
+ }
72
+ return content;
73
+ }
74
+ catch (error) {
75
+ try {
76
+ await (0, promises_1.unlink)(tempFile);
77
+ }
78
+ catch {
79
+ }
80
+ throw error;
81
+ }
82
+ }
83
+ async exists(path) {
84
+ const timeout = this.config.timeout || 15000;
85
+ const smbPath = path.replace(/\\/g, '/');
86
+ const lastSlash = smbPath.lastIndexOf('/');
87
+ const dir = lastSlash > 0 ? smbPath.substring(0, lastSlash) : '';
88
+ const filename = lastSlash > 0 ? smbPath.substring(lastSlash + 1) : smbPath;
89
+ const cmd = `${this.buildSmbCommand()} 'cd "${dir}"; ls "${filename}"'`;
90
+ try {
91
+ logger_1.logger.debug('SMB exists check', { path: smbPath, dir, filename });
92
+ const { stdout } = await execAsync(cmd, { timeout });
93
+ const exists = stdout.includes(filename);
94
+ logger_1.logger.debug('SMB exists result', { path: smbPath, exists });
95
+ return exists;
96
+ }
97
+ catch (error) {
98
+ const message = error instanceof Error ? error.message : 'Unknown error';
99
+ logger_1.logger.debug('SMB exists check failed (file likely does not exist)', { path: smbPath, error: message });
100
+ return false;
101
+ }
102
+ }
103
+ async readKerberosPolicy(domainDnsName) {
104
+ const gptTmplPath = `${domainDnsName}/Policies/${DEFAULT_DOMAIN_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
105
+ try {
106
+ logger_1.logger.debug('Reading GptTmpl.inf for Kerberos policy', { path: gptTmplPath });
107
+ const exists = await this.exists(gptTmplPath);
108
+ if (!exists) {
109
+ logger_1.logger.warn('GptTmpl.inf not found', { path: gptTmplPath });
110
+ return null;
111
+ }
112
+ const content = await this.readFile(gptTmplPath);
113
+ return this.parseKerberosPolicy(content);
114
+ }
115
+ catch (error) {
116
+ logger_1.logger.warn('Failed to read Kerberos policy from SYSVOL', { error, path: gptTmplPath });
117
+ return null;
118
+ }
119
+ }
120
+ parseKerberosPolicy(content) {
121
+ const policy = {
122
+ maxTicketAge: 10,
123
+ maxRenewAge: 7,
124
+ maxServiceAge: 600,
125
+ maxClockSkew: 5,
126
+ ticketValidateClient: true,
127
+ };
128
+ const lines = content.split(/\r?\n/);
129
+ let inKerberosSection = false;
130
+ for (const line of lines) {
131
+ const trimmedLine = line.trim();
132
+ if (trimmedLine.startsWith('[')) {
133
+ inKerberosSection = trimmedLine.toLowerCase() === '[kerberos policy]';
134
+ continue;
135
+ }
136
+ if (!inKerberosSection)
137
+ continue;
138
+ const match = trimmedLine.match(/^(\w+)\s*=\s*(.+)$/);
139
+ if (!match || !match[1] || !match[2])
140
+ continue;
141
+ const key = match[1];
142
+ const value = match[2];
143
+ const numValue = parseInt(value, 10);
144
+ switch (key.toLowerCase()) {
145
+ case 'maxticketage':
146
+ policy.maxTicketAge = numValue;
147
+ break;
148
+ case 'maxrenewage':
149
+ policy.maxRenewAge = numValue;
150
+ break;
151
+ case 'maxserviceage':
152
+ policy.maxServiceAge = numValue;
153
+ break;
154
+ case 'maxclockskew':
155
+ policy.maxClockSkew = numValue;
156
+ break;
157
+ case 'ticketvalidateclient':
158
+ policy.ticketValidateClient = numValue === 1;
159
+ break;
160
+ }
161
+ }
162
+ return policy;
163
+ }
164
+ async readGpoSecuritySettings(domainDnsName) {
165
+ const DC_POLICY_GUID = '{6AC1786C-016F-11D2-945F-00C04FB984F9}';
166
+ const gptTmplPath = `${domainDnsName}/Policies/${DC_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
167
+ const settings = {};
168
+ try {
169
+ logger_1.logger.debug('Reading GPO security settings', { path: gptTmplPath });
170
+ const dcPolicyExists = await this.exists(gptTmplPath);
171
+ if (dcPolicyExists) {
172
+ const content = await this.readFile(gptTmplPath);
173
+ this.parseRegistryValues(content, settings);
174
+ logger_1.logger.debug('Parsed DC Policy GptTmpl.inf', { settings });
175
+ }
176
+ const domainPolicyPath = `${domainDnsName}/Policies/${DEFAULT_DOMAIN_POLICY_GUID}/Machine/Microsoft/Windows NT/SecEdit/GptTmpl.inf`;
177
+ const domainPolicyExists = await this.exists(domainPolicyPath);
178
+ if (domainPolicyExists) {
179
+ const domainContent = await this.readFile(domainPolicyPath);
180
+ this.parseRegistryValues(domainContent, settings);
181
+ logger_1.logger.debug('Parsed Domain Policy GptTmpl.inf', { settings });
182
+ }
183
+ await this.readAuditPolicy(domainDnsName, DC_POLICY_GUID, settings);
184
+ await this.readPowerShellLogging(domainDnsName, DC_POLICY_GUID, settings);
185
+ logger_1.logger.info('Successfully fetched GPO security settings', {
186
+ hasLdapSigning: settings.ldapServerIntegrity !== undefined,
187
+ hasSmbSigning: settings.smbSigningRequired !== undefined,
188
+ hasAuditPolicy: settings.auditPolicies !== undefined,
189
+ hasPsLogging: settings.powershellLogging !== undefined,
190
+ });
191
+ return settings;
192
+ }
193
+ catch (error) {
194
+ logger_1.logger.warn('Failed to read GPO security settings', { error });
195
+ return null;
196
+ }
197
+ }
198
+ parseRegistryValues(content, settings) {
199
+ const lines = content.split(/\r?\n/);
200
+ let inRegistrySection = false;
201
+ for (const line of lines) {
202
+ const trimmedLine = line.trim();
203
+ if (trimmedLine.startsWith('[')) {
204
+ inRegistrySection = trimmedLine.toLowerCase() === '[registry values]';
205
+ continue;
206
+ }
207
+ if (!inRegistrySection)
208
+ continue;
209
+ const match = trimmedLine.match(/^MACHINE\\(.+?)=(\d+),(.+)$/i);
210
+ if (!match || !match[1] || !match[3])
211
+ continue;
212
+ const keyPath = match[1].toLowerCase();
213
+ const value = match[3];
214
+ if (keyPath.includes('ntds\\parameters\\ldapserverintegrity')) {
215
+ settings.ldapServerIntegrity = parseInt(value, 10);
216
+ }
217
+ if (keyPath.includes('ntds\\parameters\\ldapenforcechannelbinding')) {
218
+ settings.ldapChannelBinding = parseInt(value, 10);
219
+ }
220
+ if (keyPath.includes('lanmanserver\\parameters\\smb1')) {
221
+ settings.smbv1ServerEnabled = value === '1';
222
+ }
223
+ if (keyPath.includes('lanmanworkstation\\parameters\\smb1')) {
224
+ settings.smbv1ClientEnabled = value === '1';
225
+ }
226
+ if (keyPath.includes('mrxsmb10\\start')) {
227
+ settings.smbv1ClientEnabled = value !== '4';
228
+ }
229
+ if (keyPath.includes('lanmanserver\\parameters\\requiresecuritysignature')) {
230
+ settings.smbSigningRequired = value === '1';
231
+ }
232
+ if (keyPath.includes('lanmanworkstation\\parameters\\requiresecuritysignature')) {
233
+ settings.smbClientSigningRequired = value === '1';
234
+ }
235
+ }
236
+ }
237
+ async readAuditPolicy(domainDnsName, gpoGuid, settings) {
238
+ const auditPath = `${domainDnsName}/Policies/${gpoGuid}/Machine/Microsoft/Windows NT/Audit/audit.csv`;
239
+ try {
240
+ const exists = await this.exists(auditPath);
241
+ if (!exists)
242
+ return;
243
+ const content = await this.readFile(auditPath);
244
+ settings.auditPolicies = this.parseAuditCsv(content);
245
+ }
246
+ catch (error) {
247
+ logger_1.logger.debug('Failed to read audit.csv', { error });
248
+ }
249
+ }
250
+ parseAuditCsv(content) {
251
+ const policies = [];
252
+ const lines = content.split(/\r?\n/);
253
+ for (let i = 1; i < lines.length; i++) {
254
+ const line = lines[i];
255
+ if (!line)
256
+ continue;
257
+ const trimmedLine = line.trim();
258
+ if (!trimmedLine)
259
+ continue;
260
+ const parts = trimmedLine.split(',');
261
+ if (parts.length < 7)
262
+ continue;
263
+ const subcategory = parts[2];
264
+ const settingValue = parts[6];
265
+ if (!subcategory || !settingValue)
266
+ continue;
267
+ const value = parseInt(settingValue, 10);
268
+ const category = this.getAuditCategory(subcategory);
269
+ policies.push({
270
+ category,
271
+ subcategory,
272
+ success: (value & 1) !== 0,
273
+ failure: (value & 2) !== 0,
274
+ });
275
+ }
276
+ return policies;
277
+ }
278
+ getAuditCategory(subcategory) {
279
+ const categoryMap = {
280
+ 'Credential Validation': 'Account Logon',
281
+ 'Kerberos Authentication Service': 'Account Logon',
282
+ 'Kerberos Service Ticket Operations': 'Account Logon',
283
+ 'Computer Account Management': 'Account Management',
284
+ 'Security Group Management': 'Account Management',
285
+ 'User Account Management': 'Account Management',
286
+ 'Logon': 'Logon/Logoff',
287
+ 'Logoff': 'Logon/Logoff',
288
+ 'Special Logon': 'Logon/Logoff',
289
+ 'File System': 'Object Access',
290
+ 'Registry': 'Object Access',
291
+ 'Kernel Object': 'Object Access',
292
+ 'Audit Policy Change': 'Policy Change',
293
+ 'Authentication Policy Change': 'Policy Change',
294
+ 'Sensitive Privilege Use': 'Privilege Use',
295
+ 'Security State Change': 'System',
296
+ 'Security System Extension': 'System',
297
+ 'System Integrity': 'System',
298
+ };
299
+ for (const [sub, cat] of Object.entries(categoryMap)) {
300
+ if (subcategory.toLowerCase().includes(sub.toLowerCase())) {
301
+ return cat;
302
+ }
303
+ }
304
+ return 'Other';
305
+ }
306
+ async readPowerShellLogging(domainDnsName, gpoGuid, settings) {
307
+ const registryPolPath = `${domainDnsName}/Policies/${gpoGuid}/Machine/Registry.pol`;
308
+ try {
309
+ const exists = await this.exists(registryPolPath);
310
+ if (!exists)
311
+ return;
312
+ const content = await this.readBinaryFile(registryPolPath);
313
+ settings.powershellLogging = this.parsePowerShellLogging(content);
314
+ }
315
+ catch (error) {
316
+ logger_1.logger.debug('Failed to read registry.pol', { error });
317
+ }
318
+ }
319
+ parsePowerShellLogging(content) {
320
+ const result = {
321
+ moduleLogging: false,
322
+ scriptBlockLogging: false,
323
+ transcription: false,
324
+ };
325
+ try {
326
+ const textContent = content.toString('utf16le');
327
+ if (textContent.includes('EnableScriptBlockLogging') && textContent.includes('\x01\x00\x00\x00')) {
328
+ result.scriptBlockLogging = true;
329
+ }
330
+ if (textContent.includes('EnableModuleLogging') && textContent.includes('\x01\x00\x00\x00')) {
331
+ result.moduleLogging = true;
332
+ }
333
+ if (textContent.includes('EnableTranscripting') && textContent.includes('\x01\x00\x00\x00')) {
334
+ result.transcription = true;
335
+ }
336
+ }
337
+ catch (error) {
338
+ logger_1.logger.debug('Failed to parse registry.pol', { error });
339
+ }
340
+ return result;
341
+ }
342
+ async testConnection() {
343
+ const timeout = this.config.timeout || 15000;
344
+ const cmd = `${this.buildSmbCommand()} 'ls'`;
345
+ try {
346
+ await execAsync(cmd, { timeout });
347
+ return {
348
+ success: true,
349
+ message: 'SMB connection successful',
350
+ };
351
+ }
352
+ catch (error) {
353
+ const message = error instanceof Error ? error.message : 'Unknown error';
354
+ return {
355
+ success: false,
356
+ message: `SMB connection failed: ${message}`,
357
+ };
358
+ }
359
+ }
360
+ }
361
+ exports.SMBProvider = SMBProvider;
362
+ function formatKerberosPolicy(policy, isDefault = false) {
363
+ return {
364
+ maxTicketAge: `${policy.maxTicketAge} hours`,
365
+ maxRenewAge: `${policy.maxRenewAge} days`,
366
+ maxServiceAge: `${policy.maxServiceAge} min`,
367
+ maxClockSkew: `${policy.maxClockSkew} min`,
368
+ ticketValidateClient: policy.ticketValidateClient,
369
+ isDefault,
370
+ };
371
+ }
372
+ function getDefaultKerberosPolicy() {
373
+ return {
374
+ maxTicketAge: '10 hours',
375
+ maxRenewAge: '7 days',
376
+ maxServiceAge: '600 min',
377
+ maxClockSkew: '5 min',
378
+ ticketValidateClient: true,
379
+ isDefault: true,
380
+ };
381
+ }
382
+ //# sourceMappingURL=smb.provider.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"smb.provider.js","sourceRoot":"","sources":["../../../src/providers/smb/smb.provider.ts"],"names":[],"mappings":";;;AAonBA,oDASC;AAMD,4DASC;AAnoBD,iDAAqC;AACrC,+BAAiC;AACjC,0CAA6D;AAC7D,2BAA4B;AAC5B,+BAA4B;AAC5B,+CAA4C;AAE5C,MAAM,SAAS,GAAG,IAAA,gBAAS,EAAC,oBAAI,CAAC,CAAC;AAiElC,MAAM,0BAA0B,GAAG,wCAAwC,CAAC;AAK5E,MAAa,WAAW;IACd,MAAM,CAAY;IAE1B,YAAY,MAAiB;QAC3B,IAAI,CAAC,MAAM,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,GAAG,MAAM;SACV,CAAC;IACJ,CAAC;IAKD,KAAK,CAAC,OAAO;QACX,eAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7G,CAAC;IAKD,KAAK,CAAC,UAAU;IAEhB,CAAC;IAKO,eAAe;QACrB,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAGhE,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,gBAAgB,IAAI,IAAI,KAAK,SAAS,MAAM,KAAK,QAAQ,IAAI,eAAe,MAAM,CAAC;IAC5F,CAAC;IAKD,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAGhG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,UAAU,OAAO,MAAM,QAAQ,IAAI,CAAC;QAEzE,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAE1D,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAElC,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAGnD,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,cAAc,CAAC,IAAY;QAC/B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAC7C,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,WAAM,GAAE,EAAE,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAGhG,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAEzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,UAAU,OAAO,MAAM,QAAQ,IAAI,CAAC;QAEzE,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;YAG3C,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAEf,IAAI,CAAC;gBACH,MAAM,IAAA,iBAAM,EAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;YAET,CAAC;YAED,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAG7C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAIzC,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAE5E,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,GAAG,UAAU,QAAQ,IAAI,CAAC;QAExE,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;YAEnE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAGrD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACzC,eAAM,CAAC,KAAK,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;YAE7D,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,eAAM,CAAC,KAAK,CAAC,sDAAsD,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACxG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAKD,KAAK,CAAC,kBAAkB,CAAC,aAAqB;QAC5C,MAAM,WAAW,GAAG,GAAG,aAAa,aAAa,0BAA0B,mDAAmD,CAAC;QAE/H,IAAI,CAAC;YACH,eAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAE/E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,eAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YACxF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKO,mBAAmB,CAAC,OAAe;QACzC,MAAM,MAAM,GAAmB;YAC7B,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,GAAG;YAClB,YAAY,EAAE,CAAC;YACf,oBAAoB,EAAE,IAAI;SAC3B,CAAC;QAGF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAGhC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,iBAAiB,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YAGjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACtD,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YAE/C,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAErC,QAAQ,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC1B,KAAK,cAAc;oBACjB,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAC/B,MAAM;gBACR,KAAK,aAAa;oBAChB,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC;oBAC9B,MAAM;gBACR,KAAK,eAAe;oBAClB,MAAM,CAAC,aAAa,GAAG,QAAQ,CAAC;oBAChC,MAAM;gBACR,KAAK,cAAc;oBACjB,MAAM,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAC/B,MAAM;gBACR,KAAK,sBAAsB;oBACzB,MAAM,CAAC,oBAAoB,GAAG,QAAQ,KAAK,CAAC,CAAC;oBAC7C,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAMD,KAAK,CAAC,uBAAuB,CAAC,aAAqB;QAEjD,MAAM,cAAc,GAAG,wCAAwC,CAAC;QAChE,MAAM,WAAW,GAAG,GAAG,aAAa,aAAa,cAAc,mDAAmD,CAAC;QAEnH,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,IAAI,CAAC;YAEH,eAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;YAErE,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtD,IAAI,cAAc,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gBACjD,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC5C,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC7D,CAAC;YAGD,MAAM,gBAAgB,GAAG,GAAG,aAAa,aAAa,0BAA0B,mDAAmD,CAAC;YACpI,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/D,IAAI,kBAAkB,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAC5D,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC;gBAClD,eAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACjE,CAAC;YAGD,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAGpE,MAAM,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;YAE1E,eAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACxD,cAAc,EAAE,QAAQ,CAAC,mBAAmB,KAAK,SAAS;gBAC1D,aAAa,EAAE,QAAQ,CAAC,kBAAkB,KAAK,SAAS;gBACxD,cAAc,EAAE,QAAQ,CAAC,aAAa,KAAK,SAAS;gBACpD,YAAY,EAAE,QAAQ,CAAC,iBAAiB,KAAK,SAAS;aACvD,CAAC,CAAC;YAEH,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAKO,mBAAmB,CAAC,OAAe,EAAE,QAA6B;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAGhC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,iBAAiB,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,mBAAmB,CAAC;gBACtE,SAAS;YACX,CAAC;YAED,IAAI,CAAC,iBAAiB;gBAAE,SAAS;YAIjC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAChE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAE,SAAS;YAE/C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAGvB,IAAI,OAAO,CAAC,QAAQ,CAAC,uCAAuC,CAAC,EAAE,CAAC;gBAC9D,QAAQ,CAAC,mBAAmB,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;gBACpE,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpD,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC;gBAC5D,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAGD,IAAI,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;gBAExC,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAID,IAAI,OAAO,CAAC,QAAQ,CAAC,oDAAoD,CAAC,EAAE,CAAC;gBAC3E,QAAQ,CAAC,kBAAkB,GAAG,KAAK,KAAK,GAAG,CAAC;YAC9C,CAAC;YAID,IAAI,OAAO,CAAC,QAAQ,CAAC,yDAAyD,CAAC,EAAE,CAAC;gBAChF,QAAQ,CAAC,wBAAwB,GAAG,KAAK,KAAK,GAAG,CAAC;YACpD,CAAC;QACH,CAAC;IACH,CAAC;IAKO,KAAK,CAAC,eAAe,CAC3B,aAAqB,EACrB,OAAe,EACf,QAA6B;QAE7B,MAAM,SAAS,GAAG,GAAG,aAAa,aAAa,OAAO,+CAA+C,CAAC;QAEtG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5C,IAAI,CAAC,MAAM;gBAAE,OAAO;YAEpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAC/C,QAAQ,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAMO,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAsD,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAGrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI;gBAAE,SAAS;YAEpB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW;gBAAE,SAAS;YAG3B,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,SAAS;YAE/B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAE9B,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;gBAAE,SAAS;YAG5C,MAAM,KAAK,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAGzC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAEpD,QAAQ,CAAC,IAAI,CAAC;gBACZ,QAAQ;gBACR,WAAW;gBACX,OAAO,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;gBAC1B,OAAO,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAKO,gBAAgB,CAAC,WAAmB;QAC1C,MAAM,WAAW,GAA2B;YAC1C,uBAAuB,EAAE,eAAe;YACxC,iCAAiC,EAAE,eAAe;YAClD,oCAAoC,EAAE,eAAe;YACrD,6BAA6B,EAAE,oBAAoB;YACnD,2BAA2B,EAAE,oBAAoB;YACjD,yBAAyB,EAAE,oBAAoB;YAC/C,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,cAAc;YACxB,eAAe,EAAE,cAAc;YAC/B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,eAAe;YAC3B,eAAe,EAAE,eAAe;YAChC,qBAAqB,EAAE,eAAe;YACtC,8BAA8B,EAAE,eAAe;YAC/C,yBAAyB,EAAE,eAAe;YAC1C,uBAAuB,EAAE,QAAQ;YACjC,2BAA2B,EAAE,QAAQ;YACrC,kBAAkB,EAAE,QAAQ;SAC7B,CAAC;QAEF,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACrD,IAAI,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC1D,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAMO,KAAK,CAAC,qBAAqB,CACjC,aAAqB,EACrB,OAAe,EACf,QAA6B;QAE7B,MAAM,eAAe,GAAG,GAAG,aAAa,aAAa,OAAO,uBAAuB,CAAC;QAEpF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YAClD,IAAI,CAAC,MAAM;gBAAE,OAAO;YAIpB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YAC3D,QAAQ,CAAC,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAOO,sBAAsB,CAAC,OAAe;QAC5C,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,KAAK;YACpB,kBAAkB,EAAE,KAAK;YACzB,aAAa,EAAE,KAAK;SACrB,CAAC;QAEF,IAAI,CAAC;YAGH,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAOhD,IAAI,WAAW,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBACjG,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC;YACnC,CAAC;YAED,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC9B,CAAC;YAED,IAAI,WAAW,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC5F,MAAM,CAAC,aAAa,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,eAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAKD,KAAK,CAAC,cAAc;QAClB,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC;QAE7C,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,2BAA2B;aACrC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,OAAO,EAAE,0BAA0B,OAAO,EAAE;aAC7C,CAAC;QACJ,CAAC;IACH,CAAC;CACF;AA7gBD,kCA6gBC;AAiBD,SAAgB,oBAAoB,CAAC,MAAsB,EAAE,SAAS,GAAG,KAAK;IAC5E,OAAO;QACL,YAAY,EAAE,GAAG,MAAM,CAAC,YAAY,QAAQ;QAC5C,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,OAAO;QACzC,aAAa,EAAE,GAAG,MAAM,CAAC,aAAa,MAAM;QAC5C,YAAY,EAAE,GAAG,MAAM,CAAC,YAAY,MAAM;QAC1C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;QACjD,SAAS;KACV,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB;IACtC,OAAO;QACL,YAAY,EAAE,UAAU;QACxB,WAAW,EAAE,QAAQ;QACrB,aAAa,EAAE,SAAS;QACxB,YAAY,EAAE,OAAO;QACrB,oBAAoB,EAAE,IAAI;QAC1B,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=server.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":""}
package/dist/server.js ADDED
@@ -0,0 +1,44 @@
1
+ "use strict";
2
+ Object.defineProperty(exports, "__esModule", { value: true });
3
+ const app_1 = require("./app");
4
+ const config_1 = require("./config");
5
+ const logger_1 = require("./utils/logger");
6
+ const migration_runner_1 = require("./data/migrations/migration.runner");
7
+ const container_1 = require("./container");
8
+ const package_json_1 = require("../package.json");
9
+ async function startServer() {
10
+ try {
11
+ const config = (0, config_1.getConfig)();
12
+ (0, logger_1.logInfo)('Configuration loaded successfully', {
13
+ port: config.server.port,
14
+ nodeEnv: config.server.nodeEnv,
15
+ });
16
+ await migration_runner_1.MigrationRunner.runMigrations(config.database.path);
17
+ (0, logger_1.logInfo)('Database migrations completed');
18
+ await container_1.DIContainer.initialize();
19
+ (0, logger_1.logInfo)('DI container initialized');
20
+ const app = (0, app_1.createApp)();
21
+ const server = app.listen(config.server.port, () => {
22
+ (0, logger_1.logInfo)('Server started successfully', {
23
+ port: config.server.port,
24
+ nodeEnv: config.server.nodeEnv,
25
+ version: package_json_1.version,
26
+ });
27
+ });
28
+ const shutdown = () => {
29
+ (0, logger_1.logInfo)('Shutdown signal received, closing server...');
30
+ server.close(() => {
31
+ (0, logger_1.logInfo)('Server closed successfully');
32
+ process.exit(0);
33
+ });
34
+ };
35
+ process.on('SIGTERM', shutdown);
36
+ process.on('SIGINT', shutdown);
37
+ }
38
+ catch (error) {
39
+ (0, logger_1.logError)('Failed to start server', error);
40
+ process.exit(1);
41
+ }
42
+ }
43
+ void startServer();
44
+ //# sourceMappingURL=server.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";;AAAA,+BAAkC;AAClC,qCAAqC;AACrC,2CAAmD;AACnD,yEAAqE;AACrE,2CAA0C;AAC1C,kDAA0C;AAO1C,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC;QAEH,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;QAC3B,IAAA,gBAAO,EAAC,mCAAmC,EAAE;YAC3C,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;YACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;SAC/B,CAAC,CAAC;QAGH,MAAM,kCAAe,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAA,gBAAO,EAAC,+BAA+B,CAAC,CAAC;QAGzC,MAAM,uBAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,IAAA,gBAAO,EAAC,0BAA0B,CAAC,CAAC;QAGpC,MAAM,GAAG,GAAG,IAAA,eAAS,GAAE,CAAC;QAGxB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACjD,IAAA,gBAAO,EAAC,6BAA6B,EAAE;gBACrC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO;gBAC9B,OAAO,EAAP,sBAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAGH,MAAM,QAAQ,GAAG,GAAS,EAAE;YAC1B,IAAA,gBAAO,EAAC,6CAA6C,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE;gBAChB,IAAA,gBAAO,EAAC,4BAA4B,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAChC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,iBAAQ,EAAC,wBAAwB,EAAE,KAAc,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAGD,KAAK,WAAW,EAAE,CAAC"}
@@ -0,0 +1,70 @@
1
+ import { LDAPProvider } from '../../providers/ldap/ldap.provider';
2
+ import { Finding } from '../../types/finding.types';
3
+ import { SecurityScore } from './scoring.service';
4
+ import { DomainConfig } from './response-formatter';
5
+ import { SMBConfig as AppSMBConfig, LDAPConfig } from '../../types/config.types';
6
+ import { AttackGraphExport } from '../../types/attack-graph.types';
7
+ export interface AuditOptions {
8
+ includeDetails?: boolean;
9
+ maxUsers?: number;
10
+ maxGroups?: number;
11
+ maxComputers?: number;
12
+ }
13
+ export interface AuditResult {
14
+ score: SecurityScore;
15
+ findings: Finding[];
16
+ stats: {
17
+ totalUsers: number;
18
+ enabledUsers: number;
19
+ disabledUsers: number;
20
+ totalGroups: number;
21
+ totalComputers: number;
22
+ enabledComputers: number;
23
+ disabledComputers: number;
24
+ totalOUs: number;
25
+ totalFindings: number;
26
+ executionTimeMs: number;
27
+ ldapUrl?: string;
28
+ };
29
+ timestamp: Date;
30
+ domainConfig?: DomainConfig;
31
+ attackGraph?: AttackGraphExport;
32
+ }
33
+ export declare class ADAuditService {
34
+ private ldapProvider;
35
+ private smbConfig?;
36
+ constructor(ldapProvider: LDAPProvider, smbConfig?: {
37
+ smb: AppSMBConfig;
38
+ ldap: LDAPConfig;
39
+ });
40
+ runAudit(options?: AuditOptions): Promise<AuditResult>;
41
+ testConnection(): Promise<{
42
+ success: boolean;
43
+ message: string;
44
+ }>;
45
+ private testAnonymousLdapAccess;
46
+ private fetchUsers;
47
+ private fetchGroups;
48
+ private fetchComputers;
49
+ private fetchDomain;
50
+ private fetchGpoSecuritySettings;
51
+ private fetchOUCount;
52
+ private fetchAcls;
53
+ private fetchAclsForObjects;
54
+ private fetchCertificateTemplates;
55
+ private fetchCertificateAuthorities;
56
+ private fetchGPOsWithAcls;
57
+ private fetchTrustsExtended;
58
+ private fetchDomainConfig;
59
+ private formatFiletimeDuration;
60
+ private getDomainModeName;
61
+ private extractDomainNameFromDN;
62
+ private fetchFSMORoles;
63
+ private extractServerFromDN;
64
+ private fetchTrusts;
65
+ private getTrustDirection;
66
+ private getTrustType;
67
+ private fetchGPOCount;
68
+ private fetchKerberosPolicyViaSMB;
69
+ }
70
+ //# sourceMappingURL=ad-audit.service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ad-audit.service.d.ts","sourceRoot":"","sources":["../../../src/services/audit/ad-audit.service.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIlE,OAAO,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC;AACpD,OAAO,EAA0B,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAIpD,OAAO,EAAE,SAAS,IAAI,YAAY,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAuBjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAiCnE,MAAM,WAAW,YAAY;IAI3B,cAAc,CAAC,EAAE,OAAO,CAAC;IAKzB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAKlB,SAAS,CAAC,EAAE,MAAM,CAAC;IAKnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD,MAAM,WAAW,WAAW;IAI1B,KAAK,EAAE,aAAa,CAAC;IAKrB,QAAQ,EAAE,OAAO,EAAE,CAAC;IAKpB,KAAK,EAAE;QACL,UAAU,EAAE,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,EAAE,MAAM,CAAC;QACpB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;QACzB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC;QACjB,aAAa,EAAE,MAAM,CAAC;QACtB,eAAe,EAAE,MAAM,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAKF,SAAS,EAAE,IAAI,CAAC;IAKhB,YAAY,CAAC,EAAE,YAAY,CAAC;IAK5B,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAgDD,qBAAa,cAAc;IAGb,OAAO,CAAC,YAAY;IAFhC,OAAO,CAAC,SAAS,CAAC,CAA0C;gBAExC,YAAY,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE;QAAE,GAAG,EAAE,YAAY,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE;IAU7F,QAAQ,CAAC,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAoJ1D,cAAc,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;YAiBxD,uBAAuB;YAmDvB,UAAU;YA6EV,WAAW;YA4BX,cAAc;YA2Dd,WAAW;YA+EX,wBAAwB;YAiFxB,YAAY;YA0BZ,SAAS;YAwDT,mBAAmB;YA+CnB,yBAAyB;YAgDzB,2BAA2B;YAwC3B,iBAAiB;YAmGjB,mBAAmB;YA+CnB,iBAAiB;IAiH/B,OAAO,CAAC,sBAAsB;IAuB9B,OAAO,CAAC,iBAAiB;IAoBzB,OAAO,CAAC,uBAAuB;YASjB,cAAc;IA+C5B,OAAO,CAAC,mBAAmB;YASb,WAAW;IA4BzB,OAAO,CAAC,iBAAiB;IAgBzB,OAAO,CAAC,YAAY;YAkBN,aAAa;YA0Cb,yBAAyB;CA4CxC"}