@etcsec-com/etc-collector 1.4.0

package/dist/services/audit/detectors/ad/accounts.detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/accounts.detector.ts"],"names":[],"mappings":";;AAgDA,8DA0BC;AAKD,8EAqBC;AAKD,4EAuBC;AAMD,4CA6BC;AAKD,8DAqBC;AAKD,wEAwBC;AAKD,kEAeC;AAKD,oEAeC;AAKD,kEAeC;AAKD,gEAeC;AAKD,sDAkBC;AAMD,gDAuBC;AAMD,kDAkBC;AAsBD,0DAwBC;AAMD,4DAsBC;AAKD,8CAgBC;AAKD,kDAgBC;AAWD,gEAuBC;AAKD,oEAgBC;AAoDD,kEA4BC;AAKD,gEAqBC;AAMD,0EA+BC;AAMD,wEAsCC;AAMD,sEA6BC;AAKD,gFAoCC;AAQD,4DA6CC;AAMD,gEAiCC;AAMD,wDAmCC;AAMD,0EA4DC;AAKD,kFASC;AAYD,sEAgDC;AAYD,4EAwCC;AAYD,4DAwCC;AAKD,sEAyCC;AApqCD,yEAA8F;AAK9F,SAAgB,yBAAyB,CAAC,KAAe,EAAE,cAAuB;IAChF,MAAM,gBAAgB,GAAG;QACvB,eAAe;QACf,mBAAmB;QACnB,eAAe;QACf,gBAAgB;KACjB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QACrE,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,OAAO,qBAAqB,IAAI,YAAY,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,sGAAsG;QACnH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,iCAAiC,CAAC,KAAe,EAAE,cAAuB;IACxF,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAE5E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5C,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CACxD,CAAC;QACF,OAAO,UAAU,IAAI,cAAc,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,2FAA2F;QACxG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,gCAAgC,CAAC,KAAe,EAAE,cAAuB;IACvF,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,cAAc,GAAI,CAAS,CAAC,gBAAgB,CAAqB,CAAC;QACxE,MAAM,SAAS,GAAG,cAAc,IAAI,cAAc,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC;QACnE,MAAM,cAAc,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CACpD,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CACxD,CAAC;QACF,OAAO,SAAS,IAAI,cAAc,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,0FAA0F;QACvG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAgB,gBAAgB,CAAC,KAAe,EAAE,cAAuB;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,MAAM,OAAO,GAAG,CAA4B,CAAC;QAC7C,MAAM,UAAU,GACd,OAAO,CAAC,YAAY,CAAC;YACrB,OAAO,CAAC,YAAY,CAAC;YACrB,OAAO,CAAC,YAAY,CAAC;YACrB,OAAO,CAAC,YAAY,CAAC,CAAC;QAGxB,IAAI,CAAC,UAAU;YAAE,OAAO,KAAK,CAAC;QAG9B,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,CAAC,UAAU,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,kFAAkF;QAC/F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,KAAe,EAAE,cAAuB;IAChF,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,eAAe,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,MAAM,YAAY,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,MAAM,kBAAkB,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACtF,OAAO,YAAY,IAAI,CAAC,kBAAkB,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,4FAA4F;QACzG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,8BAA8B,CAAC,KAAe,EAAE,cAAuB;IACrF,MAAM,iBAAiB,GAAG;QACxB,iBAAiB;QACjB,qBAAqB;QACrB,gBAAgB;QAChB,kBAAkB;QAClB,aAAa;KACd,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,WAAW,GAAG,IAAA,mCAAgB,EAAE,CAAS,CAAC,aAAa,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,4FAA4F;QACzG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,2BAA2B,CAAC,KAAe,EAAE,cAAuB;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,4EAA4E;QACzF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,KAAe,EAAE,cAAuB;IACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,oEAAoE;QACjF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,2BAA2B,CAAC,KAAe,EAAE,cAAuB;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,iEAAiE;QAC9E,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,KAAe,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,8EAA8E;QAC3F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,qBAAqB,CAAC,KAAe,EAAE,cAAuB;IAC5E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,sEAAsE;QACnF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAgB,kBAAkB,CAAC,KAAe,EAAE,cAAuB;IACzE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAErD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE7B,IAAI,CAAC,CAAC,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC/B,MAAM,aAAa,GAAG,CAAC,CAAC,SAAS,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAC5G,IAAI,KAAK,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QACvC,OAAO,aAAa,GAAG,YAAY,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,8GAA8G;QAC3H,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAgB,mBAAmB,CAAC,KAAe,EAAE,cAAuB;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE7B,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,gKAAgK;QAClK,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAS,cAAc,CAAC,QAAqC;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,EAAE,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAE9E,IAAI,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC,qBAAqB,CAAC;QAAE,OAAO,IAAI,CAAC;IAI1E,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,cAAc,CAAC;IACvD,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;AACtB,CAAC;AAMD,SAAgB,uBAAuB,CAAC,KAAe,EAAE,cAAuB;IAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,iBAAiB,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEzD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE7B,MAAM,WAAW,GAAG,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAE/B,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,IAAI,iBAAiB,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,sIAAsI;QACxI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB,CAAC,KAAe,EAAE,cAAuB;IAC/E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE7B,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,MAAM,UAAU,GAAI,CAAS,CAAC,YAAY,CAAuB,CAAC;QAElE,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,+IAA+I;QACjJ,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,iBAAiB,CAAC,KAAe,EAAE,cAAuB;IACxE,MAAM,YAAY,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,cAAc;QACrB,WAAW,EAAE,8EAA8E;QAC3F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,mBAAmB,CAAC,KAAe,EAAE,cAAuB;IAC1E,MAAM,cAAc,GAAG,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAEnF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAWD,SAAgB,0BAA0B,CAAC,KAAe,EAAE,cAAuB;IAGjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEtD,MAAM,GAAG,GAAG,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC;QAEtC,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,oEAAoE;YACpE,2DAA2D;QAC7D,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,KAAe,EAAE,cAAuB;IACnF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,cAAc,GAAI,CAAS,CAAC,cAAc,CAAC;QACjD,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAClC,OAAO,cAAc,KAAK,GAAG,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,uFAAuF;QACpG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAOD,MAAM,wBAAwB,GAAG;IAC/B,WAAW;IACX,WAAW;IACX,eAAe;IACf,eAAe;IACf,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,WAAW;IACX,aAAa;IACb,YAAY;IACZ,WAAW;IACX,cAAc;IACd,aAAa;CACd,CAAC;AAKF,SAAS,wBAAwB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAI,IAAY,CAAC,sBAAsB,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IACnC,OAAO,CAAC,GAAa,CAAC,CAAC;AACzB,CAAC;AAKD,SAAS,gBAAgB,CAAC,IAAY;IAEpC,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;AACvF,CAAC;AAMD,SAAgB,2BAA2B,CAAC,KAAe,EAAE,cAAuB;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAEpC,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,iDAAiD;QACxD,WAAW,EACT,wKAAwK;QAC1K,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,qIAAqI;gBACvI,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;aACnF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,KAAe,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAGlC,MAAM,IAAI,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAElC,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,8IAA8I;QAChJ,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAMD,SAAgB,+BAA+B,CAAC,KAAe,EAAE,cAAuB;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,UAAU,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAEnD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7E,IAAI,CAAC,CAAC,CAAC,eAAe;YAAE,OAAO,IAAI,CAAC;QACpC,OAAO,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,UAAU,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,8IAA8I;QAChJ,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,sGAAsG;aACzG;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,8BAA8B,CAAC,KAAe,EAAE,cAAuB;IACrF,MAAM,gBAAgB,GAAG;QACvB,eAAe;QACf,mBAAmB;QACnB,eAAe;QACf,gBAAgB;QAChB,kBAAkB;QAClB,mBAAmB;QACnB,kBAAkB;KACnB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7E,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9B,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EACT,kIAAkI;QACpI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,wHAAwH;aAC3H;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,6BAA6B,CAAC,KAAe,EAAE,cAAuB;IACpF,MAAM,oBAAoB,GAAG,QAAQ,CAAC;IAEtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,IAAI,CAAC,CAAC,CAAC,kBAAkB;YAAE,OAAO,KAAK,CAAC;QACxC,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErD,OAAO,CAAC,CAAC,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,8DAA8D;QACrE,WAAW,EACT,0IAA0I;QAC5I,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EAAE,8DAA8D;aAC/E;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAKD,SAAgB,kCAAkC,CAAC,KAAe,EAAE,cAAuB;IAKzF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAEvC,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE7E,MAAM,QAAQ,GAAI,CAAS,CAAC,+BAA+B,CAAC,CAAC;QAC7D,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE5B,MAAM,WAAW,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QAErF,MAAM,WAAW,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,wHAAwH;QAC1H,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EAAE,+DAA+D;aAChF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAQD,SAAgB,wBAAwB,CAAC,KAAe,EAAE,cAAuB;IAC/E,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,mBAAmB;QACnB,eAAe;QACf,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;QAClB,kBAAkB;QAClB,iBAAiB;KAClB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAGrC,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAyB,CAAC;QACvD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpD,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1C,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CACpF,CAAC;QAEF,OAAO,CAAC,cAAc,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,wJAAwJ;QAC1J,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,+GAA+G;gBACjH,MAAM,EAAE,sEAAsE;aAC/E;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,0BAA0B,CAAC,KAAe,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG7B,MAAM,GAAG,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAE3D,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,qIAAqI;QACvI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,iEAAiE;gBAC/E,cAAc,EACZ,iGAAiG;gBACnG,YAAY,EAAE,iFAAiF;aAChG;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,sBAAsB,CAAC,KAAe,EAAE,cAAuB;IAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAErC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG7B,MAAM,iBAAiB,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEhG,OAAO,CAAC,iBAAiB,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EACT,iIAAiI;QACnI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,+EAA+E;gBACjF,QAAQ,EAAE;oBACR,gEAAgE;oBAChE,oCAAoC;oBACpC,2CAA2C;iBAC5C;aACF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,+BAA+B,CAAC,KAAe,EAAE,cAAuB;IACtF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,MAAM,GAAG,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3D,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACzF,MAAM,cAAc,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QAEnF,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc;YAAE,OAAO,KAAK,CAAC;QAG7C,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAS7B,MAAM,YAAY,GAAG,CAAC,CAAC,SAAS,CAAC;QACjC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC;YACzC,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YAElF,IAAI,cAAc,GAAG,EAAE,EAAE,CAAC;gBACxB,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAGD,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC9F,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAG5F,OAAO,eAAe,IAAI,CAAC,YAAY,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,kIAAkI;QACpI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,gHAAgH;gBAClH,KAAK,EAAE;oBACL,oEAAoE;oBACpE,+CAA+C;oBAC/C,yCAAyC;iBAC1C;aACF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAKD,SAAgB,mCAAmC,CAAC,KAAe,EAAE,cAAuB;IAC1F,OAAO;QACL,2BAA2B,CAAC,KAAK,EAAE,cAAc,CAAC;QAClD,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC;QACjD,+BAA+B,CAAC,KAAK,EAAE,cAAc,CAAC;QACtD,8BAA8B,CAAC,KAAK,EAAE,cAAc,CAAC;QACrD,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC;QACpD,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC;KAC1D,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC;AAYD,SAAgB,6BAA6B,CAAC,KAAe,EAAE,cAAuB;IAGpF,MAAM,iBAAiB,GAAG;QACxB,oBAAoB;QACpB,+BAA+B;QAC/B,gBAAgB;QAChB,eAAe;QACf,mBAAmB;KACpB,CAAC;IAGF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAG5C,MAAM,OAAO,GAAI,CAA6B,CAAC,aAAa,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7G,MAAM,kBAAkB,GACtB,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;YACjD,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5C,WAAW,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QAGvD,MAAM,aAAa,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QACzE,MAAM,aAAa,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC;QACzC,MAAM,oBAAoB,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAClD,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAC1E,CAAC;QAEF,OAAO,kBAAkB,IAAI,CAAC,aAAa,IAAI,aAAa,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,2EAA2E;YAC3E,iEAAiE;QACnE,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EAAE;YACP,cAAc,EACZ,wHAAwH;SAC3H;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,gCAAgC,CAAC,KAAe,EAAE,cAAuB;IACvF,MAAM,eAAe,GAAG;QACtB,iBAAiB;QACjB,qBAAqB;QACrB,oCAAoC;QACpC,iCAAiC;QACjC,gCAAgC;QAChC,uBAAuB;QACvB,2BAA2B;QAC3B,uBAAuB;QACvB,sBAAsB;QACtB,iCAAiC;QACjC,yBAAyB;QACzB,mBAAmB;QACnB,wBAAwB;QACxB,qCAAqC;QACrC,yBAAyB;KAC1B,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5B,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,qCAAqC;QAC5C,WAAW,EACT,6EAA6E;YAC7E,6EAA6E;QAC/E,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EAAE;YACP,eAAe,EAAE,eAAe;SACjC;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,wBAAwB,CAAC,KAAe,EAAE,cAAuB;IAC/E,MAAM,WAAW,GAAG;QAClB,eAAe;QACf,mBAAmB;QACnB,eAAe;QACf,gBAAgB;QAChB,mBAAmB;QACnB,kBAAkB;QAClB,kBAAkB;KACnB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE9B,MAAM,QAAQ,GACZ,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,GAAG,IAAI,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,kBAAkB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CACrC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CACpE,CAAC;QAEF,OAAO,QAAQ,IAAI,OAAO,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,yDAAyD;YACzD,yEAAyE;QAC3E,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EAAE;YACP,cAAc,EACZ,0GAA0G;SAC7G;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,6BAA6B,CAAC,KAAe,EAAE,cAAuB;IACpF,OAAO;QAEL,yBAAyB,CAAC,KAAK,EAAE,cAAc,CAAC;QAChD,iCAAiC,CAAC,KAAK,EAAE,cAAc,CAAC;QACxD,gCAAgC,CAAC,KAAK,EAAE,cAAc,CAAC;QACvD,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC;QACvC,yBAAyB,CAAC,KAAK,EAAE,cAAc,CAAC;QAChD,8BAA8B,CAAC,KAAK,EAAE,cAAc,CAAC;QACrD,2BAA2B,CAAC,KAAK,EAAE,cAAc,CAAC;QAClD,4BAA4B,CAAC,KAAK,EAAE,cAAc,CAAC;QACnD,2BAA2B,CAAC,KAAK,EAAE,cAAc,CAAC;QAClD,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC;QAEjD,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC;QACzC,qBAAqB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC5C,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC1C,uBAAuB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,wBAAwB,CAAC,KAAK,EAAE,cAAc,CAAC;QAE/C,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC;QACxC,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC1C,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC;QACjD,4BAA4B,CAAC,KAAK,EAAE,cAAc,CAAC;QAEnD,2BAA2B,CAAC,KAAK,EAAE,cAAc,CAAC;QAClD,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC;QACjD,+BAA+B,CAAC,KAAK,EAAE,cAAc,CAAC;QACtD,8BAA8B,CAAC,KAAK,EAAE,cAAc,CAAC;QACrD,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC;QACpD,kCAAkC,CAAC,KAAK,EAAE,cAAc,CAAC;QAEzD,wBAAwB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC/C,0BAA0B,CAAC,KAAK,EAAE,cAAc,CAAC;QACjD,sBAAsB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC7C,+BAA+B,CAAC,KAAK,EAAE,cAAc,CAAC;QAEtD,6BAA6B,CAAC,KAAK,EAAE,cAAc,CAAC;QACpD,gCAAgC,CAAC,KAAK,EAAE,cAAc,CAAC;QACvD,wBAAwB,CAAC,KAAK,EAAE,cAAc,CAAC;KAChD,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/services/audit/detectors/ad/adcs.detector.d.ts

@@ -0,0 +1,21 @@
+import { Finding } from '../../../../types/finding.types';
+import { ADCSCertificateTemplate, ADCSCertificateAuthority } from '../../../../types/adcs.types';
+export declare function detectEsc1VulnerableTemplate(templates: ADCSCertificateTemplate[], includeDetails: boolean): Finding;
+export declare function detectEsc2AnyPurpose(templates: ADCSCertificateTemplate[], includeDetails: boolean): Finding;
+export declare function detectEsc3EnrollmentAgent(templates: ADCSCertificateTemplate[], includeDetails: boolean): Finding;
+export declare function detectEsc4VulnerableTemplateAcl(templates: ADCSCertificateTemplate[], _includeDetails: boolean): Finding;
+export declare function detectEsc5PkiObjectAcl(_cas: ADCSCertificateAuthority[], _includeDetails: boolean): Finding;
+export declare function detectEsc6EditfFlag(cas: ADCSCertificateAuthority[], includeDetails: boolean): Finding;
+export declare function detectEsc7CaVulnerableAcl(cas: ADCSCertificateAuthority[], includeDetails: boolean): Finding;
+export declare function detectEsc8HttpEnrollment(cas: ADCSCertificateAuthority[], includeDetails: boolean): Finding;
+export declare function detectEsc9NoSecurityExtension(templates: ADCSCertificateTemplate[], includeDetails: boolean): Finding;
+export declare function detectEsc10WeakCertificateMapping(domain: {
+    dn: string;
+    [key: string]: unknown;
+} | null, _includeDetails: boolean): Finding;
+export declare function detectEsc11IcertRequestEnforcement(cas: ADCSCertificateAuthority[], includeDetails: boolean): Finding;
+export declare function detectAdcsVulnerabilities(templates: ADCSCertificateTemplate[], cas: ADCSCertificateAuthority[], includeDetails: boolean, domain?: {
+    dn: string;
+    [key: string]: unknown;
+} | null): Finding[];
+//# sourceMappingURL=adcs.detector.d.ts.map

package/dist/services/audit/detectors/ad/adcs.detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adcs.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/adcs.detector.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EAQzB,MAAM,8BAA8B,CAAC;AAkBtC,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,uBAAuB,EAAE,EACpC,cAAc,EAAE,OAAO,GACtB,OAAO,CA4BT;AAMD,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,uBAAuB,EAAE,EACpC,cAAc,EAAE,OAAO,GACtB,OAAO,CA2BT;AAMD,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,uBAAuB,EAAE,EACpC,cAAc,EAAE,OAAO,GACtB,OAAO,CAwBT;AAOD,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,uBAAuB,EAAE,EACpC,eAAe,EAAE,OAAO,GACvB,OAAO,CA2BT;AAOD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,wBAAwB,EAAE,EAChC,eAAe,EAAE,OAAO,GACvB,OAAO,CAoBT;AAOD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,wBAAwB,EAAE,EAC/B,cAAc,EAAE,OAAO,GACtB,OAAO,CAmBT;AAOD,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,wBAAwB,EAAE,EAC/B,cAAc,EAAE,OAAO,GACtB,OAAO,CAoBT;AAOD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,wBAAwB,EAAE,EAC/B,cAAc,EAAE,OAAO,GACtB,OAAO,CAmBT;AAUD,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,uBAAuB,EAAE,EACpC,cAAc,EAAE,OAAO,GACtB,OAAO,CA6BT;AAQD,wBAAgB,iCAAiC,CAC/C,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,IAAI,EACrD,eAAe,EAAE,OAAO,GACvB,OAAO,CA2BT;AAQD,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,wBAAwB,EAAE,EAC/B,cAAc,EAAE,OAAO,GACtB,OAAO,CAwBT;AAKD,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,uBAAuB,EAAE,EACpC,GAAG,EAAE,wBAAwB,EAAE,EAC/B,cAAc,EAAE,OAAO,EACvB,MAAM,CAAC,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,GAAG,IAAI,GACrD,OAAO,EAAE,CAeX"}

package/dist/services/audit/detectors/ad/adcs.detector.js

@@ -0,0 +1,227 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.detectEsc1VulnerableTemplate = detectEsc1VulnerableTemplate;
+exports.detectEsc2AnyPurpose = detectEsc2AnyPurpose;
+exports.detectEsc3EnrollmentAgent = detectEsc3EnrollmentAgent;
+exports.detectEsc4VulnerableTemplateAcl = detectEsc4VulnerableTemplateAcl;
+exports.detectEsc5PkiObjectAcl = detectEsc5PkiObjectAcl;
+exports.detectEsc6EditfFlag = detectEsc6EditfFlag;
+exports.detectEsc7CaVulnerableAcl = detectEsc7CaVulnerableAcl;
+exports.detectEsc8HttpEnrollment = detectEsc8HttpEnrollment;
+exports.detectEsc9NoSecurityExtension = detectEsc9NoSecurityExtension;
+exports.detectEsc10WeakCertificateMapping = detectEsc10WeakCertificateMapping;
+exports.detectEsc11IcertRequestEnforcement = detectEsc11IcertRequestEnforcement;
+exports.detectAdcsVulnerabilities = detectAdcsVulnerabilities;
+const adcs_types_1 = require("../../../../types/adcs.types");
+function hasAuthenticationEku(ekus) {
+    return (ekus.includes(adcs_types_1.EKU_CLIENT_AUTH) ||
+        ekus.includes(adcs_types_1.EKU_PKIINIT_CLIENT_AUTH) ||
+        ekus.includes(adcs_types_1.EKU_SMART_CARD_LOGON) ||
+        ekus.length === 0);
+}
+function detectEsc1VulnerableTemplate(templates, includeDetails) {
+    const affected = templates.filter((t) => {
+        const nameFlag = t['msPKI-Certificate-Name-Flag'] || 0;
+        const enrollmentFlag = t['msPKI-Enrollment-Flag'] || 0;
+        const ekus = t.pKIExtendedKeyUsage || [];
+        const enrolleeSuppliesSubject = (nameFlag & adcs_types_1.CT_FLAG_ENROLLEE_SUPPLIES_SUBJECT) !== 0;
+        const canAuthenticate = hasAuthenticationEku(ekus);
+        const noApprovalRequired = (enrollmentFlag & adcs_types_1.CT_FLAG_PEND_ALL_REQUESTS) === 0;
+        return enrolleeSuppliesSubject && canAuthenticate && noApprovalRequired;
+    });
+    return {
+        type: 'ESC1_VULNERABLE_TEMPLATE',
+        severity: 'critical',
+        category: 'adcs',
+        title: 'ESC1 - Misconfigured Certificate Template',
+        description: 'Certificate template allows enrollee to specify Subject Alternative Name (SAN) and has client authentication EKU, enabling privilege escalation to any user/computer.',
+        count: affected.length,
+        affectedEntities: includeDetails ? affected.map((t) => t.name || t.displayName || t.dn) : undefined,
+    };
+}
+function detectEsc2AnyPurpose(templates, includeDetails) {
+    const affected = templates.filter((t) => {
+        const ekus = t.pKIExtendedKeyUsage || [];
+        const enrollmentFlag = t['msPKI-Enrollment-Flag'] || 0;
+        const hasAnyPurpose = ekus.includes(adcs_types_1.EKU_ANY_PURPOSE);
+        const noEkuConstraint = ekus.length === 0;
+        const noApprovalRequired = (enrollmentFlag & adcs_types_1.CT_FLAG_PEND_ALL_REQUESTS) === 0;
+        return (hasAnyPurpose || noEkuConstraint) && noApprovalRequired;
+    });
+    return {
+        type: 'ESC2_ANY_PURPOSE',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC2 - Any Purpose Certificate Template',
+        description: 'Certificate template has "Any Purpose" EKU or no EKU constraints, allowing issued certificates to be used for any purpose including client authentication.',
+        count: affected.length,
+        affectedEntities: includeDetails ? affected.map((t) => t.name || t.displayName || t.dn) : undefined,
+    };
+}
+function detectEsc3EnrollmentAgent(templates, includeDetails) {
+    const affected = templates.filter((t) => {
+        const ekus = t.pKIExtendedKeyUsage || [];
+        const enrollmentFlag = t['msPKI-Enrollment-Flag'] || 0;
+        const hasEnrollmentAgent = ekus.includes(adcs_types_1.EKU_CERTIFICATE_REQUEST_AGENT);
+        const noApprovalRequired = (enrollmentFlag & adcs_types_1.CT_FLAG_PEND_ALL_REQUESTS) === 0;
+        return hasEnrollmentAgent && noApprovalRequired;
+    });
+    return {
+        type: 'ESC3_ENROLLMENT_AGENT',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC3 - Enrollment Agent Certificate Template',
+        description: 'Certificate template allows issuance of enrollment agent certificates, which can be used to enroll certificates on behalf of other users.',
+        count: affected.length,
+        affectedEntities: includeDetails ? affected.map((t) => t.name || t.displayName || t.dn) : undefined,
+    };
+}
+function detectEsc4VulnerableTemplateAcl(templates, _includeDetails) {
+    const affected = templates.filter((t) => {
+        const ekus = t.pKIExtendedKeyUsage || [];
+        return hasAuthenticationEku(ekus) && t.nTSecurityDescriptor !== undefined;
+    });
+    return {
+        type: 'ESC4_VULNERABLE_TEMPLATE_ACL',
+        severity: 'critical',
+        category: 'adcs',
+        title: 'ESC4 - Certificate Template ACL Review Required',
+        description: 'Certificate templates with authentication capability should be reviewed for overly permissive ACLs that allow non-admins to modify template properties.',
+        count: 0,
+        affectedEntities: undefined,
+        details: {
+            note: 'Full ACL analysis requires parsing nTSecurityDescriptor. Manual review recommended.',
+            templatesWithAuthEku: affected.length,
+        },
+    };
+}
+function detectEsc5PkiObjectAcl(_cas, _includeDetails) {
+    return {
+        type: 'ESC5_PKI_OBJECT_ACL',
+        severity: 'medium',
+        category: 'adcs',
+        title: 'ESC5 - PKI Object ACL Review Required',
+        description: 'PKI-related AD objects should be reviewed for overly permissive ACLs that could allow non-admins to modify CA configuration or templates.',
+        count: 0,
+        affectedEntities: undefined,
+        details: {
+            note: 'Manual review of PKI object ACLs recommended.',
+        },
+    };
+}
+function detectEsc6EditfFlag(cas, includeDetails) {
+    return {
+        type: 'ESC6_EDITF_FLAG',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC6 - CA Configuration Review Required',
+        description: 'Certificate Authorities should be checked for EDITF_ATTRIBUTESUBJECTALTNAME2 flag which allows any certificate requestor to specify a SAN.',
+        count: 0,
+        affectedEntities: includeDetails ? cas.map((ca) => ca.name || ca.dn) : undefined,
+        details: {
+            note: 'Check registry key EditFlags on CA servers. Flag 0x00040000 indicates vulnerability.',
+            casToCheck: cas.length,
+        },
+    };
+}
+function detectEsc7CaVulnerableAcl(cas, includeDetails) {
+    return {
+        type: 'ESC7_CA_VULNERABLE_ACL',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC7 - CA ACL Review Required',
+        description: 'Certificate Authority ACLs should be reviewed for ManageCA or ManageCertificates rights granted to non-administrators.',
+        count: 0,
+        affectedEntities: includeDetails ? cas.map((ca) => ca.name || ca.dn) : undefined,
+        details: {
+            note: 'Manual review of CA ACLs recommended.',
+            casToReview: cas.length,
+        },
+    };
+}
+function detectEsc8HttpEnrollment(cas, includeDetails) {
+    return {
+        type: 'ESC8_HTTP_ENROLLMENT',
+        severity: 'medium',
+        category: 'adcs',
+        title: 'ESC8 - Web Enrollment Check Required',
+        description: 'Certificate Authorities should be checked for HTTP-based web enrollment endpoints which are vulnerable to NTLM relay attacks.',
+        count: 0,
+        affectedEntities: includeDetails ? cas.map((ca) => `${ca.dNSHostName || ca.name}`) : undefined,
+        details: {
+            note: 'Check for http://<CA>/certsrv/ endpoints. HTTPS with Extended Protection mitigates this.',
+            casToCheck: cas.length,
+        },
+    };
+}
+function detectEsc9NoSecurityExtension(templates, includeDetails) {
+    const affected = templates.filter((t) => {
+        const schemaVersion = t['msPKI-Template-Schema-Version'] || 1;
+        const ekus = t.pKIExtendedKeyUsage || [];
+        return schemaVersion < 2 && hasAuthenticationEku(ekus);
+    });
+    return {
+        type: 'ESC9_NO_SECURITY_EXTENSION',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC9 - No Security Extension in Certificate Template',
+        description: 'Certificate templates using schema version 1 do not include the szOID_NTDS_CA_SECURITY_EXT security extension. Combined with weak certificate mapping, this allows certificate impersonation attacks.',
+        count: affected.length,
+        affectedEntities: includeDetails ? affected.map((t) => t.name || t.displayName || t.dn) : undefined,
+        details: affected.length > 0
+            ? {
+                recommendation: 'Upgrade certificate templates to schema version 2 or higher, and enable strong certificate mapping.',
+                vulnerabilityChain: 'ESC9 + weak certificate mapping = impersonation',
+            }
+            : undefined,
+    };
+}
+function detectEsc10WeakCertificateMapping(domain, _includeDetails) {
+    return {
+        type: 'ESC10_WEAK_CERTIFICATE_MAPPING',
+        severity: 'high',
+        category: 'adcs',
+        title: 'ESC10 - Certificate Mapping Configuration Review Required',
+        description: 'Domain controllers should be configured for strong certificate mapping to prevent certificate impersonation attacks. This setting cannot be detected via LDAP.',
+        count: domain ? 1 : 0,
+        details: {
+            note: 'Check StrongCertificateBindingEnforcement registry key on DCs. Value should be 2 (Full Enforcement).',
+            registryPath: 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\Kdc\\StrongCertificateBindingEnforcement',
+            recommendation: 'Set StrongCertificateBindingEnforcement to 2 for full enforcement. Test in compatibility mode (1) first.',
+            microsoftDoc: 'https://support.microsoft.com/en-us/topic/kb5014754-certificate-based-authentication-changes-on-windows-domain-controllers',
+        },
+    };
+}
+function detectEsc11IcertRequestEnforcement(cas, includeDetails) {
+    return {
+        type: 'ESC11_ICERT_REQUEST_ENFORCEMENT',
+        severity: 'medium',
+        category: 'adcs',
+        title: 'ESC11 - RPC Encryption Enforcement Check Required',
+        description: 'Certificate Authorities should enforce RPC encryption (IF_ENFORCEENCRYPTICERTREQUEST flag) to prevent NTLM relay attacks to the ICertPassage RPC interface.',
+        count: cas.length > 0 ? 1 : 0,
+        affectedEntities: includeDetails ? cas.map((ca) => ca.name || ca.dn) : undefined,
+        details: {
+            note: 'Check InterfaceFlags registry key on CA servers. Flag 0x00000200 (IF_ENFORCEENCRYPTICERTREQUEST) should be set.',
+            registryPath: 'HKLM\\SYSTEM\\CurrentControlSet\\Services\\CertSvc\\Configuration\\<CA>\\InterfaceFlags',
+            casToCheck: cas.length,
+            recommendation: 'Set IF_ENFORCEENCRYPTICERTREQUEST flag using: certutil -setreg CA\\InterfaceFlags +IF_ENFORCEENCRYPTICERTREQUEST',
+        },
+    };
+}
+function detectAdcsVulnerabilities(templates, cas, includeDetails, domain) {
+    return [
+        detectEsc1VulnerableTemplate(templates, includeDetails),
+        detectEsc2AnyPurpose(templates, includeDetails),
+        detectEsc3EnrollmentAgent(templates, includeDetails),
+        detectEsc4VulnerableTemplateAcl(templates, includeDetails),
+        detectEsc5PkiObjectAcl(cas, includeDetails),
+        detectEsc6EditfFlag(cas, includeDetails),
+        detectEsc7CaVulnerableAcl(cas, includeDetails),
+        detectEsc8HttpEnrollment(cas, includeDetails),
+        detectEsc9NoSecurityExtension(templates, includeDetails),
+        detectEsc10WeakCertificateMapping(domain || null, includeDetails),
+        detectEsc11IcertRequestEnforcement(cas, includeDetails),
+    ].filter((finding) => finding.count > 0 || finding.details?.['note']);
+}
+//# sourceMappingURL=adcs.detector.js.map

package/dist/services/audit/detectors/ad/adcs.detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adcs.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/adcs.detector.ts"],"names":[],"mappings":";;AAqDA,oEA+BC;AAMD,oDA8BC;AAMD,8DA2BC;AAOD,0EA8BC;AAOD,wDAuBC;AAOD,kDAsBC;AAOD,8DAuBC;AAOD,4DAsBC;AAUD,sEAgCC;AAQD,8EA8BC;AAQD,gFA2BC;AAKD,8DAoBC;AAvaD,6DAUsC;AAKtC,SAAS,oBAAoB,CAAC,IAAc;IAC1C,OAAO,CACL,IAAI,CAAC,QAAQ,CAAC,4BAAe,CAAC;QAC9B,IAAI,CAAC,QAAQ,CAAC,oCAAuB,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,iCAAoB,CAAC;QACnC,IAAI,CAAC,MAAM,KAAK,CAAC,CAClB,CAAC;AACJ,CAAC;AAMD,SAAgB,4BAA4B,CAC1C,SAAoC,EACpC,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,cAAc,GAAG,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAGzC,MAAM,uBAAuB,GAAG,CAAC,QAAQ,GAAG,8CAAiC,CAAC,KAAK,CAAC,CAAC;QAGrF,MAAM,eAAe,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAGnD,MAAM,kBAAkB,GAAG,CAAC,cAAc,GAAG,sCAAyB,CAAC,KAAK,CAAC,CAAC;QAE9E,OAAO,uBAAuB,IAAI,eAAe,IAAI,kBAAkB,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2CAA2C;QAClD,WAAW,EACT,uKAAuK;QACzK,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACpG,CAAC;AACJ,CAAC;AAMD,SAAgB,oBAAoB,CAClC,SAAoC,EACpC,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAGvD,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,4BAAe,CAAC,CAAC;QAGrD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC;QAG1C,MAAM,kBAAkB,GAAG,CAAC,cAAc,GAAG,sCAAyB,CAAC,KAAK,CAAC,CAAC;QAE9E,OAAO,CAAC,aAAa,IAAI,eAAe,CAAC,IAAI,kBAAkB,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,yCAAyC;QAChD,WAAW,EACT,4JAA4J;QAC9J,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACpG,CAAC;AACJ,CAAC;AAMD,SAAgB,yBAAyB,CACvC,SAAoC,EACpC,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;QACzC,MAAM,cAAc,GAAG,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAGvD,MAAM,kBAAkB,GAAG,IAAI,CAAC,QAAQ,CAAC,0CAA6B,CAAC,CAAC;QAGxE,MAAM,kBAAkB,GAAG,CAAC,cAAc,GAAG,sCAAyB,CAAC,KAAK,CAAC,CAAC;QAE9E,OAAO,kBAAkB,IAAI,kBAAkB,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,8CAA8C;QACrD,WAAW,EACT,2IAA2I;QAC7I,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACpG,CAAC;AACJ,CAAC;AAOD,SAAgB,+BAA+B,CAC7C,SAAoC,EACpC,eAAwB;IAQxB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;QACzC,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,oBAAoB,KAAK,SAAS,CAAC;IAC5E,CAAC,CAAC,CAAC;IAGH,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,iDAAiD;QACxD,WAAW,EACT,yJAAyJ;QAC3J,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,qFAAqF;YAC3F,oBAAoB,EAAE,QAAQ,CAAC,MAAM;SACtC;KACF,CAAC;AACJ,CAAC;AAOD,SAAgB,sBAAsB,CACpC,IAAgC,EAChC,eAAwB;IAQxB,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,2IAA2I;QAC7I,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,+CAA+C;SACtD;KACF,CAAC;AACJ,CAAC;AAOD,SAAgB,mBAAmB,CACjC,GAA+B,EAC/B,cAAuB;IAMvB,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,yCAAyC;QAChD,WAAW,EACT,4IAA4I;QAC9I,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,OAAO,EAAE;YACP,IAAI,EAAE,sFAAsF;YAC5F,UAAU,EAAE,GAAG,CAAC,MAAM;SACvB;KACF,CAAC;AACJ,CAAC;AAOD,SAAgB,yBAAyB,CACvC,GAA+B,EAC/B,cAAuB;IAOvB,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,wHAAwH;QAC1H,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,OAAO,EAAE;YACP,IAAI,EAAE,uCAAuC;YAC7C,WAAW,EAAE,GAAG,CAAC,MAAM;SACxB;KACF,CAAC;AACJ,CAAC;AAOD,SAAgB,wBAAwB,CACtC,GAA+B,EAC/B,cAAuB;IAMvB,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,+HAA+H;QACjI,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9F,OAAO,EAAE;YACP,IAAI,EAAE,0FAA0F;YAChG,UAAU,EAAE,GAAG,CAAC,MAAM;SACvB;KACF,CAAC;AACJ,CAAC;AAUD,SAAgB,6BAA6B,CAC3C,SAAoC,EACpC,cAAuB;IAIvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,aAAa,GAAG,CAAC,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAGzC,OAAO,aAAa,GAAG,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,sDAAsD;QAC7D,WAAW,EACT,uMAAuM;QACzM,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACnG,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,qGAAqG;gBACvG,kBAAkB,EAAE,iDAAiD;aACtE;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAQD,SAAgB,iCAAiC,CAC/C,MAAqD,EACrD,eAAwB;IAUxB,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,2DAA2D;QAClE,WAAW,EACT,gKAAgK;QAClK,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,OAAO,EAAE;YACP,IAAI,EAAE,sGAAsG;YAC5G,YAAY,EACV,qFAAqF;YACvF,cAAc,EACZ,0GAA0G;YAC5G,YAAY,EACV,4HAA4H;SAC/H;KACF,CAAC;AACJ,CAAC;AAQD,SAAgB,kCAAkC,CAChD,GAA+B,EAC/B,cAAuB;IAOvB,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,mDAAmD;QAC1D,WAAW,EACT,6JAA6J;QAC/J,KAAK,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,OAAO,EAAE;YACP,IAAI,EAAE,iHAAiH;YACvH,YAAY,EACV,yFAAyF;YAC3F,UAAU,EAAE,GAAG,CAAC,MAAM;YACtB,cAAc,EACZ,kHAAkH;SACrH;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CACvC,SAAoC,EACpC,GAA+B,EAC/B,cAAuB,EACvB,MAAsD;IAEtD,OAAO;QACL,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QACvD,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/C,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,+BAA+B,CAAC,SAAS,EAAE,cAAc,CAAC;QAC1D,sBAAsB,CAAC,GAAG,EAAE,cAAc,CAAC;QAC3C,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC;QACxC,yBAAyB,CAAC,GAAG,EAAE,cAAc,CAAC;QAC9C,wBAAwB,CAAC,GAAG,EAAE,cAAc,CAAC;QAE7C,6BAA6B,CAAC,SAAS,EAAE,cAAc,CAAC;QACxD,iCAAiC,CAAC,MAAM,IAAI,IAAI,EAAE,cAAc,CAAC;QACjE,kCAAkC,CAAC,GAAG,EAAE,cAAc,CAAC;KACxD,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/services/audit/detectors/ad/advanced.detector.d.ts

@@ -0,0 +1,63 @@
+import { ADUser, ADComputer, ADDomain } from '../../../../types/ad.types';
+import { Finding } from '../../../../types/finding.types';
+export declare function detectShadowCredentials(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectRbcdAbuse(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectEsc1VulnerableTemplate(templates: any[], includeDetails: boolean): Finding;
+export declare function detectEsc2AnyPurpose(templates: any[], includeDetails: boolean): Finding;
+export declare function detectEsc3EnrollmentAgent(templates: any[], includeDetails: boolean): Finding;
+export declare function detectEsc4VulnerableTemplateAcl(templates: any[], includeDetails: boolean): Finding;
+export declare function detectEsc6EditfAttributeSubjectAltName2(cas: any[], includeDetails: boolean): Finding;
+export declare function detectLapsPasswordReadable(computers: ADComputer[], includeDetails: boolean): Finding;
+export declare function detectReplicationRights(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectDcsyncCapable(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectEsc8HttpEnrollment(cas: any[], includeDetails: boolean): Finding;
+export declare function detectLapsNotDeployed(computers: ADComputer[], includeDetails: boolean): Finding;
+export declare function detectLapsLegacyAttribute(computers: ADComputer[], includeDetails: boolean): Finding;
+export declare function detectDuplicateSpn(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectWeakPasswordPolicy(domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectWeakKerberosPolicy(domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectMachineAccountQuotaAbuse(domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectMachineAccountQuotaHigh(domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectDelegationPrivilege(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectForeignSecurityPrincipals(fsps: any[], includeDetails: boolean): Finding;
+export declare function detectNtlmRelayOpportunity(domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectLapsPasswordSet(computers: ADComputer[], includeDetails: boolean): Finding;
+export declare function detectLapsPasswordLeaked(computers: ADComputer[], includeDetails: boolean): Finding;
+export declare function detectAdcsWeakPermissions(templates: any[], includeDetails: boolean): Finding;
+export declare function detectDangerousLogonScripts(users: ADUser[], includeDetails: boolean): Finding;
+export declare function detectAnonymousLdapAccess(anonymousAccessAllowed: boolean, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectRecycleBinDisabled(domain: ADDomain | null, includeDetails: boolean): Finding;
+export interface GpoSecuritySettings {
+    ldapServerIntegrity?: number;
+    ldapChannelBinding?: number;
+    smbv1ServerEnabled?: boolean;
+    smbv1ClientEnabled?: boolean;
+    smbSigningRequired?: boolean;
+    smbClientSigningRequired?: boolean;
+    auditPolicies?: {
+        category: string;
+        subcategory?: string;
+        success: boolean;
+        failure: boolean;
+    }[];
+    powershellLogging?: {
+        moduleLogging: boolean;
+        scriptBlockLogging: boolean;
+        transcription: boolean;
+    };
+}
+export declare function detectLdapSigningDisabled(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectLdapChannelBindingDisabled(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectSmbV1Enabled(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectSmbSigningDisabled(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectAuditPolicyWeak(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectPowershellLoggingDisabled(gpoSettings: GpoSecuritySettings | null, domain: ADDomain | null, includeDetails: boolean): Finding;
+export declare function detectDsHeuristicsModified(domain: ADDomain | null, _includeDetails: boolean): Finding;
+export declare function detectAdminSdHolderModified(domain: ADDomain | null, _includeDetails: boolean): Finding;
+export declare function detectExchangePrivEscPath(users: ADUser[], includeDetails: boolean): Finding;
+export interface AdvancedDetectorOptions {
+    gpoSettings?: GpoSecuritySettings | null;
+    anonymousAccessAllowed?: boolean;
+}
+export declare function detectAdvancedVulnerabilities(users: ADUser[], computers: ADComputer[], domain: ADDomain | null, templates: any[] | undefined, cas: any[] | undefined, fsps: any[] | undefined, includeDetails: boolean, options?: AdvancedDetectorOptions): Finding[];
+//# sourceMappingURL=advanced.detector.d.ts.map

package/dist/services/audit/detectors/ad/advanced.detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/advanced.detector.ts"],"names":[],"mappings":"AAqDA,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAM1D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgBzF;AAKD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgBjF;AAKD,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgB/F;AAKD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgBvF;AAKD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAc5F;AAKD,wBAAgB,+BAA+B,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAclG;AAKD,wBAAgB,uCAAuC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAcpG;AAKD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAcpG;AAKD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CA0BzF;AAKD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAcrF;AAKD,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAcrF;AAKD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAc/F;AAKD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAcnG;AAKD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAiCpF;AAKD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAkClG;AAKD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgClG;AAKD,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CA6BxG;AAMD,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAiCvG;AAKD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAc3F;AAKD,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAU7F;AAKD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CA0BpG;AAKD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAc/F;AAKD,wBAAgB,wBAAwB,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAclG;AAKD,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAe5F;AAKD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAiB7F;AAQD,wBAAgB,yBAAyB,CACvC,sBAAsB,EAAE,OAAO,EAC/B,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAkBT;AAMD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CA+BlG;AAKD,MAAM,WAAW,mBAAmB;IAElC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAE7B,wBAAwB,CAAC,EAAE,OAAO,CAAC;IAEnC,aAAa,CAAC,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,OAAO,EAAE,OAAO,CAAC;QACjB,OAAO,EAAE,OAAO,CAAC;KAClB,EAAE,CAAC;IAEJ,iBAAiB,CAAC,EAAE;QAClB,aAAa,EAAE,OAAO,CAAC;QACvB,kBAAkB,EAAE,OAAO,CAAC;QAC5B,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;CACH;AAMD,wBAAgB,yBAAyB,CACvC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAwCT;AAMD,wBAAgB,gCAAgC,CAC9C,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAkCT;AAMD,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAkCT;AASD,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAyCT;AAMD,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAkDT;AAMD,wBAAgB,+BAA+B,CAC7C,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CAqCT;AAeD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,eAAe,EAAE,OAAO,GACvB,OAAO,CAoCT;AAYD,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,eAAe,EAAE,OAAO,GACvB,OAAO,CAuBT;AAYD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,cAAc,EAAE,OAAO,GACtB,OAAO,CAkCT;AAED,MAAM,WAAW,uBAAuB;IAEtC,WAAW,CAAC,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAEzC,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAKD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,EAAE,UAAU,EAAE,EACvB,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,SAAS,EAAE,GAAG,EAAE,YAAK,EACrB,GAAG,EAAE,GAAG,EAAE,YAAK,EACf,IAAI,EAAE,GAAG,EAAE,YAAK,EAChB,cAAc,EAAE,OAAO,EACvB,OAAO,GAAE,uBAA4B,GACpC,OAAO,EAAE,CAwDX"}