@etcsec-com/etc-collector 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +60 -0
- package/.env.test.example +33 -0
- package/.github/workflows/ci.yml +83 -0
- package/.github/workflows/release.yml +246 -0
- package/.prettierrc.json +10 -0
- package/CHANGELOG.md +15 -0
- package/Dockerfile +57 -0
- package/LICENSE +190 -0
- package/README.md +194 -0
- package/dist/api/controllers/audit.controller.d.ts +21 -0
- package/dist/api/controllers/audit.controller.d.ts.map +1 -0
- package/dist/api/controllers/audit.controller.js +179 -0
- package/dist/api/controllers/audit.controller.js.map +1 -0
- package/dist/api/controllers/auth.controller.d.ts +16 -0
- package/dist/api/controllers/auth.controller.d.ts.map +1 -0
- package/dist/api/controllers/auth.controller.js +146 -0
- package/dist/api/controllers/auth.controller.js.map +1 -0
- package/dist/api/controllers/export.controller.d.ts +27 -0
- package/dist/api/controllers/export.controller.d.ts.map +1 -0
- package/dist/api/controllers/export.controller.js +80 -0
- package/dist/api/controllers/export.controller.js.map +1 -0
- package/dist/api/controllers/health.controller.d.ts +5 -0
- package/dist/api/controllers/health.controller.d.ts.map +1 -0
- package/dist/api/controllers/health.controller.js +16 -0
- package/dist/api/controllers/health.controller.js.map +1 -0
- package/dist/api/controllers/jobs.controller.d.ts +13 -0
- package/dist/api/controllers/jobs.controller.d.ts.map +1 -0
- package/dist/api/controllers/jobs.controller.js +125 -0
- package/dist/api/controllers/jobs.controller.js.map +1 -0
- package/dist/api/controllers/providers.controller.d.ts +15 -0
- package/dist/api/controllers/providers.controller.d.ts.map +1 -0
- package/dist/api/controllers/providers.controller.js +112 -0
- package/dist/api/controllers/providers.controller.js.map +1 -0
- package/dist/api/dto/AuditRequest.dto.d.ts +6 -0
- package/dist/api/dto/AuditRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditRequest.dto.js +3 -0
- package/dist/api/dto/AuditRequest.dto.js.map +1 -0
- package/dist/api/dto/AuditResponse.dto.d.ts +17 -0
- package/dist/api/dto/AuditResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditResponse.dto.js +3 -0
- package/dist/api/dto/AuditResponse.dto.js.map +1 -0
- package/dist/api/dto/TokenRequest.dto.d.ts +6 -0
- package/dist/api/dto/TokenRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenRequest.dto.js +3 -0
- package/dist/api/dto/TokenRequest.dto.js.map +1 -0
- package/dist/api/dto/TokenResponse.dto.d.ts +12 -0
- package/dist/api/dto/TokenResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenResponse.dto.js +3 -0
- package/dist/api/dto/TokenResponse.dto.js.map +1 -0
- package/dist/api/middlewares/authenticate.d.ts +12 -0
- package/dist/api/middlewares/authenticate.d.ts.map +1 -0
- package/dist/api/middlewares/authenticate.js +141 -0
- package/dist/api/middlewares/authenticate.js.map +1 -0
- package/dist/api/middlewares/errorHandler.d.ts +3 -0
- package/dist/api/middlewares/errorHandler.d.ts.map +1 -0
- package/dist/api/middlewares/errorHandler.js +30 -0
- package/dist/api/middlewares/errorHandler.js.map +1 -0
- package/dist/api/middlewares/rateLimit.d.ts +3 -0
- package/dist/api/middlewares/rateLimit.d.ts.map +1 -0
- package/dist/api/middlewares/rateLimit.js +34 -0
- package/dist/api/middlewares/rateLimit.js.map +1 -0
- package/dist/api/middlewares/validate.d.ts +4 -0
- package/dist/api/middlewares/validate.d.ts.map +1 -0
- package/dist/api/middlewares/validate.js +31 -0
- package/dist/api/middlewares/validate.js.map +1 -0
- package/dist/api/routes/audit.routes.d.ts +5 -0
- package/dist/api/routes/audit.routes.d.ts.map +1 -0
- package/dist/api/routes/audit.routes.js +24 -0
- package/dist/api/routes/audit.routes.js.map +1 -0
- package/dist/api/routes/auth.routes.d.ts +6 -0
- package/dist/api/routes/auth.routes.d.ts.map +1 -0
- package/dist/api/routes/auth.routes.js +22 -0
- package/dist/api/routes/auth.routes.js.map +1 -0
- package/dist/api/routes/export.routes.d.ts +5 -0
- package/dist/api/routes/export.routes.d.ts.map +1 -0
- package/dist/api/routes/export.routes.js +16 -0
- package/dist/api/routes/export.routes.js.map +1 -0
- package/dist/api/routes/health.routes.d.ts +4 -0
- package/dist/api/routes/health.routes.d.ts.map +1 -0
- package/dist/api/routes/health.routes.js +11 -0
- package/dist/api/routes/health.routes.js.map +1 -0
- package/dist/api/routes/index.d.ts +10 -0
- package/dist/api/routes/index.d.ts.map +1 -0
- package/dist/api/routes/index.js +20 -0
- package/dist/api/routes/index.js.map +1 -0
- package/dist/api/routes/providers.routes.d.ts +5 -0
- package/dist/api/routes/providers.routes.d.ts.map +1 -0
- package/dist/api/routes/providers.routes.js +13 -0
- package/dist/api/routes/providers.routes.js.map +1 -0
- package/dist/api/validators/audit.schemas.d.ts +60 -0
- package/dist/api/validators/audit.schemas.d.ts.map +1 -0
- package/dist/api/validators/audit.schemas.js +55 -0
- package/dist/api/validators/audit.schemas.js.map +1 -0
- package/dist/api/validators/auth.schemas.d.ts +17 -0
- package/dist/api/validators/auth.schemas.d.ts.map +1 -0
- package/dist/api/validators/auth.schemas.js +21 -0
- package/dist/api/validators/auth.schemas.js.map +1 -0
- package/dist/app.d.ts +3 -0
- package/dist/app.d.ts.map +1 -0
- package/dist/app.js +62 -0
- package/dist/app.js.map +1 -0
- package/dist/config/config.schema.d.ts +65 -0
- package/dist/config/config.schema.d.ts.map +1 -0
- package/dist/config/config.schema.js +95 -0
- package/dist/config/config.schema.js.map +1 -0
- package/dist/config/index.d.ts +4 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +75 -0
- package/dist/config/index.js.map +1 -0
- package/dist/container.d.ts +47 -0
- package/dist/container.d.ts.map +1 -0
- package/dist/container.js +137 -0
- package/dist/container.js.map +1 -0
- package/dist/data/database.d.ts +13 -0
- package/dist/data/database.d.ts.map +1 -0
- package/dist/data/database.js +68 -0
- package/dist/data/database.js.map +1 -0
- package/dist/data/jobs/token-cleanup.job.d.ts +23 -0
- package/dist/data/jobs/token-cleanup.job.d.ts.map +1 -0
- package/dist/data/jobs/token-cleanup.job.js +96 -0
- package/dist/data/jobs/token-cleanup.job.js.map +1 -0
- package/dist/data/migrations/migration.runner.d.ts +13 -0
- package/dist/data/migrations/migration.runner.d.ts.map +1 -0
- package/dist/data/migrations/migration.runner.js +136 -0
- package/dist/data/migrations/migration.runner.js.map +1 -0
- package/dist/data/models/Token.model.d.ts +30 -0
- package/dist/data/models/Token.model.d.ts.map +1 -0
- package/dist/data/models/Token.model.js +3 -0
- package/dist/data/models/Token.model.js.map +1 -0
- package/dist/data/repositories/token.repository.d.ts +16 -0
- package/dist/data/repositories/token.repository.d.ts.map +1 -0
- package/dist/data/repositories/token.repository.js +97 -0
- package/dist/data/repositories/token.repository.js.map +1 -0
- package/dist/providers/azure/auth.provider.d.ts +5 -0
- package/dist/providers/azure/auth.provider.d.ts.map +1 -0
- package/dist/providers/azure/auth.provider.js +13 -0
- package/dist/providers/azure/auth.provider.js.map +1 -0
- package/dist/providers/azure/azure-errors.d.ts +40 -0
- package/dist/providers/azure/azure-errors.d.ts.map +1 -0
- package/dist/providers/azure/azure-errors.js +121 -0
- package/dist/providers/azure/azure-errors.js.map +1 -0
- package/dist/providers/azure/azure-retry.d.ts +41 -0
- package/dist/providers/azure/azure-retry.d.ts.map +1 -0
- package/dist/providers/azure/azure-retry.js +85 -0
- package/dist/providers/azure/azure-retry.js.map +1 -0
- package/dist/providers/azure/graph-client.d.ts +26 -0
- package/dist/providers/azure/graph-client.d.ts.map +1 -0
- package/dist/providers/azure/graph-client.js +146 -0
- package/dist/providers/azure/graph-client.js.map +1 -0
- package/dist/providers/azure/graph.provider.d.ts +23 -0
- package/dist/providers/azure/graph.provider.d.ts.map +1 -0
- package/dist/providers/azure/graph.provider.js +161 -0
- package/dist/providers/azure/graph.provider.js.map +1 -0
- package/dist/providers/azure/queries/app.queries.d.ts +6 -0
- package/dist/providers/azure/queries/app.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/app.queries.js +9 -0
- package/dist/providers/azure/queries/app.queries.js.map +1 -0
- package/dist/providers/azure/queries/policy.queries.d.ts +6 -0
- package/dist/providers/azure/queries/policy.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/policy.queries.js +9 -0
- package/dist/providers/azure/queries/policy.queries.js.map +1 -0
- package/dist/providers/azure/queries/user.queries.d.ts +7 -0
- package/dist/providers/azure/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/user.queries.js +10 -0
- package/dist/providers/azure/queries/user.queries.js.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts +31 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.js +3 -0
- package/dist/providers/interfaces/IGraphProvider.js.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts +37 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.js +3 -0
- package/dist/providers/interfaces/ILDAPProvider.js.map +1 -0
- package/dist/providers/ldap/acl-parser.d.ts +8 -0
- package/dist/providers/ldap/acl-parser.d.ts.map +1 -0
- package/dist/providers/ldap/acl-parser.js +157 -0
- package/dist/providers/ldap/acl-parser.js.map +1 -0
- package/dist/providers/ldap/ad-mappers.d.ts +8 -0
- package/dist/providers/ldap/ad-mappers.d.ts.map +1 -0
- package/dist/providers/ldap/ad-mappers.js +162 -0
- package/dist/providers/ldap/ad-mappers.js.map +1 -0
- package/dist/providers/ldap/ldap-client.d.ts +33 -0
- package/dist/providers/ldap/ldap-client.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-client.js +195 -0
- package/dist/providers/ldap/ldap-client.js.map +1 -0
- package/dist/providers/ldap/ldap-errors.d.ts +48 -0
- package/dist/providers/ldap/ldap-errors.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-errors.js +120 -0
- package/dist/providers/ldap/ldap-errors.js.map +1 -0
- package/dist/providers/ldap/ldap-retry.d.ts +14 -0
- package/dist/providers/ldap/ldap-retry.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-retry.js +102 -0
- package/dist/providers/ldap/ldap-retry.js.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts +12 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.js +104 -0
- package/dist/providers/ldap/ldap-sanitizer.js.map +1 -0
- package/dist/providers/ldap/ldap.provider.d.ts +21 -0
- package/dist/providers/ldap/ldap.provider.d.ts.map +1 -0
- package/dist/providers/ldap/ldap.provider.js +165 -0
- package/dist/providers/ldap/ldap.provider.js.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.js +9 -0
- package/dist/providers/ldap/queries/computer.queries.js.map +1 -0
- package/dist/providers/ldap/queries/group.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/group.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/group.queries.js +9 -0
- package/dist/providers/ldap/queries/group.queries.js.map +1 -0
- package/dist/providers/ldap/queries/user.queries.d.ts +7 -0
- package/dist/providers/ldap/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/user.queries.js +10 -0
- package/dist/providers/ldap/queries/user.queries.js.map +1 -0
- package/dist/providers/smb/smb.provider.d.ts +68 -0
- package/dist/providers/smb/smb.provider.d.ts.map +1 -0
- package/dist/providers/smb/smb.provider.js +382 -0
- package/dist/providers/smb/smb.provider.js.map +1 -0
- package/dist/server.d.ts +2 -0
- package/dist/server.d.ts.map +1 -0
- package/dist/server.js +44 -0
- package/dist/server.js.map +1 -0
- package/dist/services/audit/ad-audit.service.d.ts +70 -0
- package/dist/services/audit/ad-audit.service.d.ts.map +1 -0
- package/dist/services/audit/ad-audit.service.js +1019 -0
- package/dist/services/audit/ad-audit.service.js.map +1 -0
- package/dist/services/audit/attack-graph.service.d.ts +62 -0
- package/dist/services/audit/attack-graph.service.d.ts.map +1 -0
- package/dist/services/audit/attack-graph.service.js +702 -0
- package/dist/services/audit/attack-graph.service.js.map +1 -0
- package/dist/services/audit/audit.service.d.ts +4 -0
- package/dist/services/audit/audit.service.d.ts.map +1 -0
- package/dist/services/audit/audit.service.js +10 -0
- package/dist/services/audit/audit.service.js.map +1 -0
- package/dist/services/audit/azure-audit.service.d.ts +37 -0
- package/dist/services/audit/azure-audit.service.d.ts.map +1 -0
- package/dist/services/audit/azure-audit.service.js +153 -0
- package/dist/services/audit/azure-audit.service.js.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts +37 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js +881 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts +21 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js +227 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts +63 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js +867 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts +16 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js +369 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts +28 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js +896 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts +30 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.js +799 -0
- package/dist/services/audit/detectors/ad/computers.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js +257 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts +19 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.js +488 -0
- package/dist/services/audit/detectors/ad/groups.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/index.d.ts +15 -0
- package/dist/services/audit/detectors/ad/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/index.js +51 -0
- package/dist/services/audit/detectors/ad/index.js.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js +293 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts +23 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js +328 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts +39 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.js +257 -0
- package/dist/services/audit/detectors/ad/network.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts +14 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.js +235 -0
- package/dist/services/audit/detectors/ad/password.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts +20 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js +392 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts +11 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js +186 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts +11 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js +184 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts +10 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js +130 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts +8 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js +113 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts +14 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js +198 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/index.d.ts +2 -0
- package/dist/services/audit/detectors/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/index.js +38 -0
- package/dist/services/audit/detectors/index.js.map +1 -0
- package/dist/services/audit/response-formatter.d.ts +176 -0
- package/dist/services/audit/response-formatter.d.ts.map +1 -0
- package/dist/services/audit/response-formatter.js +240 -0
- package/dist/services/audit/response-formatter.js.map +1 -0
- package/dist/services/audit/scoring.service.d.ts +15 -0
- package/dist/services/audit/scoring.service.d.ts.map +1 -0
- package/dist/services/audit/scoring.service.js +139 -0
- package/dist/services/audit/scoring.service.js.map +1 -0
- package/dist/services/auth/crypto.service.d.ts +19 -0
- package/dist/services/auth/crypto.service.d.ts.map +1 -0
- package/dist/services/auth/crypto.service.js +135 -0
- package/dist/services/auth/crypto.service.js.map +1 -0
- package/dist/services/auth/errors.d.ts +19 -0
- package/dist/services/auth/errors.d.ts.map +1 -0
- package/dist/services/auth/errors.js +46 -0
- package/dist/services/auth/errors.js.map +1 -0
- package/dist/services/auth/token.service.d.ts +41 -0
- package/dist/services/auth/token.service.d.ts.map +1 -0
- package/dist/services/auth/token.service.js +208 -0
- package/dist/services/auth/token.service.js.map +1 -0
- package/dist/services/config/config.service.d.ts +6 -0
- package/dist/services/config/config.service.d.ts.map +1 -0
- package/dist/services/config/config.service.js +64 -0
- package/dist/services/config/config.service.js.map +1 -0
- package/dist/services/export/export.service.d.ts +28 -0
- package/dist/services/export/export.service.d.ts.map +1 -0
- package/dist/services/export/export.service.js +28 -0
- package/dist/services/export/export.service.js.map +1 -0
- package/dist/services/export/formatters/csv.formatter.d.ts +8 -0
- package/dist/services/export/formatters/csv.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/csv.formatter.js +46 -0
- package/dist/services/export/formatters/csv.formatter.js.map +1 -0
- package/dist/services/export/formatters/json.formatter.d.ts +40 -0
- package/dist/services/export/formatters/json.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/json.formatter.js +58 -0
- package/dist/services/export/formatters/json.formatter.js.map +1 -0
- package/dist/services/jobs/azure-job-runner.d.ts +38 -0
- package/dist/services/jobs/azure-job-runner.d.ts.map +1 -0
- package/dist/services/jobs/azure-job-runner.js +199 -0
- package/dist/services/jobs/azure-job-runner.js.map +1 -0
- package/dist/services/jobs/index.d.ts +4 -0
- package/dist/services/jobs/index.d.ts.map +1 -0
- package/dist/services/jobs/index.js +20 -0
- package/dist/services/jobs/index.js.map +1 -0
- package/dist/services/jobs/job-runner.d.ts +64 -0
- package/dist/services/jobs/job-runner.d.ts.map +1 -0
- package/dist/services/jobs/job-runner.js +952 -0
- package/dist/services/jobs/job-runner.js.map +1 -0
- package/dist/services/jobs/job-store.d.ts +27 -0
- package/dist/services/jobs/job-store.d.ts.map +1 -0
- package/dist/services/jobs/job-store.js +261 -0
- package/dist/services/jobs/job-store.js.map +1 -0
- package/dist/services/jobs/job.types.d.ts +67 -0
- package/dist/services/jobs/job.types.d.ts.map +1 -0
- package/dist/services/jobs/job.types.js +36 -0
- package/dist/services/jobs/job.types.js.map +1 -0
- package/dist/types/ad.types.d.ts +74 -0
- package/dist/types/ad.types.d.ts.map +1 -0
- package/dist/types/ad.types.js +3 -0
- package/dist/types/ad.types.js.map +1 -0
- package/dist/types/adcs.types.d.ts +58 -0
- package/dist/types/adcs.types.d.ts.map +1 -0
- package/dist/types/adcs.types.js +38 -0
- package/dist/types/adcs.types.js.map +1 -0
- package/dist/types/attack-graph.types.d.ts +135 -0
- package/dist/types/attack-graph.types.d.ts.map +1 -0
- package/dist/types/attack-graph.types.js +58 -0
- package/dist/types/attack-graph.types.js.map +1 -0
- package/dist/types/audit.types.d.ts +34 -0
- package/dist/types/audit.types.d.ts.map +1 -0
- package/dist/types/audit.types.js +3 -0
- package/dist/types/audit.types.js.map +1 -0
- package/dist/types/azure.types.d.ts +61 -0
- package/dist/types/azure.types.d.ts.map +1 -0
- package/dist/types/azure.types.js +3 -0
- package/dist/types/azure.types.js.map +1 -0
- package/dist/types/config.types.d.ts +63 -0
- package/dist/types/config.types.d.ts.map +1 -0
- package/dist/types/config.types.js +3 -0
- package/dist/types/config.types.js.map +1 -0
- package/dist/types/error.types.d.ts +33 -0
- package/dist/types/error.types.d.ts.map +1 -0
- package/dist/types/error.types.js +70 -0
- package/dist/types/error.types.js.map +1 -0
- package/dist/types/finding.types.d.ts +133 -0
- package/dist/types/finding.types.d.ts.map +1 -0
- package/dist/types/finding.types.js +3 -0
- package/dist/types/finding.types.js.map +1 -0
- package/dist/types/gpo.types.d.ts +39 -0
- package/dist/types/gpo.types.d.ts.map +1 -0
- package/dist/types/gpo.types.js +15 -0
- package/dist/types/gpo.types.js.map +1 -0
- package/dist/types/token.types.d.ts +26 -0
- package/dist/types/token.types.d.ts.map +1 -0
- package/dist/types/token.types.js +3 -0
- package/dist/types/token.types.js.map +1 -0
- package/dist/types/trust.types.d.ts +45 -0
- package/dist/types/trust.types.d.ts.map +1 -0
- package/dist/types/trust.types.js +71 -0
- package/dist/types/trust.types.js.map +1 -0
- package/dist/utils/entity-converter.d.ts +17 -0
- package/dist/utils/entity-converter.d.ts.map +1 -0
- package/dist/utils/entity-converter.js +285 -0
- package/dist/utils/entity-converter.js.map +1 -0
- package/dist/utils/graph.util.d.ts +66 -0
- package/dist/utils/graph.util.d.ts.map +1 -0
- package/dist/utils/graph.util.js +382 -0
- package/dist/utils/graph.util.js.map +1 -0
- package/dist/utils/logger.d.ts +7 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +86 -0
- package/dist/utils/logger.js.map +1 -0
- package/dist/utils/type-name-normalizer.d.ts +5 -0
- package/dist/utils/type-name-normalizer.d.ts.map +1 -0
- package/dist/utils/type-name-normalizer.js +218 -0
- package/dist/utils/type-name-normalizer.js.map +1 -0
- package/docker-compose.yml +26 -0
- package/docs/api/README.md +178 -0
- package/docs/api/openapi.yaml +1524 -0
- package/eslint.config.js +54 -0
- package/jest.config.js +38 -0
- package/package.json +97 -0
- package/scripts/fetch-ad-cert.sh +142 -0
- package/src/.gitkeep +0 -0
- package/src/api/.gitkeep +0 -0
- package/src/api/controllers/.gitkeep +0 -0
- package/src/api/controllers/audit.controller.ts +313 -0
- package/src/api/controllers/auth.controller.ts +258 -0
- package/src/api/controllers/export.controller.ts +153 -0
- package/src/api/controllers/health.controller.ts +16 -0
- package/src/api/controllers/jobs.controller.ts +187 -0
- package/src/api/controllers/providers.controller.ts +165 -0
- package/src/api/dto/.gitkeep +0 -0
- package/src/api/dto/AuditRequest.dto.ts +8 -0
- package/src/api/dto/AuditResponse.dto.ts +19 -0
- package/src/api/dto/TokenRequest.dto.ts +8 -0
- package/src/api/dto/TokenResponse.dto.ts +14 -0
- package/src/api/middlewares/.gitkeep +0 -0
- package/src/api/middlewares/authenticate.ts +203 -0
- package/src/api/middlewares/errorHandler.ts +54 -0
- package/src/api/middlewares/rateLimit.ts +35 -0
- package/src/api/middlewares/validate.ts +32 -0
- package/src/api/routes/.gitkeep +0 -0
- package/src/api/routes/audit.routes.ts +77 -0
- package/src/api/routes/auth.routes.ts +71 -0
- package/src/api/routes/export.routes.ts +34 -0
- package/src/api/routes/health.routes.ts +14 -0
- package/src/api/routes/index.ts +40 -0
- package/src/api/routes/providers.routes.ts +24 -0
- package/src/api/validators/.gitkeep +0 -0
- package/src/api/validators/audit.schemas.ts +59 -0
- package/src/api/validators/auth.schemas.ts +59 -0
- package/src/app.ts +87 -0
- package/src/config/.gitkeep +0 -0
- package/src/config/config.schema.ts +108 -0
- package/src/config/index.ts +82 -0
- package/src/container.ts +221 -0
- package/src/data/.gitkeep +0 -0
- package/src/data/database.ts +78 -0
- package/src/data/jobs/token-cleanup.job.ts +166 -0
- package/src/data/migrations/.gitkeep +0 -0
- package/src/data/migrations/001_initial_schema.sql +47 -0
- package/src/data/migrations/migration.runner.ts +125 -0
- package/src/data/models/.gitkeep +0 -0
- package/src/data/models/Token.model.ts +35 -0
- package/src/data/repositories/.gitkeep +0 -0
- package/src/data/repositories/token.repository.ts +160 -0
- package/src/providers/.gitkeep +0 -0
- package/src/providers/azure/.gitkeep +0 -0
- package/src/providers/azure/auth.provider.ts +14 -0
- package/src/providers/azure/azure-errors.ts +189 -0
- package/src/providers/azure/azure-retry.ts +168 -0
- package/src/providers/azure/graph-client.ts +315 -0
- package/src/providers/azure/graph.provider.ts +294 -0
- package/src/providers/azure/queries/app.queries.ts +9 -0
- package/src/providers/azure/queries/policy.queries.ts +9 -0
- package/src/providers/azure/queries/user.queries.ts +10 -0
- package/src/providers/interfaces/.gitkeep +0 -0
- package/src/providers/interfaces/IGraphProvider.ts +117 -0
- package/src/providers/interfaces/ILDAPProvider.ts +142 -0
- package/src/providers/ldap/.gitkeep +0 -0
- package/src/providers/ldap/acl-parser.ts +231 -0
- package/src/providers/ldap/ad-mappers.ts +280 -0
- package/src/providers/ldap/ldap-client.ts +259 -0
- package/src/providers/ldap/ldap-errors.ts +188 -0
- package/src/providers/ldap/ldap-retry.ts +267 -0
- package/src/providers/ldap/ldap-sanitizer.ts +273 -0
- package/src/providers/ldap/ldap.provider.ts +293 -0
- package/src/providers/ldap/queries/computer.queries.ts +9 -0
- package/src/providers/ldap/queries/group.queries.ts +9 -0
- package/src/providers/ldap/queries/user.queries.ts +10 -0
- package/src/providers/smb/smb.provider.ts +653 -0
- package/src/server.ts +60 -0
- package/src/services/.gitkeep +0 -0
- package/src/services/audit/.gitkeep +0 -0
- package/src/services/audit/ad-audit.service.ts +1481 -0
- package/src/services/audit/attack-graph.service.ts +1104 -0
- package/src/services/audit/audit.service.ts +12 -0
- package/src/services/audit/azure-audit.service.ts +286 -0
- package/src/services/audit/detectors/ad/accounts.detector.ts +1232 -0
- package/src/services/audit/detectors/ad/adcs.detector.ts +449 -0
- package/src/services/audit/detectors/ad/advanced.detector.ts +1270 -0
- package/src/services/audit/detectors/ad/attack-paths.detector.ts +600 -0
- package/src/services/audit/detectors/ad/compliance.detector.ts +1421 -0
- package/src/services/audit/detectors/ad/computers.detector.ts +1188 -0
- package/src/services/audit/detectors/ad/gpo.detector.ts +485 -0
- package/src/services/audit/detectors/ad/groups.detector.ts +685 -0
- package/src/services/audit/detectors/ad/index.ts +84 -0
- package/src/services/audit/detectors/ad/kerberos.detector.ts +424 -0
- package/src/services/audit/detectors/ad/monitoring.detector.ts +501 -0
- package/src/services/audit/detectors/ad/network.detector.ts +538 -0
- package/src/services/audit/detectors/ad/password.detector.ts +324 -0
- package/src/services/audit/detectors/ad/permissions.detector.ts +637 -0
- package/src/services/audit/detectors/ad/trusts.detector.ts +315 -0
- package/src/services/audit/detectors/azure/app-security.detector.ts +246 -0
- package/src/services/audit/detectors/azure/conditional-access.detector.ts +186 -0
- package/src/services/audit/detectors/azure/privilege-security.detector.ts +176 -0
- package/src/services/audit/detectors/azure/user-security.detector.ts +280 -0
- package/src/services/audit/detectors/index.ts +18 -0
- package/src/services/audit/response-formatter.ts +604 -0
- package/src/services/audit/scoring.service.ts +234 -0
- package/src/services/auth/.gitkeep +0 -0
- package/src/services/auth/crypto.service.ts +230 -0
- package/src/services/auth/errors.ts +47 -0
- package/src/services/auth/token.service.ts +420 -0
- package/src/services/config/.gitkeep +0 -0
- package/src/services/config/config.service.ts +75 -0
- package/src/services/export/.gitkeep +0 -0
- package/src/services/export/export.service.ts +99 -0
- package/src/services/export/formatters/csv.formatter.ts +124 -0
- package/src/services/export/formatters/json.formatter.ts +160 -0
- package/src/services/jobs/azure-job-runner.ts +312 -0
- package/src/services/jobs/index.ts +9 -0
- package/src/services/jobs/job-runner.ts +1280 -0
- package/src/services/jobs/job-store.ts +384 -0
- package/src/services/jobs/job.types.ts +182 -0
- package/src/types/.gitkeep +0 -0
- package/src/types/ad.types.ts +91 -0
- package/src/types/adcs.types.ts +107 -0
- package/src/types/attack-graph.types.ts +260 -0
- package/src/types/audit.types.ts +42 -0
- package/src/types/azure.types.ts +68 -0
- package/src/types/config.types.ts +79 -0
- package/src/types/error.types.ts +69 -0
- package/src/types/finding.types.ts +284 -0
- package/src/types/gpo.types.ts +72 -0
- package/src/types/smb2.d.ts +73 -0
- package/src/types/token.types.ts +32 -0
- package/src/types/trust.types.ts +140 -0
- package/src/utils/.gitkeep +0 -0
- package/src/utils/entity-converter.ts +453 -0
- package/src/utils/graph.util.ts +609 -0
- package/src/utils/logger.ts +111 -0
- package/src/utils/type-name-normalizer.ts +302 -0
- package/tests/.gitkeep +0 -0
- package/tests/e2e/.gitkeep +0 -0
- package/tests/fixtures/.gitkeep +0 -0
- package/tests/integration/.gitkeep +0 -0
- package/tests/integration/README.md +156 -0
- package/tests/integration/ad-audit.integration.test.ts +216 -0
- package/tests/integration/api/.gitkeep +0 -0
- package/tests/integration/api/endpoints.integration.test.ts +431 -0
- package/tests/integration/auth/jwt-authentication.integration.test.ts +358 -0
- package/tests/integration/providers/.gitkeep +0 -0
- package/tests/integration/providers/azure-basic.integration.test.ts +167 -0
- package/tests/integration/providers/ldap-basic.integration.test.ts +152 -0
- package/tests/integration/providers/ldap-connectivity.test.ts +44 -0
- package/tests/integration/providers/ldap-provider.integration.test.ts +347 -0
- package/tests/mocks/.gitkeep +0 -0
- package/tests/setup.ts +16 -0
- package/tests/unit/.gitkeep +0 -0
- package/tests/unit/api/middlewares/authenticate.test.ts +446 -0
- package/tests/unit/providers/.gitkeep +0 -0
- package/tests/unit/providers/azure/azure-errors.test.ts +193 -0
- package/tests/unit/providers/azure/azure-retry.test.ts +254 -0
- package/tests/unit/providers/azure/graph-provider.test.ts +313 -0
- package/tests/unit/providers/ldap/ad-mappers.test.ts +392 -0
- package/tests/unit/providers/ldap/ldap-provider.test.ts +376 -0
- package/tests/unit/providers/ldap/ldap-retry.test.ts +377 -0
- package/tests/unit/providers/ldap/ldap-sanitizer.test.ts +301 -0
- package/tests/unit/sample.test.ts +19 -0
- package/tests/unit/services/.gitkeep +0 -0
- package/tests/unit/services/audit/detectors/ad/accounts.detector.test.ts +393 -0
- package/tests/unit/services/audit/detectors/ad/advanced.detector.test.ts +380 -0
- package/tests/unit/services/audit/detectors/ad/computers.detector.test.ts +440 -0
- package/tests/unit/services/audit/detectors/ad/groups.detector.test.ts +276 -0
- package/tests/unit/services/audit/detectors/ad/kerberos.detector.test.ts +215 -0
- package/tests/unit/services/audit/detectors/ad/password.detector.test.ts +226 -0
- package/tests/unit/services/audit/detectors/ad/permissions.detector.test.ts +244 -0
- package/tests/unit/services/audit/detectors/azure/app-security.detector.test.ts +349 -0
- package/tests/unit/services/audit/detectors/azure/conditional-access.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/privilege-security.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/user-security.detector.test.ts +297 -0
- package/tests/unit/services/auth/crypto.service.test.ts +296 -0
- package/tests/unit/services/auth/token.service.test.ts +579 -0
- package/tests/unit/services/export/export.service.test.ts +241 -0
- package/tests/unit/services/export/formatters/csv.formatter.test.ts +270 -0
- package/tests/unit/services/export/formatters/json.formatter.test.ts +258 -0
- package/tests/unit/utils/.gitkeep +0 -0
- package/tsconfig.json +50 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"advanced.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/advanced.detector.ts"],"names":[],"mappings":";;AA4DA,0DAgBC;AAKD,0CAgBC;AAKD,oEAgBC;AAKD,oDAgBC;AAKD,8DAcC;AAKD,0EAcC;AAKD,0FAcC;AAKD,gEAcC;AAKD,0DA0BC;AAKD,kDAcC;AAKD,4DAcC;AAKD,sDAcC;AAKD,8DAcC;AAKD,gDAiCC;AAKD,4DAkCC;AAKD,4DAgCC;AAKD,wEA6BC;AAMD,sEAiCC;AAKD,8DAcC;AAKD,0EAUC;AAKD,gEA0BC;AAKD,sDAcC;AAKD,4DAcC;AAKD,8DAeC;AAKD,kEAiBC;AAQD,8DAsBC;AAMD,4DA+BC;AAqCD,8DA4CC;AAMD,4EAsCC;AAMD,gDAsCC;AASD,4DA6CC;AAMD,sDAsDC;AAMD,0EAyCC;AAeD,gEAuCC;AAYD,kEA0BC;AAYD,8DAqCC;AAYD,sEAiEC;AA9rCD,yEAA4E;AAK5E,SAAgB,uBAAuB,CAAC,KAAe,EAAE,cAAuB;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,OAAO,GAAI,CAAS,CAAC,wBAAwB,CAAC,CAAC;QAErD,OAAO,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,qHAAqH;QAClI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,eAAe,CAAC,KAAe,EAAE,cAAuB;IACtE,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,QAAQ,GAAI,CAAS,CAAC,0CAA0C,CAAC,CAAC;QAExE,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,kHAAkH;QAC/H,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,SAAgB,EAAE,cAAuB;IACpF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,aAAa,GAAG,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC3E,MAAM,uBAAuB,GAAG,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QACnH,OAAO,aAAa,IAAI,uBAAuB,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,uHAAuH;QACpI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,oBAAoB,CAAC,SAAgB,EAAE,cAAuB;IAC5E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,aAAa,GAAG,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,mBAAmB,CAAC,MAAM,KAAK,CAAC,CAAC;QAC7E,OAAO,aAAa,IAAI,OAAO,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,kBAAkB;QACzB,WAAW,EAAE,gHAAgH;QAC7H,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,SAAgB,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,6FAA6F;QAC1G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,+BAA+B,CAAC,SAAgB,EAAE,cAAuB;IACvF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,CAAC,CAAC,UAAU,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,8FAA8F;QAC3G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,uCAAuC,CAAC,GAAU,EAAE,cAAuB;IACzF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACjC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,qCAAqC;QAC3C,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,iBAAiB;QACxB,WAAW,EAAE,4GAA4G;QACzH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,SAAuB,EAAE,cAAuB;IACzF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAQ,CAAS,CAAC,+BAA+B,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,uFAAuF;QACpG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,uBAAuB,CAAC,KAAe,EAAE,cAAuB;IAC9E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAElC,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,uBAAuB,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;YACrD,OAAO,CACL,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;gBAC/B,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC;gBACnC,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,uBAAuB,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,gGAAgG;QAC7G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,mBAAmB,CAAC,KAAe,EAAE,cAAuB;IAC1E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,OAAQ,CAAS,CAAC,eAAe,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,qHAAqH;QAClI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CAAC,GAAU,EAAE,cAAuB;IAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QACjC,OAAO,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,aAAa,CAAC,QAAQ,KAAK,MAAM,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,0FAA0F;QACvG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAKD,SAAgB,qBAAqB,CAAC,SAAuB,EAAE,cAAuB;IACpF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,iGAAiG;QAC9G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,SAAuB,EAAE,cAAuB;IACxF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,eAAe,IAAI,CAAC,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,iFAAiF;QAC9F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,kBAAkB,CAAC,KAAe,EAAE,cAAuB;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAG3C,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;QAClB,MAAM,IAAI,GAAI,CAAS,CAAC,oBAAoB,CAAC;QAC7C,IAAI,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAW,EAAE,EAAE;gBAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBACrB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACtB,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAGH,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;QAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,+FAA+F;QAC5G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;KACxD,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CAAC,MAAuB,EAAE,cAAuB;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,yCAAyC;YACtD,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAI,MAAc,CAAC,YAAY,IAAI,CAAC,CAAC;IACvD,MAAM,SAAS,GAAI,MAAc,CAAC,SAAS,IAAI,CAAC,CAAC;IACjD,MAAM,gBAAgB,GAAI,MAAc,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAG,YAAY,GAAG,EAAE,IAAI,SAAS,GAAG,EAAE,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAE5E,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,mFAAmF;QAChG,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,gBAAgB,EAAE,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE,MAAM;YACb,CAAC,CAAC;gBACE,YAAY;gBACZ,SAAS;gBACT,gBAAgB;aACjB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CAAC,MAAuB,EAAE,cAAuB;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,sBAAsB;YAC7B,WAAW,EAAE,kCAAkC;YAC/C,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAI,MAAc,CAAC,YAAY,IAAI,CAAC,CAAC;IACvD,MAAM,WAAW,GAAI,MAAc,CAAC,WAAW,IAAI,CAAC,CAAC;IAErD,MAAM,MAAM,GAAG,YAAY,GAAG,EAAE,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,8FAA8F;QAC3G,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,gBAAgB,EAAE,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE,MAAM;YACb,CAAC,CAAC;gBACE,YAAY;gBACZ,WAAW;aACZ;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAKD,SAAgB,8BAA8B,CAAC,MAAuB,EAAE,cAAuB;IAC7F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,6BAA6B;YACpC,WAAW,EAAE,wCAAwC;YACrD,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAI,MAAc,CAAC,2BAA2B,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,CAAC,CAAC;IAE5D,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,2GAA2G;QACxH,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,gBAAgB,EAAE,cAAc,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC1E,OAAO,EAAE,YAAY;YACnB,CAAC,CAAC;gBACE,KAAK;aACN;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAMD,SAAgB,6BAA6B,CAAC,MAAuB,EAAE,cAAuB;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,gCAAgC;YACvC,WAAW,EAAE,wCAAwC;YACrD,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAI,MAAc,CAAC,2BAA2B,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,GAAG,aAAa,CAAC;IAEtE,OAAO;QACL,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,8CAA8C;QACrD,WAAW,EACT,uKAAuK;QACzK,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,gBAAgB,EAAE,cAAc,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,OAAO,EAAE,UAAU;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,KAAK;gBACnB,YAAY,EAAE,aAAa;gBAC3B,cAAc,EAAE,uEAAuE;aACxF;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,KAAe,EAAE,cAAuB;IAChF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,OAAQ,CAAS,CAAC,8BAA8B,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,2FAA2F;QACxG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAKD,SAAgB,+BAA+B,CAAC,IAAW,EAAE,cAAuB;IAClF,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,qGAAqG;QAClH,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,MAAuB,EAAE,cAAuB;IACzF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EAAE,6CAA6C;YAC1D,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,mBAAmB,GAAI,MAAc,CAAC,mBAAmB,CAAC;IAChE,MAAM,sBAAsB,GAAI,MAAc,CAAC,sBAAsB,CAAC;IAEtE,MAAM,YAAY,GAAG,CAAC,mBAAmB,IAAI,CAAC,sBAAsB,CAAC;IAErE,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,2EAA2E;QACxF,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,gBAAgB,EAAE,cAAc,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC;AACJ,CAAC;AAKD,SAAgB,qBAAqB,CAAC,SAAuB,EAAE,cAAuB;IACpF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,eAAe,IAAI,CAAC,IAAI,iBAAiB,IAAI,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mBAAmB;QAC1B,WAAW,EAAE,uFAAuF;QACpG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CAAC,SAAuB,EAAE,cAAuB;IACvF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAQ,CAAS,CAAC,4BAA4B,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,yEAAyE;QACtF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;KACzE,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,SAAgB,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,OAAO,CAAC,CAAC,oBAAoB,IAAI,CAAC,CAAC,uBAAuB,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,0FAA0F;QACvG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KACnF,CAAC;AACJ,CAAC;AAKD,SAAgB,2BAA2B,CAAC,KAAe,EAAE,cAAuB;IAClF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,UAAU,GAAI,CAAS,CAAC,UAAU,CAAC;QAGzC,OAAO,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,6FAA6F;QAC1G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KAChF,CAAC;AACJ,CAAC;AAQD,SAAgB,yBAAyB,CACvC,sBAA+B,EAC/B,MAAuB,EACvB,cAAuB;IAEvB,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,+HAA+H;QACjI,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,gBAAgB,EAAE,cAAc,IAAI,sBAAsB,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9F,OAAO,EAAE,sBAAsB;YAC7B,CAAC,CAAC;gBACE,cAAc,EACZ,gHAAgH;gBAClH,aAAa,EAAE,wBAAwB;aACxC;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB,CAAC,MAAuB,EAAE,cAAuB;IACvF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,+BAA+B;YACtC,WAAW,EAAE,4CAA4C;YACzD,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAI,MAAc,CAAC,iBAAiB,KAAK,IAAI,CAAC;IAErE,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,4BAA4B;QACnC,WAAW,EACT,mKAAmK;QACrK,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,gBAAgB,EAAE,cAAc,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAChF,OAAO,EAAE,CAAC,iBAAiB;YACzB,CAAC,CAAC;gBACE,cAAc,EACZ,mHAAmH;gBACrH,aAAa,EAAE,UAAU;aAC1B;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAqCD,SAAgB,yBAAyB,CACvC,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAGvB,IAAI,WAAW,IAAI,WAAW,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;QACjE,MAAM,eAAe,GAAG,WAAW,CAAC,mBAAmB,KAAK,CAAC,CAAC;QAE9D,OAAO;YACL,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,2BAA2B;YAClC,WAAW,EACT,6HAA6H;YAC/H,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,gBAAgB,EAAE,cAAc,IAAI,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACvF,OAAO,EAAE,eAAe;gBACtB,CAAC,CAAC;oBACE,cAAc,EAAE,uFAAuF;oBACvG,cAAc,EAAE,WAAW,CAAC,mBAAmB;oBAC/C,eAAe,EAAE,CAAC;iBACnB;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAGD,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,0JAA0J;QAC5J,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE;YACP,cAAc,EACZ,wGAAwG;YAC1G,IAAI,EAAE,+EAA+E;SACtF;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,gCAAgC,CAC9C,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAEvB,IAAI,WAAW,IAAI,WAAW,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,eAAe,GAAG,WAAW,CAAC,kBAAkB,KAAK,CAAC,CAAC;QAE7D,OAAO;YACL,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACT,8HAA8H;YAChI,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,gBAAgB,EAAE,cAAc,IAAI,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACvF,OAAO,EAAE,eAAe;gBACtB,CAAC,CAAC;oBACE,cAAc,EAAE,4FAA4F;oBAC5G,cAAc,EAAE,WAAW,CAAC,kBAAkB;oBAC9C,eAAe,EAAE,CAAC;iBACnB;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,4CAA4C;QACnD,WAAW,EAAE,oFAAoF;QACjG,KAAK,EAAE,CAAC;QACR,OAAO,EAAE;YACP,IAAI,EAAE,+FAA+F;SACtG;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,kBAAkB,CAChC,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAEvB,IAAI,WAAW,IAAI,CAAC,WAAW,CAAC,kBAAkB,KAAK,SAAS,IAAI,WAAW,CAAC,kBAAkB,KAAK,SAAS,CAAC,EAAE,CAAC;QAClH,MAAM,YAAY,GAAG,WAAW,CAAC,kBAAkB,KAAK,IAAI,IAAI,WAAW,CAAC,kBAAkB,KAAK,IAAI,CAAC;QAExG,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,wBAAwB;YAC/B,WAAW,EACT,iHAAiH;YACnH,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,gBAAgB,EAAE,cAAc,IAAI,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACpF,OAAO,EAAE,YAAY;gBACnB,CAAC,CAAC;oBACE,cAAc,EAAE,qDAAqD;oBACrE,WAAW,EAAE,WAAW,CAAC,kBAAkB;oBAC3C,WAAW,EAAE,WAAW,CAAC,kBAAkB;iBAC5C;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,qEAAqE;QAClF,KAAK,EAAE,CAAC;QACR,OAAO,EAAE;YACP,IAAI,EAAE,gGAAgG;SACvG;KACF,CAAC;AACJ,CAAC;AASD,SAAgB,wBAAwB,CACtC,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAEvB,IAAI,WAAW,IAAI,WAAW,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,eAAe,GAAG,WAAW,CAAC,kBAAkB,KAAK,KAAK,CAAC;QAEjE,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,0BAA0B;YACjC,WAAW,EACT,2HAA2H;YAC7H,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,gBAAgB,EAAE,cAAc,IAAI,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACvF,OAAO,EAAE,eAAe;gBACtB,CAAC,CAAC;oBACE,cAAc,EAAE,0FAA0F;oBAC1G,cAAc,EAAE,cAAc;oBAC9B,eAAe,EAAE,UAAU;oBAC3B,gBAAgB,EAAE,WAAW,CAAC,kBAAkB;oBAChD,gBAAgB,EAAE,WAAW,CAAC,wBAAwB;iBACvD;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAGD,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,wJAAwJ;QAC1J,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QACpE,OAAO,EAAE;YACP,cAAc,EACZ,gGAAgG;YAClG,IAAI,EAAE,8EAA8E;SACrF;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,qBAAqB,CACnC,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAGvB,MAAM,uBAAuB,GAAG;QAC9B,eAAe;QACf,oBAAoB;QACpB,cAAc;QACd,eAAe;QACf,eAAe;QACf,eAAe;QACf,QAAQ;KACT,CAAC;IAEF,IAAI,WAAW,IAAI,WAAW,CAAC,aAAa,IAAI,WAAW,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrF,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvF,MAAM,iBAAiB,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAGlG,MAAM,YAAY,GAAG,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC;QAElD,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,yBAAyB;YAChC,WAAW,EACT,6FAA6F;YAC/F,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3B,gBAAgB,EAAE,cAAc,IAAI,YAAY,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACpF,OAAO,EAAE,YAAY;gBACnB,CAAC,CAAC;oBACE,cAAc,EAAE,4EAA4E;oBAC5F,iBAAiB;oBACjB,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;iBACvD;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EAAE,4EAA4E;QACzF,KAAK,EAAE,CAAC;QACR,OAAO,EAAE;YACP,IAAI,EAAE,uFAAuF;YAC7F,kBAAkB,EAAE,uBAAuB;SAC5C;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,+BAA+B,CAC7C,WAAuC,EACvC,MAAuB,EACvB,cAAuB;IAEvB,IAAI,WAAW,IAAI,WAAW,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,WAAW,CAAC,iBAAiB,CAAC;QAC9C,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAE9E,OAAO;YACL,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,UAAU;YACpB,KAAK,EAAE,mCAAmC;YAC1C,WAAW,EACT,uHAAuH;YACzH,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,gBAAgB,EAAE,cAAc,IAAI,eAAe,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YACvF,OAAO,EAAE,eAAe;gBACtB,CAAC,CAAC;oBACE,cAAc,EACZ,wFAAwF;oBAC1F,aAAa,EAAE,OAAO,CAAC,aAAa;oBACpC,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;oBAC9C,aAAa,EAAE,OAAO,CAAC,aAAa;iBACrC;gBACH,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,0CAA0C;QACjD,WAAW,EAAE,kFAAkF;QAC/F,KAAK,EAAE,CAAC;QACR,OAAO,EAAE;YACP,IAAI,EAAE,sFAAsF;SAC7F;KACF,CAAC;AACJ,CAAC;AAeD,SAAgB,0BAA0B,CACxC,MAAuB,EACvB,eAAwB;IAGxB,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAE,MAAkC,CAAC,cAAc,CAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;IAGpH,MAAM,UAAU,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,KAAK,EAAE,CAAC;IAG9F,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,YAAY,EAAE,CAAC;QAEjB,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxD,iBAAiB,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC3E,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACxD,iBAAiB,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EACT,8DAA8D;YAC9D,2DAA2D;QAC7D,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE;YACP,YAAY,EAAE,YAAY,IAAI,SAAS;YACvC,iBAAiB,EAAE,iBAAiB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;YAC/E,cAAc,EACZ,uEAAuE;SAC1E;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,2BAA2B,CACzC,MAAuB,EACvB,eAAwB;IAKxB,MAAM,iBAAiB,GAAG,MAAM;QAC9B,CAAC,CAAE,MAAkC,CAAC,uBAAuB,CAAwB;QACrF,CAAC,CAAC,SAAS,CAAC;IAEd,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,kGAAkG;YAClG,8DAA8D;QAChE,KAAK,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE;YACP,cAAc,EACZ,gGAAgG;YAClG,YAAY,EAAE,mFAAmF;SAClG;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,yBAAyB,CACvC,KAAe,EACf,cAAuB;IAGvB,MAAM,cAAc,GAAG;QACrB,4BAA4B;QAC5B,8BAA8B;QAC9B,yBAAyB;QACzB,kBAAkB;KACnB,CAAC;IAGF,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAC5B,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CACzE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,4EAA4E;YAC5E,gFAAgF;QAClF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EAAE;YACP,cAAc,EAAE,cAAc;YAC9B,cAAc,EACZ,mFAAmF;YACrF,SAAS,EAAE,6BAA6B;SACzC;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,6BAA6B,CAC3C,KAAe,EACf,SAAuB,EACvB,MAAuB,EACvB,YAAmB,EAAE,EACrB,MAAa,EAAE,EACf,OAAc,EAAE,EAChB,cAAuB,EACvB,UAAmC,EAAE;IAErC,MAAM,EAAE,WAAW,GAAG,IAAI,EAAE,sBAAsB,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAEvE,OAAO;QAEL,uBAAuB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,eAAe,CAAC,KAAK,EAAE,cAAc,CAAC;QAEtC,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QAC9D,wBAAwB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QAE7D,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QACvD,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/C,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,+BAA+B,CAAC,SAAS,EAAE,cAAc,CAAC;QAC1D,uCAAuC,CAAC,GAAG,EAAE,cAAc,CAAC;QAC5D,0BAA0B,CAAC,SAAS,EAAE,cAAc,CAAC;QACrD,uBAAuB,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,mBAAmB,CAAC,KAAK,EAAE,cAAc,CAAC;QAE1C,6BAA6B,CAAC,MAAM,EAAE,cAAc,CAAC;QAErD,gCAAgC,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QACrE,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QAEvD,wBAAwB,CAAC,GAAG,EAAE,cAAc,CAAC;QAC7C,qBAAqB,CAAC,SAAS,EAAE,cAAc,CAAC;QAChD,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,kBAAkB,CAAC,KAAK,EAAE,cAAc,CAAC;QACzC,wBAAwB,CAAC,MAAM,EAAE,cAAc,CAAC;QAChD,wBAAwB,CAAC,MAAM,EAAE,cAAc,CAAC;QAChD,8BAA8B,CAAC,MAAM,EAAE,cAAc,CAAC;QACtD,yBAAyB,CAAC,KAAK,EAAE,cAAc,CAAC;QAChD,+BAA+B,CAAC,IAAI,EAAE,cAAc,CAAC;QACrD,0BAA0B,CAAC,MAAM,EAAE,cAAc,CAAC;QAClD,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,2BAA2B,CAAC,KAAK,EAAE,cAAc,CAAC;QAElD,wBAAwB,CAAC,MAAM,EAAE,cAAc,CAAC;QAChD,yBAAyB,CAAC,sBAAsB,EAAE,MAAM,EAAE,cAAc,CAAC;QACzE,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QAC1D,+BAA+B,CAAC,WAAW,EAAE,MAAM,EAAE,cAAc,CAAC;QAEpE,qBAAqB,CAAC,SAAS,EAAE,cAAc,CAAC;QAChD,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC;QAEnD,0BAA0B,CAAC,MAAM,EAAE,cAAc,CAAC;QAClD,2BAA2B,CAAC,MAAM,EAAE,cAAc,CAAC;QACnD,yBAAyB,CAAC,KAAK,EAAE,cAAc,CAAC;KACjD,CAAC,MAAM,CACN,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,KAAK,GAAG,CAAC;QAEjB,OAAO,CAAC,IAAI,KAAK,sBAAsB;QACvC,OAAO,CAAC,IAAI,KAAK,uBAAuB,CAC3C,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,16 @@
|
|
|
1
|
+
import { ADUser, ADGroup, ADComputer, AclEntry } from '../../../../types/ad.types';
|
|
2
|
+
import { Finding } from '../../../../types/finding.types';
|
|
3
|
+
import { ADGPO } from '../../../../types/gpo.types';
|
|
4
|
+
import { ADTrustExtended } from '../../../../types/trust.types';
|
|
5
|
+
export declare function detectPathKerberoastingToDA(users: ADUser[], groups: ADGroup[], computers: ADComputer[], includeDetails: boolean): Finding;
|
|
6
|
+
export declare function detectPathAsrepToAdmin(users: ADUser[], groups: ADGroup[], computers: ADComputer[], includeDetails: boolean): Finding;
|
|
7
|
+
export declare function detectPathAclToDA(users: ADUser[], groups: ADGroup[], computers: ADComputer[], aclEntries: AclEntry[], includeDetails: boolean): Finding;
|
|
8
|
+
export declare function detectPathDelegationChain(users: ADUser[], computers: ADComputer[], groups: ADGroup[], includeDetails: boolean): Finding;
|
|
9
|
+
export declare function detectPathNestedAdmin(users: ADUser[], groups: ADGroup[], includeDetails: boolean): Finding;
|
|
10
|
+
export declare function detectPathServiceToDA(users: ADUser[], groups: ADGroup[], computers: ADComputer[], aclEntries: AclEntry[], includeDetails: boolean): Finding;
|
|
11
|
+
export declare function detectPathComputerTakeover(computers: ADComputer[], users: ADUser[], groups: ADGroup[], includeDetails: boolean): Finding;
|
|
12
|
+
export declare function detectPathGpoToDA(gpos: ADGPO[], aclEntries: AclEntry[], includeDetails: boolean): Finding;
|
|
13
|
+
export declare function detectPathCertificateEsc(templates: any[], users: ADUser[], _groups: ADGroup[], _computers: ADComputer[], includeDetails: boolean): Finding;
|
|
14
|
+
export declare function detectPathTrustLateral(trusts: ADTrustExtended[], includeDetails: boolean): Finding;
|
|
15
|
+
export declare function detectAttackPathVulnerabilities(users: ADUser[], groups: ADGroup[], computers: ADComputer[], aclEntries: AclEntry[], gpos: ADGPO[], trusts: ADTrustExtended[], templates: any[], includeDetails: boolean): Finding[];
|
|
16
|
+
//# sourceMappingURL=attack-paths.detector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"attack-paths.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/attack-paths.detector.ts"],"names":[],"mappings":"AA6BA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAU1D,OAAO,EAAE,KAAK,EAAE,MAAM,6BAA6B,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAMhE,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CA8BT;AAMD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,cAAc,EAAE,OAAO,GACtB,OAAO,CA6BT;AAMD,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,UAAU,EAAE,QAAQ,EAAE,EACtB,cAAc,EAAE,OAAO,GACtB,OAAO,CAwCT;AAMD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,EAAE,UAAU,EAAE,EACvB,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA8CT;AAMD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA0DT;AAMD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,UAAU,EAAE,QAAQ,EAAE,EACtB,cAAc,EAAE,OAAO,GACtB,OAAO,CAqCT;AAMD,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,UAAU,EAAE,EACvB,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CAkDT;AAMD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,KAAK,EAAE,EACb,UAAU,EAAE,QAAQ,EAAE,EACtB,cAAc,EAAE,OAAO,GACtB,OAAO,CAqDT;AAMD,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,GAAG,EAAE,EAChB,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,OAAO,EAAE,EAClB,UAAU,EAAE,UAAU,EAAE,EACxB,cAAc,EAAE,OAAO,GACtB,OAAO,CA0CT;AAMD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAqClG;AAKD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,UAAU,EAAE,QAAQ,EAAE,EACtB,IAAI,EAAE,KAAK,EAAE,EACb,MAAM,EAAE,eAAe,EAAE,EACzB,SAAS,EAAE,GAAG,EAAE,EAChB,cAAc,EAAE,OAAO,GACtB,OAAO,EAAE,CAgBX"}
|
|
@@ -0,0 +1,369 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.detectPathKerberoastingToDA = detectPathKerberoastingToDA;
|
|
4
|
+
exports.detectPathAsrepToAdmin = detectPathAsrepToAdmin;
|
|
5
|
+
exports.detectPathAclToDA = detectPathAclToDA;
|
|
6
|
+
exports.detectPathDelegationChain = detectPathDelegationChain;
|
|
7
|
+
exports.detectPathNestedAdmin = detectPathNestedAdmin;
|
|
8
|
+
exports.detectPathServiceToDA = detectPathServiceToDA;
|
|
9
|
+
exports.detectPathComputerTakeover = detectPathComputerTakeover;
|
|
10
|
+
exports.detectPathGpoToDA = detectPathGpoToDA;
|
|
11
|
+
exports.detectPathCertificateEsc = detectPathCertificateEsc;
|
|
12
|
+
exports.detectPathTrustLateral = detectPathTrustLateral;
|
|
13
|
+
exports.detectAttackPathVulnerabilities = detectAttackPathVulnerabilities;
|
|
14
|
+
const entity_converter_1 = require("../../../../utils/entity-converter");
|
|
15
|
+
const graph_util_1 = require("../../../../utils/graph.util");
|
|
16
|
+
function detectPathKerberoastingToDA(users, groups, computers, includeDetails) {
|
|
17
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
18
|
+
const kerberoastableUsers = users.filter((u) => {
|
|
19
|
+
const spn = u['servicePrincipalName'];
|
|
20
|
+
const hasSPN = spn && Array.isArray(spn) && spn.length > 0;
|
|
21
|
+
return hasSPN && u.enabled;
|
|
22
|
+
});
|
|
23
|
+
const affected = kerberoastableUsers.filter((u) => (0, graph_util_1.isPrivilegedMember)(u.dn, graph));
|
|
24
|
+
return {
|
|
25
|
+
type: 'PATH_KERBEROASTING_TO_DA',
|
|
26
|
+
severity: 'critical',
|
|
27
|
+
category: 'attack-paths',
|
|
28
|
+
title: 'Kerberoasting Path to Domain Admin',
|
|
29
|
+
description: 'User with SPN is member of privileged group. Kerberoasting this account and cracking the password leads to Domain Admin compromise.',
|
|
30
|
+
count: affected.length,
|
|
31
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affected) : undefined,
|
|
32
|
+
details: affected.length > 0
|
|
33
|
+
? {
|
|
34
|
+
attackVector: 'Request TGS ticket → Offline crack → Domain Admin access',
|
|
35
|
+
mitigation: 'Use gMSA for service accounts, remove from privileged groups, use long complex passwords',
|
|
36
|
+
}
|
|
37
|
+
: undefined,
|
|
38
|
+
};
|
|
39
|
+
}
|
|
40
|
+
function detectPathAsrepToAdmin(users, groups, computers, includeDetails) {
|
|
41
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
42
|
+
const asrepUsers = users.filter((u) => {
|
|
43
|
+
const hasNoPreauth = u.userAccountControl ? (u.userAccountControl & 0x400000) !== 0 : false;
|
|
44
|
+
return hasNoPreauth && u.enabled;
|
|
45
|
+
});
|
|
46
|
+
const affected = asrepUsers.filter((u) => (0, graph_util_1.isPrivilegedMember)(u.dn, graph));
|
|
47
|
+
return {
|
|
48
|
+
type: 'PATH_ASREP_TO_ADMIN',
|
|
49
|
+
severity: 'high',
|
|
50
|
+
category: 'attack-paths',
|
|
51
|
+
title: 'AS-REP Roasting Path to Admin',
|
|
52
|
+
description: 'User without Kerberos pre-authentication is member of admin group. AS-REP roasting can lead to admin compromise.',
|
|
53
|
+
count: affected.length,
|
|
54
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affected) : undefined,
|
|
55
|
+
details: affected.length > 0
|
|
56
|
+
? {
|
|
57
|
+
attackVector: 'Request AS-REP → Offline crack → Admin access',
|
|
58
|
+
mitigation: 'Enable Kerberos pre-authentication, remove from admin groups',
|
|
59
|
+
}
|
|
60
|
+
: undefined,
|
|
61
|
+
};
|
|
62
|
+
}
|
|
63
|
+
function detectPathAclToDA(users, groups, computers, aclEntries, includeDetails) {
|
|
64
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
65
|
+
(0, graph_util_1.buildAclGraph)(aclEntries, graph);
|
|
66
|
+
const nonPrivilegedUsers = users.filter((u) => u.enabled && u.adminCount !== 1);
|
|
67
|
+
const pathsFound = [];
|
|
68
|
+
for (const user of nonPrivilegedUsers) {
|
|
69
|
+
const path = graph.findShortestPathToPrivileged(user.dn, 4);
|
|
70
|
+
if (path && path.edges.some((e) => e.type === 'canModify')) {
|
|
71
|
+
pathsFound.push({ user, pathLength: path.length });
|
|
72
|
+
}
|
|
73
|
+
}
|
|
74
|
+
pathsFound.sort((a, b) => a.pathLength - b.pathLength);
|
|
75
|
+
const affected = pathsFound.map((p) => p.user);
|
|
76
|
+
return {
|
|
77
|
+
type: 'PATH_ACL_TO_DA',
|
|
78
|
+
severity: 'critical',
|
|
79
|
+
category: 'attack-paths',
|
|
80
|
+
title: 'ACL-Based Privilege Escalation to Domain Admin',
|
|
81
|
+
description: 'Non-privileged users can escalate to Domain Admin through ACL chain (WriteDACL, GenericAll, WriteOwner).',
|
|
82
|
+
count: affected.length,
|
|
83
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affected.slice(0, 50)) : undefined,
|
|
84
|
+
details: affected.length > 0
|
|
85
|
+
? {
|
|
86
|
+
attackVector: 'Modify ACL → Take ownership → Add to DA group',
|
|
87
|
+
shortestPath: pathsFound[0]?.pathLength,
|
|
88
|
+
totalPaths: pathsFound.length,
|
|
89
|
+
mitigation: 'Review and restrict dangerous ACL permissions',
|
|
90
|
+
}
|
|
91
|
+
: undefined,
|
|
92
|
+
};
|
|
93
|
+
}
|
|
94
|
+
function detectPathDelegationChain(users, computers, groups, includeDetails) {
|
|
95
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
96
|
+
(0, graph_util_1.addDelegationEdges)(users, computers, graph);
|
|
97
|
+
const usersWithDelegation = users.filter((u) => {
|
|
98
|
+
const allowedTo = u['msDS-AllowedToDelegateTo'];
|
|
99
|
+
return allowedTo && Array.isArray(allowedTo) && allowedTo.length > 0;
|
|
100
|
+
});
|
|
101
|
+
const computersWithDelegation = computers.filter((c) => {
|
|
102
|
+
const allowedTo = c['msDS-AllowedToDelegateTo'];
|
|
103
|
+
return allowedTo && Array.isArray(allowedTo) && allowedTo.length > 0;
|
|
104
|
+
});
|
|
105
|
+
const dcServicePatterns = ['ldap/', 'cifs/', 'host/', 'krbtgt/'];
|
|
106
|
+
const affectedUsers = [];
|
|
107
|
+
for (const user of usersWithDelegation) {
|
|
108
|
+
const targets = user['msDS-AllowedToDelegateTo'];
|
|
109
|
+
const hasDCTarget = targets.some((t) => dcServicePatterns.some((p) => t.toLowerCase().startsWith(p.toLowerCase())));
|
|
110
|
+
if (hasDCTarget) {
|
|
111
|
+
affectedUsers.push(user);
|
|
112
|
+
}
|
|
113
|
+
}
|
|
114
|
+
return {
|
|
115
|
+
type: 'PATH_DELEGATION_CHAIN',
|
|
116
|
+
severity: 'high',
|
|
117
|
+
category: 'attack-paths',
|
|
118
|
+
title: 'Delegation Chain to Privileged Target',
|
|
119
|
+
description: 'Accounts with constrained delegation to domain controller services. Can be exploited to impersonate privileged users.',
|
|
120
|
+
count: affectedUsers.length + computersWithDelegation.length,
|
|
121
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affectedUsers) : undefined,
|
|
122
|
+
details: {
|
|
123
|
+
usersWithDelegation: usersWithDelegation.length,
|
|
124
|
+
computersWithDelegation: computersWithDelegation.length,
|
|
125
|
+
attackVector: 'Request S4U2Self → S4U2Proxy to DC service → Impersonate DA',
|
|
126
|
+
mitigation: 'Remove unnecessary delegation, use Protected Users group',
|
|
127
|
+
},
|
|
128
|
+
};
|
|
129
|
+
}
|
|
130
|
+
function detectPathNestedAdmin(users, groups, includeDetails) {
|
|
131
|
+
const EXCESSIVE_DEPTH = 3;
|
|
132
|
+
const privilegedGroupDns = groups
|
|
133
|
+
.filter((g) => graph_util_1.PRIVILEGED_GROUPS.some((pg) => g.sAMAccountName?.toLowerCase().includes(pg.toLowerCase()) ||
|
|
134
|
+
g.dn.toLowerCase().includes(`cn=${pg.toLowerCase()}`)))
|
|
135
|
+
.map((g) => g.dn);
|
|
136
|
+
const affected = [];
|
|
137
|
+
const deepNestingDetails = [];
|
|
138
|
+
for (const user of users) {
|
|
139
|
+
if (!user.memberOf || user.memberOf.length === 0)
|
|
140
|
+
continue;
|
|
141
|
+
for (const groupDn of user.memberOf) {
|
|
142
|
+
const depth = (0, graph_util_1.detectNestingDepth)(groupDn, groups);
|
|
143
|
+
if (depth > EXCESSIVE_DEPTH) {
|
|
144
|
+
const group = groups.find((g) => g.dn.toLowerCase() === groupDn.toLowerCase());
|
|
145
|
+
if (group?.memberOf?.some((parent) => privilegedGroupDns.includes(parent))) {
|
|
146
|
+
affected.push(user);
|
|
147
|
+
deepNestingDetails.push({
|
|
148
|
+
user: user.sAMAccountName,
|
|
149
|
+
depth,
|
|
150
|
+
group: groupDn,
|
|
151
|
+
});
|
|
152
|
+
break;
|
|
153
|
+
}
|
|
154
|
+
}
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
return {
|
|
158
|
+
type: 'PATH_NESTED_ADMIN',
|
|
159
|
+
severity: 'high',
|
|
160
|
+
category: 'attack-paths',
|
|
161
|
+
title: 'Excessive Group Nesting to Admin',
|
|
162
|
+
description: `Users reach admin groups through excessive nesting (>${EXCESSIVE_DEPTH} levels). Makes privilege review difficult and may hide admin access.`,
|
|
163
|
+
count: affected.length,
|
|
164
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affected) : undefined,
|
|
165
|
+
details: affected.length > 0
|
|
166
|
+
? {
|
|
167
|
+
threshold: EXCESSIVE_DEPTH,
|
|
168
|
+
deepestNesting: Math.max(...deepNestingDetails.map((d) => d.depth), 0),
|
|
169
|
+
mitigation: 'Flatten group structure, limit nesting to 2-3 levels',
|
|
170
|
+
}
|
|
171
|
+
: undefined,
|
|
172
|
+
};
|
|
173
|
+
}
|
|
174
|
+
function detectPathServiceToDA(users, groups, computers, aclEntries, includeDetails) {
|
|
175
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
176
|
+
(0, graph_util_1.buildAclGraph)(aclEntries, graph);
|
|
177
|
+
(0, graph_util_1.addDelegationEdges)(users, computers, graph);
|
|
178
|
+
const serviceAccounts = users.filter((u) => {
|
|
179
|
+
const spn = u['servicePrincipalName'];
|
|
180
|
+
const hasSPN = spn && Array.isArray(spn) && spn.length > 0;
|
|
181
|
+
return hasSPN && u.enabled;
|
|
182
|
+
});
|
|
183
|
+
const affected = serviceAccounts.filter((sa) => {
|
|
184
|
+
const path = graph.findShortestPathToPrivileged(sa.dn, 5);
|
|
185
|
+
return path !== null;
|
|
186
|
+
});
|
|
187
|
+
return {
|
|
188
|
+
type: 'PATH_SERVICE_TO_DA',
|
|
189
|
+
severity: 'critical',
|
|
190
|
+
category: 'attack-paths',
|
|
191
|
+
title: 'Service Account Path to Domain Admin',
|
|
192
|
+
description: 'Service accounts with paths to Domain Admin through membership, ACLs, or delegation. Compromising these accounts leads to DA.',
|
|
193
|
+
count: affected.length,
|
|
194
|
+
affectedEntities: includeDetails ? (0, entity_converter_1.toAffectedUserEntities)(affected) : undefined,
|
|
195
|
+
details: affected.length > 0
|
|
196
|
+
? {
|
|
197
|
+
totalServiceAccounts: serviceAccounts.length,
|
|
198
|
+
withPathToDA: affected.length,
|
|
199
|
+
attackVector: 'Kerberoast/Credential theft → Exploit path → Domain Admin',
|
|
200
|
+
mitigation: 'Use gMSA, minimize service account privileges, regular password rotation',
|
|
201
|
+
}
|
|
202
|
+
: undefined,
|
|
203
|
+
};
|
|
204
|
+
}
|
|
205
|
+
function detectPathComputerTakeover(computers, users, groups, includeDetails) {
|
|
206
|
+
const graph = (0, graph_util_1.buildGroupMembershipGraph)(users, groups, computers);
|
|
207
|
+
const rbcdComputers = computers.filter((c) => {
|
|
208
|
+
const rbcd = c['msDS-AllowedToActOnBehalfOfOtherIdentity'];
|
|
209
|
+
return rbcd && rbcd !== '';
|
|
210
|
+
});
|
|
211
|
+
const dcPattern = /^(dc|domain controller)/i;
|
|
212
|
+
const affected = rbcdComputers.filter((c) => {
|
|
213
|
+
const computerMemberOf = c['memberOf'];
|
|
214
|
+
const isDC = dcPattern.test(c.sAMAccountName || '') || computerMemberOf?.some((g) => g.includes('Domain Controllers'));
|
|
215
|
+
const isPrivileged = graph.isPrivileged(c.dn);
|
|
216
|
+
return isDC || isPrivileged;
|
|
217
|
+
});
|
|
218
|
+
return {
|
|
219
|
+
type: 'PATH_COMPUTER_TAKEOVER',
|
|
220
|
+
severity: 'high',
|
|
221
|
+
category: 'attack-paths',
|
|
222
|
+
title: 'RBCD Computer Takeover Path',
|
|
223
|
+
description: 'Privileged computers have Resource-Based Constrained Delegation configured. Attackers controlling the delegating principal can compromise these computers.',
|
|
224
|
+
count: affected.length,
|
|
225
|
+
affectedEntities: includeDetails
|
|
226
|
+
? affected.map((c) => ({
|
|
227
|
+
type: 'computer',
|
|
228
|
+
id: c.dn,
|
|
229
|
+
displayName: c.sAMAccountName || c.dn,
|
|
230
|
+
sAMAccountName: c.sAMAccountName,
|
|
231
|
+
dNSHostName: c.dNSHostName || null,
|
|
232
|
+
operatingSystem: c.operatingSystem || null,
|
|
233
|
+
operatingSystemVersion: c.operatingSystemVersion || null,
|
|
234
|
+
whenCreated: null,
|
|
235
|
+
whenChanged: null,
|
|
236
|
+
lastLogon: null,
|
|
237
|
+
pwdLastSet: null,
|
|
238
|
+
enabled: c.enabled ?? true,
|
|
239
|
+
userAccountControl: 0,
|
|
240
|
+
}))
|
|
241
|
+
: undefined,
|
|
242
|
+
details: {
|
|
243
|
+
totalRbcdComputers: rbcdComputers.length,
|
|
244
|
+
privilegedRbcdComputers: affected.length,
|
|
245
|
+
attackVector: 'Control delegating account → RBCD → Impersonate on target',
|
|
246
|
+
mitigation: 'Remove RBCD from privileged computers, monitor msDS-AllowedToActOnBehalfOfOtherIdentity',
|
|
247
|
+
},
|
|
248
|
+
};
|
|
249
|
+
}
|
|
250
|
+
function detectPathGpoToDA(gpos, aclEntries, includeDetails) {
|
|
251
|
+
const adminSids = [
|
|
252
|
+
'S-1-5-32-544',
|
|
253
|
+
'S-1-5-21-*-512',
|
|
254
|
+
'S-1-5-21-*-519',
|
|
255
|
+
];
|
|
256
|
+
const vulnerableGpos = [];
|
|
257
|
+
for (const gpo of gpos) {
|
|
258
|
+
const gpoAcls = aclEntries.filter((acl) => acl.objectDn.toLowerCase() === gpo.dn.toLowerCase());
|
|
259
|
+
const hasWeakAcl = gpoAcls.some((acl) => {
|
|
260
|
+
const isAdmin = adminSids.some((pattern) => {
|
|
261
|
+
if (pattern.includes('*')) {
|
|
262
|
+
const regex = new RegExp(pattern.replace('*', '.*'));
|
|
263
|
+
return regex.test(acl.trustee);
|
|
264
|
+
}
|
|
265
|
+
return acl.trustee === pattern;
|
|
266
|
+
});
|
|
267
|
+
const hasWrite = (acl.accessMask & 0x40000000) !== 0 || (acl.accessMask & 0x10000000) !== 0;
|
|
268
|
+
return hasWrite && !isAdmin && String(acl.aceType) === '0';
|
|
269
|
+
});
|
|
270
|
+
if (hasWeakAcl) {
|
|
271
|
+
vulnerableGpos.push(gpo);
|
|
272
|
+
}
|
|
273
|
+
}
|
|
274
|
+
return {
|
|
275
|
+
type: 'PATH_GPO_TO_DA',
|
|
276
|
+
severity: 'critical',
|
|
277
|
+
category: 'attack-paths',
|
|
278
|
+
title: 'GPO Modification Path to Domain Admin',
|
|
279
|
+
description: 'GPOs can be modified by non-admin users. If these GPOs apply to privileged users or DCs, attackers can achieve Domain Admin.',
|
|
280
|
+
count: vulnerableGpos.length,
|
|
281
|
+
affectedEntities: includeDetails ? vulnerableGpos.map((g) => g.dn) : undefined,
|
|
282
|
+
details: vulnerableGpos.length > 0
|
|
283
|
+
? {
|
|
284
|
+
vulnerableGpos: vulnerableGpos.map((g) => g.displayName || g.cn),
|
|
285
|
+
attackVector: 'Modify GPO → Add malicious script/scheduled task → Execute on DA logon',
|
|
286
|
+
mitigation: 'Restrict GPO modification rights, implement GPO change monitoring',
|
|
287
|
+
}
|
|
288
|
+
: undefined,
|
|
289
|
+
};
|
|
290
|
+
}
|
|
291
|
+
function detectPathCertificateEsc(templates, users, _groups, _computers, includeDetails) {
|
|
292
|
+
const vulnerableTemplates = templates.filter((t) => {
|
|
293
|
+
const hasClientAuth = t.pKIExtendedKeyUsage?.includes('1.3.6.1.5.5.7.3.2');
|
|
294
|
+
const enrolleeSupplies = t['msPKI-Certificate-Name-Flag'] && (t['msPKI-Certificate-Name-Flag'] & 0x1) !== 0;
|
|
295
|
+
return hasClientAuth && enrolleeSupplies;
|
|
296
|
+
});
|
|
297
|
+
if (vulnerableTemplates.length === 0) {
|
|
298
|
+
return {
|
|
299
|
+
type: 'PATH_CERTIFICATE_ESC',
|
|
300
|
+
severity: 'critical',
|
|
301
|
+
category: 'attack-paths',
|
|
302
|
+
title: 'Certificate Template Escalation to Domain Admin',
|
|
303
|
+
description: 'No vulnerable certificate templates that enable privilege escalation to Domain Admin.',
|
|
304
|
+
count: 0,
|
|
305
|
+
};
|
|
306
|
+
}
|
|
307
|
+
const usersWhoCanEnroll = users.filter((u) => u.enabled && u.adminCount !== 1);
|
|
308
|
+
return {
|
|
309
|
+
type: 'PATH_CERTIFICATE_ESC',
|
|
310
|
+
severity: 'critical',
|
|
311
|
+
category: 'attack-paths',
|
|
312
|
+
title: 'Certificate Template Escalation to Domain Admin',
|
|
313
|
+
description: 'Vulnerable certificate templates (ESC1-like) allow users to request certificates for any user including Domain Admins.',
|
|
314
|
+
count: vulnerableTemplates.length,
|
|
315
|
+
affectedEntities: includeDetails ? vulnerableTemplates.map((t) => t.dn || t.cn) : undefined,
|
|
316
|
+
details: {
|
|
317
|
+
vulnerableTemplates: vulnerableTemplates.map((t) => t.cn || t.name),
|
|
318
|
+
attackVector: 'Enroll in vulnerable template → Request cert as DA → Authenticate as DA',
|
|
319
|
+
potentialAttackers: usersWhoCanEnroll.length,
|
|
320
|
+
mitigation: 'Disable ENROLLEE_SUPPLIES_SUBJECT flag, restrict enrollment permissions, use Certificate Manager Approval',
|
|
321
|
+
},
|
|
322
|
+
};
|
|
323
|
+
}
|
|
324
|
+
function detectPathTrustLateral(trusts, includeDetails) {
|
|
325
|
+
const riskyTrusts = trusts.filter((t) => {
|
|
326
|
+
const noSidFiltering = !t.sidFilteringEnabled;
|
|
327
|
+
const bidirectional = t.trustDirection === 3 || t.direction === 'bidirectional';
|
|
328
|
+
const forestNoSelectiveAuth = t.type === 'forest' && !t.selectiveAuthEnabled;
|
|
329
|
+
return noSidFiltering || (bidirectional && forestNoSelectiveAuth);
|
|
330
|
+
});
|
|
331
|
+
return {
|
|
332
|
+
type: 'PATH_TRUST_LATERAL',
|
|
333
|
+
severity: 'high',
|
|
334
|
+
category: 'attack-paths',
|
|
335
|
+
title: 'Trust Relationship Enables Lateral Movement',
|
|
336
|
+
description: 'Domain trusts configured without proper security controls (SID filtering, selective authentication). Compromising trusted domain can lead to this domain.',
|
|
337
|
+
count: riskyTrusts.length,
|
|
338
|
+
affectedEntities: includeDetails ? riskyTrusts.map((t) => t.name) : undefined,
|
|
339
|
+
details: riskyTrusts.length > 0
|
|
340
|
+
? {
|
|
341
|
+
totalTrusts: trusts.length,
|
|
342
|
+
riskyTrusts: riskyTrusts.map((t) => ({
|
|
343
|
+
name: t.name,
|
|
344
|
+
direction: t.direction,
|
|
345
|
+
type: t.type,
|
|
346
|
+
sidFiltering: t.sidFilteringEnabled,
|
|
347
|
+
selectiveAuth: t.selectiveAuthEnabled,
|
|
348
|
+
})),
|
|
349
|
+
attackVector: 'Compromise trusted domain → Exploit trust → Access this domain',
|
|
350
|
+
mitigation: 'Enable SID filtering, use selective authentication for forest trusts',
|
|
351
|
+
}
|
|
352
|
+
: undefined,
|
|
353
|
+
};
|
|
354
|
+
}
|
|
355
|
+
function detectAttackPathVulnerabilities(users, groups, computers, aclEntries, gpos, trusts, templates, includeDetails) {
|
|
356
|
+
return [
|
|
357
|
+
detectPathKerberoastingToDA(users, groups, computers, includeDetails),
|
|
358
|
+
detectPathAclToDA(users, groups, computers, aclEntries, includeDetails),
|
|
359
|
+
detectPathServiceToDA(users, groups, computers, aclEntries, includeDetails),
|
|
360
|
+
detectPathCertificateEsc(templates, users, groups, computers, includeDetails),
|
|
361
|
+
detectPathAsrepToAdmin(users, groups, computers, includeDetails),
|
|
362
|
+
detectPathDelegationChain(users, computers, groups, includeDetails),
|
|
363
|
+
detectPathNestedAdmin(users, groups, includeDetails),
|
|
364
|
+
detectPathComputerTakeover(computers, users, groups, includeDetails),
|
|
365
|
+
detectPathGpoToDA(gpos, aclEntries, includeDetails),
|
|
366
|
+
detectPathTrustLateral(trusts, includeDetails),
|
|
367
|
+
].filter((finding) => finding.count > 0);
|
|
368
|
+
}
|
|
369
|
+
//# sourceMappingURL=attack-paths.detector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"attack-paths.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/attack-paths.detector.ts"],"names":[],"mappings":";;AA+CA,kEAmCC;AAMD,wDAkCC;AAMD,8CA8CC;AAMD,8DAmDC;AAMD,sDA8DC;AAMD,sDA2CC;AAMD,gEAuDC;AAMD,8CAyDC;AAMD,4DAgDC;AAMD,wDAqCC;AAKD,0EAyBC;AAxjBD,yEAA4E;AAC5E,6DAOsC;AAQtC,SAAgB,2BAA2B,CACzC,KAAe,EACf,MAAiB,EACjB,SAAuB,EACvB,cAAuB;IAEvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAGlE,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,MAAM,GAAG,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3D,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC;IAC7B,CAAC,CAAC,CAAC;IAGH,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,+BAAkB,EAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAEpF,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,qIAAqI;QACvI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,0DAA0D;gBACxE,UAAU,EAAE,0FAA0F;aACvG;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,sBAAsB,CACpC,KAAe,EACf,MAAiB,EACjB,SAAuB,EACvB,cAAuB;IAEvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAGlE,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACpC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5F,OAAO,YAAY,IAAI,CAAC,CAAC,OAAO,CAAC;IACnC,CAAC,CAAC,CAAC;IAGH,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,+BAAkB,EAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAE3E,OAAO;QACL,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,kHAAkH;QACpH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,+CAA+C;gBAC7D,UAAU,EAAE,8DAA8D;aAC3E;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,iBAAiB,CAC/B,KAAe,EACf,MAAiB,EACjB,SAAuB,EACvB,UAAsB,EACtB,cAAuB;IAGvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAClE,IAAA,0BAAa,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAGjC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC;IAEhF,MAAM,UAAU,GAA2C,EAAE,CAAC;IAE9D,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,4BAA4B,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAGD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,0GAA0G;QAC5G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QAC5F,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,YAAY,EAAE,+CAA+C;gBAC7D,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU;gBACvC,UAAU,EAAE,UAAU,CAAC,MAAM;gBAC7B,UAAU,EAAE,+CAA+C;aAC5D;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,yBAAyB,CACvC,KAAe,EACf,SAAuB,EACvB,MAAiB,EACjB,cAAuB;IAEvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAClE,IAAA,+BAAkB,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAG5C,MAAM,mBAAmB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7C,MAAM,SAAS,GAAI,CAAS,CAAC,0BAA0B,CAAC,CAAC;QACzD,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAGH,MAAM,uBAAuB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,MAAM,SAAS,GAAI,CAAS,CAAC,0BAA0B,CAAC,CAAC;QACzD,OAAO,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IAGH,MAAM,iBAAiB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACjE,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,mBAAmB,EAAE,CAAC;QACvC,MAAM,OAAO,GAAI,IAAY,CAAC,0BAA0B,CAAa,CAAC;QACtE,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACrC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAC3E,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,uHAAuH;QACzH,KAAK,EAAE,aAAa,CAAC,MAAM,GAAG,uBAAuB,CAAC,MAAM;QAC5D,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QACpF,OAAO,EAAE;YACP,mBAAmB,EAAE,mBAAmB,CAAC,MAAM;YAC/C,uBAAuB,EAAE,uBAAuB,CAAC,MAAM;YACvD,YAAY,EAAE,6DAA6D;YAC3E,UAAU,EAAE,0DAA0D;SACvE;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,qBAAqB,CACnC,KAAe,EACf,MAAiB,EACjB,cAAuB;IAEvB,MAAM,eAAe,GAAG,CAAC,CAAC;IAG1B,MAAM,kBAAkB,GAAG,MAAM;SAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CACZ,8BAAiB,CAAC,IAAI,CACpB,CAAC,EAAE,EAAE,EAAE,CACL,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1D,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CACxD,CACF;SACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAGpB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,kBAAkB,GAAqD,EAAE,CAAC;IAEhF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAE3D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,IAAA,+BAAkB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAGlD,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;gBAE5B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC/E,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBAC3E,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACpB,kBAAkB,CAAC,IAAI,CAAC;wBACtB,IAAI,EAAE,IAAI,CAAC,cAAc;wBACzB,KAAK;wBACL,KAAK,EAAE,OAAO;qBACf,CAAC,CAAC;oBACH,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,kCAAkC;QACzC,WAAW,EAAE,wDAAwD,eAAe,uEAAuE;QAC3J,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,SAAS,EAAE,eAAe;gBAC1B,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBACtE,UAAU,EAAE,sDAAsD;aACnE;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,qBAAqB,CACnC,KAAe,EACf,MAAiB,EACjB,SAAuB,EACvB,UAAsB,EACtB,cAAuB;IAEvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAClE,IAAA,0BAAa,EAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACjC,IAAA,+BAAkB,EAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAG5C,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,GAAG,GAAG,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3D,OAAO,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC;IAC7B,CAAC,CAAC,CAAC;IAGH,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,4BAA4B,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,KAAK,IAAI,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,sCAAsC;QAC7C,WAAW,EACT,+HAA+H;QACjI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,yCAAsB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/E,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,oBAAoB,EAAE,eAAe,CAAC,MAAM;gBAC5C,YAAY,EAAE,QAAQ,CAAC,MAAM;gBAC7B,YAAY,EAAE,2DAA2D;gBACzE,UAAU,EAAE,0EAA0E;aACvF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,0BAA0B,CACxC,SAAuB,EACvB,KAAe,EACf,MAAiB,EACjB,cAAuB;IAEvB,MAAM,KAAK,GAAG,IAAA,sCAAyB,EAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAGlE,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAI,CAAS,CAAC,0CAA0C,CAAC,CAAC;QACpE,OAAO,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAGH,MAAM,SAAS,GAAG,0BAA0B,CAAC;IAC7C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,MAAM,gBAAgB,GAAG,CAAC,CAAC,UAAU,CAAyB,CAAC;QAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC/H,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,IAAI,IAAI,YAAY,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,6BAA6B;QACpC,WAAW,EACT,4JAA4J;QAC9J,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACnB,IAAI,EAAE,UAAmB;gBACzB,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,WAAW,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,EAAE;gBACrC,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,IAAI;gBAClC,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,IAAI;gBAC1C,sBAAsB,EAAE,CAAC,CAAC,sBAAsB,IAAI,IAAI;gBACxD,WAAW,EAAE,IAAI;gBACjB,WAAW,EAAE,IAAI;gBACjB,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;gBAC1B,kBAAkB,EAAE,CAAC;aACtB,CAAC,CAAC;YACL,CAAC,CAAC,SAAS;QACb,OAAO,EAAE;YACP,kBAAkB,EAAE,aAAa,CAAC,MAAM;YACxC,uBAAuB,EAAE,QAAQ,CAAC,MAAM;YACxC,YAAY,EAAE,2DAA2D;YACzE,UAAU,EAAE,yFAAyF;SACtG;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,iBAAiB,CAC/B,IAAa,EACb,UAAsB,EACtB,cAAuB;IAGvB,MAAM,SAAS,GAAG;QAChB,cAAc;QACd,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IAEF,MAAM,cAAc,GAAY,EAAE,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAGhG,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;YACtC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBACzC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;oBACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjC,CAAC;gBACD,OAAO,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC;YACjC,CAAC,CAAC,CAAC;YAGH,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YAE5F,OAAO,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,IAAI,UAAU,EAAE,CAAC;YACf,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,uCAAuC;QAC9C,WAAW,EACT,8HAA8H;QAChI,KAAK,EAAE,cAAc,CAAC,MAAM;QAC5B,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9E,OAAO,EACL,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC;gBACE,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,CAAC;gBAChE,YAAY,EAAE,wEAAwE;gBACtF,UAAU,EAAE,mEAAmE;aAChF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB,CACtC,SAAgB,EAChB,KAAe,EACf,OAAkB,EAClB,UAAwB,EACxB,cAAuB;IAKvB,MAAM,mBAAmB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACjD,MAAM,aAAa,GAAG,CAAC,CAAC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAC3E,MAAM,gBAAgB,GAAG,CAAC,CAAC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,6BAA6B,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5G,OAAO,aAAa,IAAI,gBAAgB,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,IAAI,mBAAmB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,cAAc;YACxB,KAAK,EAAE,iDAAiD;YACxD,WAAW,EAAE,uFAAuF;YACpG,KAAK,EAAE,CAAC;SACT,CAAC;IACJ,CAAC;IAID,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC;IAE/E,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,iDAAiD;QACxD,WAAW,EACT,wHAAwH;QAC1H,KAAK,EAAE,mBAAmB,CAAC,MAAM;QACjC,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3F,OAAO,EAAE;YACP,mBAAmB,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;YACnE,YAAY,EAAE,yEAAyE;YACvF,kBAAkB,EAAE,iBAAiB,CAAC,MAAM;YAC5C,UAAU,EACR,2GAA2G;SAC9G;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,sBAAsB,CAAC,MAAyB,EAAE,cAAuB;IACvF,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,MAAM,cAAc,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAE9C,MAAM,aAAa,GAAG,CAAC,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,eAAe,CAAC;QAEhF,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE7E,OAAO,cAAc,IAAI,CAAC,aAAa,IAAI,qBAAqB,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,6CAA6C;QACpD,WAAW,EACT,2JAA2J;QAC7J,KAAK,EAAE,WAAW,CAAC,MAAM;QACzB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7E,OAAO,EACL,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC;gBACE,WAAW,EAAE,MAAM,CAAC,MAAM;gBAC1B,WAAW,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnC,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,YAAY,EAAE,CAAC,CAAC,mBAAmB;oBACnC,aAAa,EAAE,CAAC,CAAC,oBAAoB;iBACtC,CAAC,CAAC;gBACH,YAAY,EAAE,gEAAgE;gBAC9E,UAAU,EAAE,sEAAsE;aACnF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAKD,SAAgB,+BAA+B,CAC7C,KAAe,EACf,MAAiB,EACjB,SAAuB,EACvB,UAAsB,EACtB,IAAa,EACb,MAAyB,EACzB,SAAgB,EAChB,cAAuB;IAEvB,OAAO;QAEL,2BAA2B,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC;QACrE,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC;QACvE,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC;QAC3E,wBAAwB,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC;QAE7E,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC;QAChE,yBAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC;QACnE,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC;QACpD,0BAA0B,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC;QACpE,iBAAiB,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,CAAC;QAEnD,sBAAsB,CAAC,MAAM,EAAE,cAAc,CAAC;KAC/C,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}
|
|
@@ -0,0 +1,28 @@
|
|
|
1
|
+
import { ADUser, ADGroup, ADComputer, ADDomain } from '../../../../types/ad.types';
|
|
2
|
+
import { Finding } from '../../../../types/finding.types';
|
|
3
|
+
import { GpoSecuritySettings } from '../../../../providers/smb/smb.provider';
|
|
4
|
+
export declare function detectAnssiR1PasswordPolicy(domain: ADDomain, gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
5
|
+
export declare function detectAnssiR2PrivilegedAccounts(users: ADUser[], _groups: ADGroup[], includeDetails: boolean): Finding;
|
|
6
|
+
export declare function detectAnssiR3StrongAuth(users: ADUser[], domain: ADDomain, _includeDetails: boolean): Finding;
|
|
7
|
+
export declare function detectAnssiR4Logging(gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
8
|
+
export declare function detectAnssiR5Segregation(users: ADUser[], computers: ADComputer[], _includeDetails: boolean): Finding;
|
|
9
|
+
export declare function detectNistAc2AccountManagement(users: ADUser[], includeDetails: boolean): Finding;
|
|
10
|
+
export declare function detectNistAc6LeastPrivilege(users: ADUser[], groups: ADGroup[], includeDetails: boolean): Finding;
|
|
11
|
+
export declare function detectNistIa5Authenticator(domain: ADDomain, users: ADUser[], _includeDetails: boolean): Finding;
|
|
12
|
+
export declare function detectNistAu2AuditEvents(gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
13
|
+
export declare function detectCisPasswordPolicy(domain: ADDomain, _includeDetails: boolean): Finding;
|
|
14
|
+
export declare function detectCisNetworkSecurity(gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
15
|
+
export declare function detectCisUserRights(users: ADUser[], groups: ADGroup[], _includeDetails: boolean): Finding;
|
|
16
|
+
export declare function detectDisaAccountPolicies(domain: ADDomain, users: ADUser[], _includeDetails: boolean): Finding;
|
|
17
|
+
export declare function detectDisaAuditPolicies(gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
18
|
+
export declare function detectMfaNotEnforced(users: ADUser[], includeDetails: boolean): Finding;
|
|
19
|
+
export declare function detectBackupNotVerified(domain: ADDomain, _includeDetails: boolean): Finding;
|
|
20
|
+
export declare function detectAuditLogRetentionShort(gpoSettings: GpoSecuritySettings | null, _includeDetails: boolean): Finding;
|
|
21
|
+
export declare function detectPrivilegedAccessReviewMissing(users: ADUser[], groups: ADGroup[], _includeDetails: boolean): Finding;
|
|
22
|
+
export declare function detectDataClassificationMissing(domain: ADDomain, _includeDetails: boolean): Finding;
|
|
23
|
+
export declare function detectChangeManagementBypass(users: ADUser[], groups: ADGroup[], _includeDetails: boolean): Finding;
|
|
24
|
+
export declare function detectVendorAccountUnmonitored(users: ADUser[], includeDetails: boolean): Finding;
|
|
25
|
+
export declare function detectEncryptionAtRestDisabled(computers: ADComputer[], _includeDetails: boolean): Finding;
|
|
26
|
+
export declare function detectComplianceScore(findings: Finding[], _includeDetails: boolean): Finding;
|
|
27
|
+
export declare function detectComplianceVulnerabilities(users: ADUser[], groups: ADGroup[], computers: ADComputer[], domain: ADDomain, gpoSettings: GpoSecuritySettings | null, includeDetails: boolean): Finding[];
|
|
28
|
+
//# sourceMappingURL=compliance.detector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"compliance.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/compliance.detector.ts"],"names":[],"mappings":"AAiCA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACnF,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AA0B7E,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CA4CT;AAUD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,MAAM,EAAE,EACf,OAAO,EAAE,OAAO,EAAE,EAClB,cAAc,EAAE,OAAO,GACtB,OAAO,CAoET;AASD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,QAAQ,EAChB,eAAe,EAAE,OAAO,GACvB,OAAO,CA0CT;AASD,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CAyCT;AASD,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,EAAE,UAAU,EAAE,EACvB,eAAe,EAAE,OAAO,GACvB,OAAO,CAoDT;AAWD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,MAAM,EAAE,EACf,cAAc,EAAE,OAAO,GACtB,OAAO,CA0CT;AASD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CAqET;AASD,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,MAAM,EAAE,EACf,eAAe,EAAE,OAAO,GACvB,OAAO,CA+CT;AAQD,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CAqCT;AAQD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,EAChB,eAAe,EAAE,OAAO,GACvB,OAAO,CA2CT;AAMD,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CAgCT;AAMD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,OAAO,CA0CT;AAQD,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,QAAQ,EAChB,KAAK,EAAE,MAAM,EAAE,EACf,eAAe,EAAE,OAAO,GACvB,OAAO,CA2CT;AAMD,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CAqCT;AASD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,MAAM,EAAE,EACf,cAAc,EAAE,OAAO,GACtB,OAAO,CA6BT;AAOD,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,EAChB,eAAe,EAAE,OAAO,GACvB,OAAO,CAiCT;AAOD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,eAAe,EAAE,OAAO,GACvB,OAAO,CAsCT;AAOD,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,OAAO,CAsDT;AAOD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,QAAQ,EAChB,eAAe,EAAE,OAAO,GACvB,OAAO,CAkCT;AAOD,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,OAAO,CA+CT;AAOD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,MAAM,EAAE,EACf,cAAc,EAAE,OAAO,GACtB,OAAO,CA4DT;AAOD,wBAAgB,8BAA8B,CAC5C,SAAS,EAAE,UAAU,EAAE,EACvB,eAAe,EAAE,OAAO,GACvB,OAAO,CAmDT;AAgBD,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,OAAO,EAAE,EACnB,eAAe,EAAE,OAAO,GACvB,OAAO,CA8DT;AAKD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,EACvB,MAAM,EAAE,QAAQ,EAChB,WAAW,EAAE,mBAAmB,GAAG,IAAI,EACvC,cAAc,EAAE,OAAO,GACtB,OAAO,EAAE,CAsCX"}
|