@etcsec-com/etc-collector 1.4.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.env.example +60 -0
- package/.env.test.example +33 -0
- package/.github/workflows/ci.yml +83 -0
- package/.github/workflows/release.yml +246 -0
- package/.prettierrc.json +10 -0
- package/CHANGELOG.md +15 -0
- package/Dockerfile +57 -0
- package/LICENSE +190 -0
- package/README.md +194 -0
- package/dist/api/controllers/audit.controller.d.ts +21 -0
- package/dist/api/controllers/audit.controller.d.ts.map +1 -0
- package/dist/api/controllers/audit.controller.js +179 -0
- package/dist/api/controllers/audit.controller.js.map +1 -0
- package/dist/api/controllers/auth.controller.d.ts +16 -0
- package/dist/api/controllers/auth.controller.d.ts.map +1 -0
- package/dist/api/controllers/auth.controller.js +146 -0
- package/dist/api/controllers/auth.controller.js.map +1 -0
- package/dist/api/controllers/export.controller.d.ts +27 -0
- package/dist/api/controllers/export.controller.d.ts.map +1 -0
- package/dist/api/controllers/export.controller.js +80 -0
- package/dist/api/controllers/export.controller.js.map +1 -0
- package/dist/api/controllers/health.controller.d.ts +5 -0
- package/dist/api/controllers/health.controller.d.ts.map +1 -0
- package/dist/api/controllers/health.controller.js +16 -0
- package/dist/api/controllers/health.controller.js.map +1 -0
- package/dist/api/controllers/jobs.controller.d.ts +13 -0
- package/dist/api/controllers/jobs.controller.d.ts.map +1 -0
- package/dist/api/controllers/jobs.controller.js +125 -0
- package/dist/api/controllers/jobs.controller.js.map +1 -0
- package/dist/api/controllers/providers.controller.d.ts +15 -0
- package/dist/api/controllers/providers.controller.d.ts.map +1 -0
- package/dist/api/controllers/providers.controller.js +112 -0
- package/dist/api/controllers/providers.controller.js.map +1 -0
- package/dist/api/dto/AuditRequest.dto.d.ts +6 -0
- package/dist/api/dto/AuditRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditRequest.dto.js +3 -0
- package/dist/api/dto/AuditRequest.dto.js.map +1 -0
- package/dist/api/dto/AuditResponse.dto.d.ts +17 -0
- package/dist/api/dto/AuditResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/AuditResponse.dto.js +3 -0
- package/dist/api/dto/AuditResponse.dto.js.map +1 -0
- package/dist/api/dto/TokenRequest.dto.d.ts +6 -0
- package/dist/api/dto/TokenRequest.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenRequest.dto.js +3 -0
- package/dist/api/dto/TokenRequest.dto.js.map +1 -0
- package/dist/api/dto/TokenResponse.dto.d.ts +12 -0
- package/dist/api/dto/TokenResponse.dto.d.ts.map +1 -0
- package/dist/api/dto/TokenResponse.dto.js +3 -0
- package/dist/api/dto/TokenResponse.dto.js.map +1 -0
- package/dist/api/middlewares/authenticate.d.ts +12 -0
- package/dist/api/middlewares/authenticate.d.ts.map +1 -0
- package/dist/api/middlewares/authenticate.js +141 -0
- package/dist/api/middlewares/authenticate.js.map +1 -0
- package/dist/api/middlewares/errorHandler.d.ts +3 -0
- package/dist/api/middlewares/errorHandler.d.ts.map +1 -0
- package/dist/api/middlewares/errorHandler.js +30 -0
- package/dist/api/middlewares/errorHandler.js.map +1 -0
- package/dist/api/middlewares/rateLimit.d.ts +3 -0
- package/dist/api/middlewares/rateLimit.d.ts.map +1 -0
- package/dist/api/middlewares/rateLimit.js +34 -0
- package/dist/api/middlewares/rateLimit.js.map +1 -0
- package/dist/api/middlewares/validate.d.ts +4 -0
- package/dist/api/middlewares/validate.d.ts.map +1 -0
- package/dist/api/middlewares/validate.js +31 -0
- package/dist/api/middlewares/validate.js.map +1 -0
- package/dist/api/routes/audit.routes.d.ts +5 -0
- package/dist/api/routes/audit.routes.d.ts.map +1 -0
- package/dist/api/routes/audit.routes.js +24 -0
- package/dist/api/routes/audit.routes.js.map +1 -0
- package/dist/api/routes/auth.routes.d.ts +6 -0
- package/dist/api/routes/auth.routes.d.ts.map +1 -0
- package/dist/api/routes/auth.routes.js +22 -0
- package/dist/api/routes/auth.routes.js.map +1 -0
- package/dist/api/routes/export.routes.d.ts +5 -0
- package/dist/api/routes/export.routes.d.ts.map +1 -0
- package/dist/api/routes/export.routes.js +16 -0
- package/dist/api/routes/export.routes.js.map +1 -0
- package/dist/api/routes/health.routes.d.ts +4 -0
- package/dist/api/routes/health.routes.d.ts.map +1 -0
- package/dist/api/routes/health.routes.js +11 -0
- package/dist/api/routes/health.routes.js.map +1 -0
- package/dist/api/routes/index.d.ts +10 -0
- package/dist/api/routes/index.d.ts.map +1 -0
- package/dist/api/routes/index.js +20 -0
- package/dist/api/routes/index.js.map +1 -0
- package/dist/api/routes/providers.routes.d.ts +5 -0
- package/dist/api/routes/providers.routes.d.ts.map +1 -0
- package/dist/api/routes/providers.routes.js +13 -0
- package/dist/api/routes/providers.routes.js.map +1 -0
- package/dist/api/validators/audit.schemas.d.ts +60 -0
- package/dist/api/validators/audit.schemas.d.ts.map +1 -0
- package/dist/api/validators/audit.schemas.js +55 -0
- package/dist/api/validators/audit.schemas.js.map +1 -0
- package/dist/api/validators/auth.schemas.d.ts +17 -0
- package/dist/api/validators/auth.schemas.d.ts.map +1 -0
- package/dist/api/validators/auth.schemas.js +21 -0
- package/dist/api/validators/auth.schemas.js.map +1 -0
- package/dist/app.d.ts +3 -0
- package/dist/app.d.ts.map +1 -0
- package/dist/app.js +62 -0
- package/dist/app.js.map +1 -0
- package/dist/config/config.schema.d.ts +65 -0
- package/dist/config/config.schema.d.ts.map +1 -0
- package/dist/config/config.schema.js +95 -0
- package/dist/config/config.schema.js.map +1 -0
- package/dist/config/index.d.ts +4 -0
- package/dist/config/index.d.ts.map +1 -0
- package/dist/config/index.js +75 -0
- package/dist/config/index.js.map +1 -0
- package/dist/container.d.ts +47 -0
- package/dist/container.d.ts.map +1 -0
- package/dist/container.js +137 -0
- package/dist/container.js.map +1 -0
- package/dist/data/database.d.ts +13 -0
- package/dist/data/database.d.ts.map +1 -0
- package/dist/data/database.js +68 -0
- package/dist/data/database.js.map +1 -0
- package/dist/data/jobs/token-cleanup.job.d.ts +23 -0
- package/dist/data/jobs/token-cleanup.job.d.ts.map +1 -0
- package/dist/data/jobs/token-cleanup.job.js +96 -0
- package/dist/data/jobs/token-cleanup.job.js.map +1 -0
- package/dist/data/migrations/migration.runner.d.ts +13 -0
- package/dist/data/migrations/migration.runner.d.ts.map +1 -0
- package/dist/data/migrations/migration.runner.js +136 -0
- package/dist/data/migrations/migration.runner.js.map +1 -0
- package/dist/data/models/Token.model.d.ts +30 -0
- package/dist/data/models/Token.model.d.ts.map +1 -0
- package/dist/data/models/Token.model.js +3 -0
- package/dist/data/models/Token.model.js.map +1 -0
- package/dist/data/repositories/token.repository.d.ts +16 -0
- package/dist/data/repositories/token.repository.d.ts.map +1 -0
- package/dist/data/repositories/token.repository.js +97 -0
- package/dist/data/repositories/token.repository.js.map +1 -0
- package/dist/providers/azure/auth.provider.d.ts +5 -0
- package/dist/providers/azure/auth.provider.d.ts.map +1 -0
- package/dist/providers/azure/auth.provider.js +13 -0
- package/dist/providers/azure/auth.provider.js.map +1 -0
- package/dist/providers/azure/azure-errors.d.ts +40 -0
- package/dist/providers/azure/azure-errors.d.ts.map +1 -0
- package/dist/providers/azure/azure-errors.js +121 -0
- package/dist/providers/azure/azure-errors.js.map +1 -0
- package/dist/providers/azure/azure-retry.d.ts +41 -0
- package/dist/providers/azure/azure-retry.d.ts.map +1 -0
- package/dist/providers/azure/azure-retry.js +85 -0
- package/dist/providers/azure/azure-retry.js.map +1 -0
- package/dist/providers/azure/graph-client.d.ts +26 -0
- package/dist/providers/azure/graph-client.d.ts.map +1 -0
- package/dist/providers/azure/graph-client.js +146 -0
- package/dist/providers/azure/graph-client.js.map +1 -0
- package/dist/providers/azure/graph.provider.d.ts +23 -0
- package/dist/providers/azure/graph.provider.d.ts.map +1 -0
- package/dist/providers/azure/graph.provider.js +161 -0
- package/dist/providers/azure/graph.provider.js.map +1 -0
- package/dist/providers/azure/queries/app.queries.d.ts +6 -0
- package/dist/providers/azure/queries/app.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/app.queries.js +9 -0
- package/dist/providers/azure/queries/app.queries.js.map +1 -0
- package/dist/providers/azure/queries/policy.queries.d.ts +6 -0
- package/dist/providers/azure/queries/policy.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/policy.queries.js +9 -0
- package/dist/providers/azure/queries/policy.queries.js.map +1 -0
- package/dist/providers/azure/queries/user.queries.d.ts +7 -0
- package/dist/providers/azure/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/azure/queries/user.queries.js +10 -0
- package/dist/providers/azure/queries/user.queries.js.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts +31 -0
- package/dist/providers/interfaces/IGraphProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/IGraphProvider.js +3 -0
- package/dist/providers/interfaces/IGraphProvider.js.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts +37 -0
- package/dist/providers/interfaces/ILDAPProvider.d.ts.map +1 -0
- package/dist/providers/interfaces/ILDAPProvider.js +3 -0
- package/dist/providers/interfaces/ILDAPProvider.js.map +1 -0
- package/dist/providers/ldap/acl-parser.d.ts +8 -0
- package/dist/providers/ldap/acl-parser.d.ts.map +1 -0
- package/dist/providers/ldap/acl-parser.js +157 -0
- package/dist/providers/ldap/acl-parser.js.map +1 -0
- package/dist/providers/ldap/ad-mappers.d.ts +8 -0
- package/dist/providers/ldap/ad-mappers.d.ts.map +1 -0
- package/dist/providers/ldap/ad-mappers.js +162 -0
- package/dist/providers/ldap/ad-mappers.js.map +1 -0
- package/dist/providers/ldap/ldap-client.d.ts +33 -0
- package/dist/providers/ldap/ldap-client.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-client.js +195 -0
- package/dist/providers/ldap/ldap-client.js.map +1 -0
- package/dist/providers/ldap/ldap-errors.d.ts +48 -0
- package/dist/providers/ldap/ldap-errors.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-errors.js +120 -0
- package/dist/providers/ldap/ldap-errors.js.map +1 -0
- package/dist/providers/ldap/ldap-retry.d.ts +14 -0
- package/dist/providers/ldap/ldap-retry.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-retry.js +102 -0
- package/dist/providers/ldap/ldap-retry.js.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts +12 -0
- package/dist/providers/ldap/ldap-sanitizer.d.ts.map +1 -0
- package/dist/providers/ldap/ldap-sanitizer.js +104 -0
- package/dist/providers/ldap/ldap-sanitizer.js.map +1 -0
- package/dist/providers/ldap/ldap.provider.d.ts +21 -0
- package/dist/providers/ldap/ldap.provider.d.ts.map +1 -0
- package/dist/providers/ldap/ldap.provider.js +165 -0
- package/dist/providers/ldap/ldap.provider.js.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/computer.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/computer.queries.js +9 -0
- package/dist/providers/ldap/queries/computer.queries.js.map +1 -0
- package/dist/providers/ldap/queries/group.queries.d.ts +6 -0
- package/dist/providers/ldap/queries/group.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/group.queries.js +9 -0
- package/dist/providers/ldap/queries/group.queries.js.map +1 -0
- package/dist/providers/ldap/queries/user.queries.d.ts +7 -0
- package/dist/providers/ldap/queries/user.queries.d.ts.map +1 -0
- package/dist/providers/ldap/queries/user.queries.js +10 -0
- package/dist/providers/ldap/queries/user.queries.js.map +1 -0
- package/dist/providers/smb/smb.provider.d.ts +68 -0
- package/dist/providers/smb/smb.provider.d.ts.map +1 -0
- package/dist/providers/smb/smb.provider.js +382 -0
- package/dist/providers/smb/smb.provider.js.map +1 -0
- package/dist/server.d.ts +2 -0
- package/dist/server.d.ts.map +1 -0
- package/dist/server.js +44 -0
- package/dist/server.js.map +1 -0
- package/dist/services/audit/ad-audit.service.d.ts +70 -0
- package/dist/services/audit/ad-audit.service.d.ts.map +1 -0
- package/dist/services/audit/ad-audit.service.js +1019 -0
- package/dist/services/audit/ad-audit.service.js.map +1 -0
- package/dist/services/audit/attack-graph.service.d.ts +62 -0
- package/dist/services/audit/attack-graph.service.d.ts.map +1 -0
- package/dist/services/audit/attack-graph.service.js +702 -0
- package/dist/services/audit/attack-graph.service.js.map +1 -0
- package/dist/services/audit/audit.service.d.ts +4 -0
- package/dist/services/audit/audit.service.d.ts.map +1 -0
- package/dist/services/audit/audit.service.js +10 -0
- package/dist/services/audit/audit.service.js.map +1 -0
- package/dist/services/audit/azure-audit.service.d.ts +37 -0
- package/dist/services/audit/azure-audit.service.d.ts.map +1 -0
- package/dist/services/audit/azure-audit.service.js +153 -0
- package/dist/services/audit/azure-audit.service.js.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts +37 -0
- package/dist/services/audit/detectors/ad/accounts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js +881 -0
- package/dist/services/audit/detectors/ad/accounts.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts +21 -0
- package/dist/services/audit/detectors/ad/adcs.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js +227 -0
- package/dist/services/audit/detectors/ad/adcs.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts +63 -0
- package/dist/services/audit/detectors/ad/advanced.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js +867 -0
- package/dist/services/audit/detectors/ad/advanced.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts +16 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js +369 -0
- package/dist/services/audit/detectors/ad/attack-paths.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts +28 -0
- package/dist/services/audit/detectors/ad/compliance.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js +896 -0
- package/dist/services/audit/detectors/ad/compliance.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts +30 -0
- package/dist/services/audit/detectors/ad/computers.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/computers.detector.js +799 -0
- package/dist/services/audit/detectors/ad/computers.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/gpo.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js +257 -0
- package/dist/services/audit/detectors/ad/gpo.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts +19 -0
- package/dist/services/audit/detectors/ad/groups.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/groups.detector.js +488 -0
- package/dist/services/audit/detectors/ad/groups.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/index.d.ts +15 -0
- package/dist/services/audit/detectors/ad/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/index.js +51 -0
- package/dist/services/audit/detectors/ad/index.js.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts +17 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js +293 -0
- package/dist/services/audit/detectors/ad/kerberos.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts +23 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js +328 -0
- package/dist/services/audit/detectors/ad/monitoring.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts +39 -0
- package/dist/services/audit/detectors/ad/network.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/network.detector.js +257 -0
- package/dist/services/audit/detectors/ad/network.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts +14 -0
- package/dist/services/audit/detectors/ad/password.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/password.detector.js +235 -0
- package/dist/services/audit/detectors/ad/password.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts +20 -0
- package/dist/services/audit/detectors/ad/permissions.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js +392 -0
- package/dist/services/audit/detectors/ad/permissions.detector.js.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts +11 -0
- package/dist/services/audit/detectors/ad/trusts.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js +186 -0
- package/dist/services/audit/detectors/ad/trusts.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts +11 -0
- package/dist/services/audit/detectors/azure/app-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js +184 -0
- package/dist/services/audit/detectors/azure/app-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts +10 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js +130 -0
- package/dist/services/audit/detectors/azure/conditional-access.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts +8 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js +113 -0
- package/dist/services/audit/detectors/azure/privilege-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts +14 -0
- package/dist/services/audit/detectors/azure/user-security.detector.d.ts.map +1 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js +198 -0
- package/dist/services/audit/detectors/azure/user-security.detector.js.map +1 -0
- package/dist/services/audit/detectors/index.d.ts +2 -0
- package/dist/services/audit/detectors/index.d.ts.map +1 -0
- package/dist/services/audit/detectors/index.js +38 -0
- package/dist/services/audit/detectors/index.js.map +1 -0
- package/dist/services/audit/response-formatter.d.ts +176 -0
- package/dist/services/audit/response-formatter.d.ts.map +1 -0
- package/dist/services/audit/response-formatter.js +240 -0
- package/dist/services/audit/response-formatter.js.map +1 -0
- package/dist/services/audit/scoring.service.d.ts +15 -0
- package/dist/services/audit/scoring.service.d.ts.map +1 -0
- package/dist/services/audit/scoring.service.js +139 -0
- package/dist/services/audit/scoring.service.js.map +1 -0
- package/dist/services/auth/crypto.service.d.ts +19 -0
- package/dist/services/auth/crypto.service.d.ts.map +1 -0
- package/dist/services/auth/crypto.service.js +135 -0
- package/dist/services/auth/crypto.service.js.map +1 -0
- package/dist/services/auth/errors.d.ts +19 -0
- package/dist/services/auth/errors.d.ts.map +1 -0
- package/dist/services/auth/errors.js +46 -0
- package/dist/services/auth/errors.js.map +1 -0
- package/dist/services/auth/token.service.d.ts +41 -0
- package/dist/services/auth/token.service.d.ts.map +1 -0
- package/dist/services/auth/token.service.js +208 -0
- package/dist/services/auth/token.service.js.map +1 -0
- package/dist/services/config/config.service.d.ts +6 -0
- package/dist/services/config/config.service.d.ts.map +1 -0
- package/dist/services/config/config.service.js +64 -0
- package/dist/services/config/config.service.js.map +1 -0
- package/dist/services/export/export.service.d.ts +28 -0
- package/dist/services/export/export.service.d.ts.map +1 -0
- package/dist/services/export/export.service.js +28 -0
- package/dist/services/export/export.service.js.map +1 -0
- package/dist/services/export/formatters/csv.formatter.d.ts +8 -0
- package/dist/services/export/formatters/csv.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/csv.formatter.js +46 -0
- package/dist/services/export/formatters/csv.formatter.js.map +1 -0
- package/dist/services/export/formatters/json.formatter.d.ts +40 -0
- package/dist/services/export/formatters/json.formatter.d.ts.map +1 -0
- package/dist/services/export/formatters/json.formatter.js +58 -0
- package/dist/services/export/formatters/json.formatter.js.map +1 -0
- package/dist/services/jobs/azure-job-runner.d.ts +38 -0
- package/dist/services/jobs/azure-job-runner.d.ts.map +1 -0
- package/dist/services/jobs/azure-job-runner.js +199 -0
- package/dist/services/jobs/azure-job-runner.js.map +1 -0
- package/dist/services/jobs/index.d.ts +4 -0
- package/dist/services/jobs/index.d.ts.map +1 -0
- package/dist/services/jobs/index.js +20 -0
- package/dist/services/jobs/index.js.map +1 -0
- package/dist/services/jobs/job-runner.d.ts +64 -0
- package/dist/services/jobs/job-runner.d.ts.map +1 -0
- package/dist/services/jobs/job-runner.js +952 -0
- package/dist/services/jobs/job-runner.js.map +1 -0
- package/dist/services/jobs/job-store.d.ts +27 -0
- package/dist/services/jobs/job-store.d.ts.map +1 -0
- package/dist/services/jobs/job-store.js +261 -0
- package/dist/services/jobs/job-store.js.map +1 -0
- package/dist/services/jobs/job.types.d.ts +67 -0
- package/dist/services/jobs/job.types.d.ts.map +1 -0
- package/dist/services/jobs/job.types.js +36 -0
- package/dist/services/jobs/job.types.js.map +1 -0
- package/dist/types/ad.types.d.ts +74 -0
- package/dist/types/ad.types.d.ts.map +1 -0
- package/dist/types/ad.types.js +3 -0
- package/dist/types/ad.types.js.map +1 -0
- package/dist/types/adcs.types.d.ts +58 -0
- package/dist/types/adcs.types.d.ts.map +1 -0
- package/dist/types/adcs.types.js +38 -0
- package/dist/types/adcs.types.js.map +1 -0
- package/dist/types/attack-graph.types.d.ts +135 -0
- package/dist/types/attack-graph.types.d.ts.map +1 -0
- package/dist/types/attack-graph.types.js +58 -0
- package/dist/types/attack-graph.types.js.map +1 -0
- package/dist/types/audit.types.d.ts +34 -0
- package/dist/types/audit.types.d.ts.map +1 -0
- package/dist/types/audit.types.js +3 -0
- package/dist/types/audit.types.js.map +1 -0
- package/dist/types/azure.types.d.ts +61 -0
- package/dist/types/azure.types.d.ts.map +1 -0
- package/dist/types/azure.types.js +3 -0
- package/dist/types/azure.types.js.map +1 -0
- package/dist/types/config.types.d.ts +63 -0
- package/dist/types/config.types.d.ts.map +1 -0
- package/dist/types/config.types.js +3 -0
- package/dist/types/config.types.js.map +1 -0
- package/dist/types/error.types.d.ts +33 -0
- package/dist/types/error.types.d.ts.map +1 -0
- package/dist/types/error.types.js +70 -0
- package/dist/types/error.types.js.map +1 -0
- package/dist/types/finding.types.d.ts +133 -0
- package/dist/types/finding.types.d.ts.map +1 -0
- package/dist/types/finding.types.js +3 -0
- package/dist/types/finding.types.js.map +1 -0
- package/dist/types/gpo.types.d.ts +39 -0
- package/dist/types/gpo.types.d.ts.map +1 -0
- package/dist/types/gpo.types.js +15 -0
- package/dist/types/gpo.types.js.map +1 -0
- package/dist/types/token.types.d.ts +26 -0
- package/dist/types/token.types.d.ts.map +1 -0
- package/dist/types/token.types.js +3 -0
- package/dist/types/token.types.js.map +1 -0
- package/dist/types/trust.types.d.ts +45 -0
- package/dist/types/trust.types.d.ts.map +1 -0
- package/dist/types/trust.types.js +71 -0
- package/dist/types/trust.types.js.map +1 -0
- package/dist/utils/entity-converter.d.ts +17 -0
- package/dist/utils/entity-converter.d.ts.map +1 -0
- package/dist/utils/entity-converter.js +285 -0
- package/dist/utils/entity-converter.js.map +1 -0
- package/dist/utils/graph.util.d.ts +66 -0
- package/dist/utils/graph.util.d.ts.map +1 -0
- package/dist/utils/graph.util.js +382 -0
- package/dist/utils/graph.util.js.map +1 -0
- package/dist/utils/logger.d.ts +7 -0
- package/dist/utils/logger.d.ts.map +1 -0
- package/dist/utils/logger.js +86 -0
- package/dist/utils/logger.js.map +1 -0
- package/dist/utils/type-name-normalizer.d.ts +5 -0
- package/dist/utils/type-name-normalizer.d.ts.map +1 -0
- package/dist/utils/type-name-normalizer.js +218 -0
- package/dist/utils/type-name-normalizer.js.map +1 -0
- package/docker-compose.yml +26 -0
- package/docs/api/README.md +178 -0
- package/docs/api/openapi.yaml +1524 -0
- package/eslint.config.js +54 -0
- package/jest.config.js +38 -0
- package/package.json +97 -0
- package/scripts/fetch-ad-cert.sh +142 -0
- package/src/.gitkeep +0 -0
- package/src/api/.gitkeep +0 -0
- package/src/api/controllers/.gitkeep +0 -0
- package/src/api/controllers/audit.controller.ts +313 -0
- package/src/api/controllers/auth.controller.ts +258 -0
- package/src/api/controllers/export.controller.ts +153 -0
- package/src/api/controllers/health.controller.ts +16 -0
- package/src/api/controllers/jobs.controller.ts +187 -0
- package/src/api/controllers/providers.controller.ts +165 -0
- package/src/api/dto/.gitkeep +0 -0
- package/src/api/dto/AuditRequest.dto.ts +8 -0
- package/src/api/dto/AuditResponse.dto.ts +19 -0
- package/src/api/dto/TokenRequest.dto.ts +8 -0
- package/src/api/dto/TokenResponse.dto.ts +14 -0
- package/src/api/middlewares/.gitkeep +0 -0
- package/src/api/middlewares/authenticate.ts +203 -0
- package/src/api/middlewares/errorHandler.ts +54 -0
- package/src/api/middlewares/rateLimit.ts +35 -0
- package/src/api/middlewares/validate.ts +32 -0
- package/src/api/routes/.gitkeep +0 -0
- package/src/api/routes/audit.routes.ts +77 -0
- package/src/api/routes/auth.routes.ts +71 -0
- package/src/api/routes/export.routes.ts +34 -0
- package/src/api/routes/health.routes.ts +14 -0
- package/src/api/routes/index.ts +40 -0
- package/src/api/routes/providers.routes.ts +24 -0
- package/src/api/validators/.gitkeep +0 -0
- package/src/api/validators/audit.schemas.ts +59 -0
- package/src/api/validators/auth.schemas.ts +59 -0
- package/src/app.ts +87 -0
- package/src/config/.gitkeep +0 -0
- package/src/config/config.schema.ts +108 -0
- package/src/config/index.ts +82 -0
- package/src/container.ts +221 -0
- package/src/data/.gitkeep +0 -0
- package/src/data/database.ts +78 -0
- package/src/data/jobs/token-cleanup.job.ts +166 -0
- package/src/data/migrations/.gitkeep +0 -0
- package/src/data/migrations/001_initial_schema.sql +47 -0
- package/src/data/migrations/migration.runner.ts +125 -0
- package/src/data/models/.gitkeep +0 -0
- package/src/data/models/Token.model.ts +35 -0
- package/src/data/repositories/.gitkeep +0 -0
- package/src/data/repositories/token.repository.ts +160 -0
- package/src/providers/.gitkeep +0 -0
- package/src/providers/azure/.gitkeep +0 -0
- package/src/providers/azure/auth.provider.ts +14 -0
- package/src/providers/azure/azure-errors.ts +189 -0
- package/src/providers/azure/azure-retry.ts +168 -0
- package/src/providers/azure/graph-client.ts +315 -0
- package/src/providers/azure/graph.provider.ts +294 -0
- package/src/providers/azure/queries/app.queries.ts +9 -0
- package/src/providers/azure/queries/policy.queries.ts +9 -0
- package/src/providers/azure/queries/user.queries.ts +10 -0
- package/src/providers/interfaces/.gitkeep +0 -0
- package/src/providers/interfaces/IGraphProvider.ts +117 -0
- package/src/providers/interfaces/ILDAPProvider.ts +142 -0
- package/src/providers/ldap/.gitkeep +0 -0
- package/src/providers/ldap/acl-parser.ts +231 -0
- package/src/providers/ldap/ad-mappers.ts +280 -0
- package/src/providers/ldap/ldap-client.ts +259 -0
- package/src/providers/ldap/ldap-errors.ts +188 -0
- package/src/providers/ldap/ldap-retry.ts +267 -0
- package/src/providers/ldap/ldap-sanitizer.ts +273 -0
- package/src/providers/ldap/ldap.provider.ts +293 -0
- package/src/providers/ldap/queries/computer.queries.ts +9 -0
- package/src/providers/ldap/queries/group.queries.ts +9 -0
- package/src/providers/ldap/queries/user.queries.ts +10 -0
- package/src/providers/smb/smb.provider.ts +653 -0
- package/src/server.ts +60 -0
- package/src/services/.gitkeep +0 -0
- package/src/services/audit/.gitkeep +0 -0
- package/src/services/audit/ad-audit.service.ts +1481 -0
- package/src/services/audit/attack-graph.service.ts +1104 -0
- package/src/services/audit/audit.service.ts +12 -0
- package/src/services/audit/azure-audit.service.ts +286 -0
- package/src/services/audit/detectors/ad/accounts.detector.ts +1232 -0
- package/src/services/audit/detectors/ad/adcs.detector.ts +449 -0
- package/src/services/audit/detectors/ad/advanced.detector.ts +1270 -0
- package/src/services/audit/detectors/ad/attack-paths.detector.ts +600 -0
- package/src/services/audit/detectors/ad/compliance.detector.ts +1421 -0
- package/src/services/audit/detectors/ad/computers.detector.ts +1188 -0
- package/src/services/audit/detectors/ad/gpo.detector.ts +485 -0
- package/src/services/audit/detectors/ad/groups.detector.ts +685 -0
- package/src/services/audit/detectors/ad/index.ts +84 -0
- package/src/services/audit/detectors/ad/kerberos.detector.ts +424 -0
- package/src/services/audit/detectors/ad/monitoring.detector.ts +501 -0
- package/src/services/audit/detectors/ad/network.detector.ts +538 -0
- package/src/services/audit/detectors/ad/password.detector.ts +324 -0
- package/src/services/audit/detectors/ad/permissions.detector.ts +637 -0
- package/src/services/audit/detectors/ad/trusts.detector.ts +315 -0
- package/src/services/audit/detectors/azure/app-security.detector.ts +246 -0
- package/src/services/audit/detectors/azure/conditional-access.detector.ts +186 -0
- package/src/services/audit/detectors/azure/privilege-security.detector.ts +176 -0
- package/src/services/audit/detectors/azure/user-security.detector.ts +280 -0
- package/src/services/audit/detectors/index.ts +18 -0
- package/src/services/audit/response-formatter.ts +604 -0
- package/src/services/audit/scoring.service.ts +234 -0
- package/src/services/auth/.gitkeep +0 -0
- package/src/services/auth/crypto.service.ts +230 -0
- package/src/services/auth/errors.ts +47 -0
- package/src/services/auth/token.service.ts +420 -0
- package/src/services/config/.gitkeep +0 -0
- package/src/services/config/config.service.ts +75 -0
- package/src/services/export/.gitkeep +0 -0
- package/src/services/export/export.service.ts +99 -0
- package/src/services/export/formatters/csv.formatter.ts +124 -0
- package/src/services/export/formatters/json.formatter.ts +160 -0
- package/src/services/jobs/azure-job-runner.ts +312 -0
- package/src/services/jobs/index.ts +9 -0
- package/src/services/jobs/job-runner.ts +1280 -0
- package/src/services/jobs/job-store.ts +384 -0
- package/src/services/jobs/job.types.ts +182 -0
- package/src/types/.gitkeep +0 -0
- package/src/types/ad.types.ts +91 -0
- package/src/types/adcs.types.ts +107 -0
- package/src/types/attack-graph.types.ts +260 -0
- package/src/types/audit.types.ts +42 -0
- package/src/types/azure.types.ts +68 -0
- package/src/types/config.types.ts +79 -0
- package/src/types/error.types.ts +69 -0
- package/src/types/finding.types.ts +284 -0
- package/src/types/gpo.types.ts +72 -0
- package/src/types/smb2.d.ts +73 -0
- package/src/types/token.types.ts +32 -0
- package/src/types/trust.types.ts +140 -0
- package/src/utils/.gitkeep +0 -0
- package/src/utils/entity-converter.ts +453 -0
- package/src/utils/graph.util.ts +609 -0
- package/src/utils/logger.ts +111 -0
- package/src/utils/type-name-normalizer.ts +302 -0
- package/tests/.gitkeep +0 -0
- package/tests/e2e/.gitkeep +0 -0
- package/tests/fixtures/.gitkeep +0 -0
- package/tests/integration/.gitkeep +0 -0
- package/tests/integration/README.md +156 -0
- package/tests/integration/ad-audit.integration.test.ts +216 -0
- package/tests/integration/api/.gitkeep +0 -0
- package/tests/integration/api/endpoints.integration.test.ts +431 -0
- package/tests/integration/auth/jwt-authentication.integration.test.ts +358 -0
- package/tests/integration/providers/.gitkeep +0 -0
- package/tests/integration/providers/azure-basic.integration.test.ts +167 -0
- package/tests/integration/providers/ldap-basic.integration.test.ts +152 -0
- package/tests/integration/providers/ldap-connectivity.test.ts +44 -0
- package/tests/integration/providers/ldap-provider.integration.test.ts +347 -0
- package/tests/mocks/.gitkeep +0 -0
- package/tests/setup.ts +16 -0
- package/tests/unit/.gitkeep +0 -0
- package/tests/unit/api/middlewares/authenticate.test.ts +446 -0
- package/tests/unit/providers/.gitkeep +0 -0
- package/tests/unit/providers/azure/azure-errors.test.ts +193 -0
- package/tests/unit/providers/azure/azure-retry.test.ts +254 -0
- package/tests/unit/providers/azure/graph-provider.test.ts +313 -0
- package/tests/unit/providers/ldap/ad-mappers.test.ts +392 -0
- package/tests/unit/providers/ldap/ldap-provider.test.ts +376 -0
- package/tests/unit/providers/ldap/ldap-retry.test.ts +377 -0
- package/tests/unit/providers/ldap/ldap-sanitizer.test.ts +301 -0
- package/tests/unit/sample.test.ts +19 -0
- package/tests/unit/services/.gitkeep +0 -0
- package/tests/unit/services/audit/detectors/ad/accounts.detector.test.ts +393 -0
- package/tests/unit/services/audit/detectors/ad/advanced.detector.test.ts +380 -0
- package/tests/unit/services/audit/detectors/ad/computers.detector.test.ts +440 -0
- package/tests/unit/services/audit/detectors/ad/groups.detector.test.ts +276 -0
- package/tests/unit/services/audit/detectors/ad/kerberos.detector.test.ts +215 -0
- package/tests/unit/services/audit/detectors/ad/password.detector.test.ts +226 -0
- package/tests/unit/services/audit/detectors/ad/permissions.detector.test.ts +244 -0
- package/tests/unit/services/audit/detectors/azure/app-security.detector.test.ts +349 -0
- package/tests/unit/services/audit/detectors/azure/conditional-access.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/privilege-security.detector.test.ts +374 -0
- package/tests/unit/services/audit/detectors/azure/user-security.detector.test.ts +297 -0
- package/tests/unit/services/auth/crypto.service.test.ts +296 -0
- package/tests/unit/services/auth/token.service.test.ts +579 -0
- package/tests/unit/services/export/export.service.test.ts +241 -0
- package/tests/unit/services/export/formatters/csv.formatter.test.ts +270 -0
- package/tests/unit/services/export/formatters/json.formatter.test.ts +258 -0
- package/tests/unit/utils/.gitkeep +0 -0
- package/tsconfig.json +50 -0
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"computers.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/computers.detector.ts"],"names":[],"mappings":";;AA8IA,kFAmBC;AAKD,gDAgBC;AAKD,gEAkBC;AAKD,gEAgBC;AAKD,sFAmBC;AAMD,kEA2BC;AAKD,8DA4CC;AAKD,wDAeC;AAUD,oDAkGC;AAKD,wDAgBC;AAKD,4EA0EC;AAWD,sDAwBC;AAKD,oEAiBC;AAKD,gFAuBC;AAKD,oEAgBC;AAKD,4DAeC;AAKD,4EAgBC;AAoCD,4DAoBC;AAQD,kEAwBC;AAOD,4DAuBC;AAQD,8CAyCC;AAMD,gEAkDC;AAMD,4DAqDC;AAMD,kEAoCC;AAYD,8DAmCC;AAYD,oEAiDC;AAKD,wEA2CC;AA5nCD,yEAAkG;AAMlG,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAS7C,SAAS,WAAW,CAAC,KAAU;IAC7B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAGxB,IAAI,KAAK,YAAY,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IAGD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAE9B,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,CAAC;QAGD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC3E,IAAI,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAChG,MAAM,IAAI,GAAG,IAAI,IAAI,CACnB,IAAI,CAAC,GAAG,CACN,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAC5B,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EACxB,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CACzB,CACF,CAAC;YACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACnC,CAAC;QAGD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5B,IAAI,KAAK,GAAG,eAAe,EAAE,CAAC;YAC5B,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,IAAI,KAAK,GAAG,YAAY,IAAI,KAAK,GAAG,aAAa,EAAE,CAAC;YAClD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,GAAG,SAAS,IAAI,KAAK,GAAG,UAAU,EAAE,CAAC;YAC5C,OAAO,KAAK,GAAG,IAAI,CAAC;QACtB,CAAC;QAED,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,mBAAmB,CAAC,QAAgB;IAE3C,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,MAAM,EAAE,GAAG,QAAQ,GAAG,KAAK,GAAG,qBAAqB,CAAC;IAGpD,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,aAAa,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC;AAKD,SAAgB,mCAAmC,CACjD,SAAuB,EACvB,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,UAAU,GAAI,CAAS,CAAC,0BAA0B,CAAC,CAAC;QAE1D,OAAO,UAAU,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,iCAAiC;QACvC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,6FAA6F;QAC1G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,kBAAkB,CAAC,SAAuB,EAAE,cAAuB;IACjF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAI,CAAS,CAAC,0CAA0C,CAAC,CAAC;QAExE,OAAO,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,eAAe;QACtB,WAAW,EAAE,oGAAoG;QACjH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,SAAuB,EAAE,cAAuB;IACzF,MAAM,WAAW,GAAG,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAE3D,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAI,CAAS,CAAC,QAAQ,CAAC;QACrC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,2GAA2G;QACxH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,SAAuB,EAAE,cAAuB;IAGzF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,mBAAmB,IAAI,CAAC,IAAK,CAAS,CAAC,iBAAiB,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EAAE,kFAAkF;QAC/F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,qCAAqC,CACnD,SAAuB,EACvB,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,GAAG,GAAI,CAAS,CAAC,kBAAkB,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,mCAAmC;QACzC,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EAAE,uGAAuG;QACpH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAMD,SAAgB,2BAA2B,CAAC,SAAuB,EAAE,cAAuB;IAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAErD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG7B,MAAM,aAAa,GACjB,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAE,CAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAG5E,IAAI,CAAC,aAAa;YAAE,OAAO,KAAK,CAAC;QAEjC,OAAO,aAAa,GAAG,aAAa,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,kGAAkG;QAC/G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,SAAuB,EAAE,cAAuB;IACxF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAGrD,IAAI,UAAU,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAE/E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,UAAU,CAAC,KAAK,EAAE,CAAC;QAEnB,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,UAAU,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,UAAU,GAAG,WAAW,CAAE,CAAS,CAAC,UAAU,CAAC,IAAI,WAAW,CAAE,CAAS,CAAC,eAAe,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,UAAU,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;YAC/B,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,uBAAuB;QAC9B,WAAW,EAAE,uFAAuF;QACpG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EAAE;YACP,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;SACjD;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,sBAAsB,CAAC,SAAuB,EAAE,cAAuB;IACrF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,IAAI,GAAI,CAAS,CAAC,oBAAoB,CAAC;QAC7C,OAAO,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,+FAA+F;QAC5G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAUD,SAAgB,oBAAoB,CAAC,SAAuB,EAAE,cAAuB;IAEnF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,OAAO,GAAG,KAAK,GAAG,QAAQ,CAAC;IAGjC,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/C,MAAM,GAAG,GAAI,CAAS,CAAC,kBAAkB,CAAC;QAC1C,OAAO,GAAG,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC,MAAM,CAAC;IAGV,IAAI,mBAAmB,GAAG,KAAK,CAAC;IAChC,IAAI,oBAAoB,GAAG,KAAK,CAAC;IACjC,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG7B,MAAM,GAAG,GAAI,CAAS,CAAC,kBAAkB,CAAC;QAC1C,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QAE9C,MAAM,IAAI,GAAG,CAA4B,CAAC;QAI1C,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC;QACzC,MAAM,gBAAgB,GAAG,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAG7D,MAAM,gBAAgB,GAAG,CAAC,GAAY,EAAW,EAAE;YACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAC;YAClE,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;QAGF,IAAI,gBAAgB,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACvE,mBAAmB,GAAG,IAAI,CAAC;QAC7B,CAAC;QAED,MAAM,aAAa,GAAG,gBAAgB,CAAC,UAAU,CAAC,IAAI,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACzF,IAAI,aAAa;YAAE,cAAc,EAAE,CAAC;QAGpC,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,iBAAiB,GAAG,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAGhE,IAAI,gBAAgB,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,CAAC;YACzE,oBAAoB,GAAG,IAAI,CAAC;QAC9B,CAAC;QAED,MAAM,cAAc,GAAG,gBAAgB,CAAC,WAAW,CAAC,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QAC5F,IAAI,cAAc;YAAE,eAAe,EAAE,CAAC;QAGtC,OAAO,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC;IAC3C,CAAC,CAAC,CAAC;IAGH,MAAM,cAAc,GAAG,mBAAmB,IAAI,oBAAoB,CAAC;IACnE,MAAM,iBAAiB,GAAG,OAAO,GAAG,iBAAiB,CAAC;IAEtD,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;QAC/C,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,kBAAkB;QACvF,WAAW,EAAE,CAAC,cAAc;YAC1B,CAAC,CAAC,8HAA8H;YAChI,CAAC,CAAC,0FAA0F;QAC9F,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EAAE;YACP,KAAK,EAAE;gBACL,KAAK;gBACL,OAAO;gBACP,QAAQ;gBACR,iBAAiB;gBACjB,iBAAiB;gBACjB,cAAc;gBACd,eAAe;gBACf,WAAW,EAAE,QAAQ,CAAC,MAAM;gBAC5B,cAAc;gBACd,mBAAmB;gBACnB,oBAAoB;aACrB;YACD,cAAc,EAAE,CAAC,cAAc;gBAC7B,CAAC,CAAC,sFAAsF;gBACxF,CAAC,CAAC,6CAA6C;SAClD;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,sBAAsB,CAAC,SAAuB,EAAE,cAAuB;IAGrF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,cAAc,IAAI,CAAC,IAAK,CAAS,CAAC,YAAY,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EAAE,yGAAyG;QACtH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,gCAAgC,CAAC,SAAuB,EAAE,cAAuB;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,aAAa,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAGrD,MAAM,UAAU,GAeZ,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAEnF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACd,UAAU,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QAGD,MAAM,cAAc,GAAI,CAAS,CAAC,WAAW,CAAC;QAC9C,MAAM,eAAe,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QAGpD,IAAI,UAAU,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC1B,IAAI,EAAE,CAAC,CAAC,cAAc,IAAI,SAAS;gBACnC,GAAG,EAAE,cAAc;gBACnB,OAAO,EAAE,OAAO,cAAc;gBAC9B,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;gBAC9C,MAAM,EAAE,eAAe;gBACvB,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;gBACvE,WAAW,EAAG,CAAS,CAAC,WAAW;aACpC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,eAAe,EAAE,CAAC;YACrB,UAAU,CAAC,aAAa,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,eAAe,GAAG,aAAa,EAAE,CAAC;YACpC,UAAU,CAAC,GAAG,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,UAAU,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,sFAAsF;QACnG,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EAAE;YACP,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;YAChD,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;SACrC;KACF,CAAC;AACJ,CAAC;AAWD,SAAgB,qBAAqB,CAAC,SAAuB,EAAE,cAAuB;IACpF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAGtC,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;QAInC,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;QAEnE,OAAO,oBAAoB,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,2EAA2E;YAC3E,yEAAyE;QAC3E,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,SAAuB,EAAE,cAAuB;IAC3F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,QAAQ,GAAI,CAAS,CAAC,+BAA+B,CAAC,CAAC;QAC7D,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAE/C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,+FAA+F;QAC5G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,kCAAkC,CAAC,SAAuB,EAAE,cAAuB;IACjG,MAAM,iBAAiB,GAAG;QACxB,sBAAsB;QACtB,oCAAoC;QACpC,gBAAgB;KACjB,CAAC;IAEF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,OAAO,GAAI,CAAS,CAAC,WAAW,CAAC;QACvC,MAAM,WAAW,GAAG,IAAA,mCAAgB,EAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAC/B,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,gCAAgC;QACtC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EAAE,8FAA8F;QAC3G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,SAAuB,EAAE,cAAuB;IAC3F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QACtB,OAAO,gDAAgD,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,iGAAiG;QAC9G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CAAC,SAAuB,EAAE,cAAuB;IACvF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,MAAM,UAAU,GAAI,CAAS,CAAC,UAAU,CAAC;QACzC,OAAO,UAAU,KAAK,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,wGAAwG;QACrH,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,SAAgB,gCAAgC,CAAC,SAAuB,EAAE,cAAuB;IAG/F,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,OAAO,oBAAoB,IAAI,CAAC,IAAK,CAAS,CAAC,kBAAkB,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,8FAA8F;QAC3G,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAKD,MAAM,oBAAoB,GAAG;IAC3B;QACE,OAAO,EAAE,aAAa;QACtB,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,UAAmB;QAC7B,MAAM,EAAE,YAAY;KACrB;IACD;QACE,OAAO,EAAE,cAAc;QACvB,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,UAAmB;QAC7B,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,MAAe;QACzB,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,4BAA4B;QAClC,QAAQ,EAAE,MAAe;QACzB,MAAM,EAAE,eAAe;KACxB;CACF,CAAC;AAMF,SAAgB,wBAAwB,CACtC,SAAuB,EACvB,cAAuB;IAEvB,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QACtE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAC/C,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChC,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,IAAI;YACJ,QAAQ;YACR,QAAQ,EAAE,WAAoB;YAC9B,KAAK,EAAE,gBAAgB,MAAM,EAAE;YAC/B,WAAW,EAAE,qBAAqB,MAAM,2HAA2H;YACnK,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC;IACJ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;AAChC,CAAC;AAQD,SAAgB,2BAA2B,CACzC,SAAuB,EACvB,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG7B,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAE,CAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAGhG,OAAO,CAAC,aAAa,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,4KAA4K;QAC9K,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAOD,SAAgB,wBAAwB,CACtC,SAAuB,EACvB,cAAuB;IAEvB,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,IAAI,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAG5B,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,WAAW,CAAE,CAAS,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAChG,OAAO,CAAC,aAAa,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,2JAA2J;QAC7J,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;KACpF,CAAC;AACJ,CAAC;AAQD,SAAgB,iBAAiB,CAAC,SAAuB,EAAE,cAAuB;IAChF,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3H,MAAM,IAAI,GACR,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YACtD,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAE/C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAGxB,MAAM,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC;QAEtE,OAAO,CAAC,QAAQ,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,gDAAgD;QACvD,WAAW,EACT,kIAAkI;QACpI,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,qGAAqG;gBACvG,KAAK,EAAE;oBACL,oDAAoD;oBACpD,sCAAsC;oBACtC,iDAAiD;iBAClD;aACF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,0BAA0B,CAAC,SAAuB,EAAE,cAAuB;IACzF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAwB,CAAC;IAG/C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,SAAS;QAE5C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,aAAa,GAAI,GAAc,CAAC,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,aAAa,CAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAGD,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAc,CAAC;IACjD,MAAM,aAAa,GAA2C,EAAE,CAAC;IAEjE,KAAK,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,aAAa,CAAC,IAAI,CAAC;gBACjB,GAAG;gBACH,SAAS,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;YACH,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,yGAAyG;QAC3G,KAAK,EAAE,kBAAkB,CAAC,IAAI;QAC9B,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACzG,OAAO,EACL,aAAa,CAAC,MAAM,GAAG,CAAC;YACtB,CAAC,CAAC;gBACE,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACzC,eAAe,EAAE,aAAa,CAAC,MAAM;gBACrC,cAAc,EACZ,qFAAqF;aACxF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,wBAAwB,CAAC,SAAuB,EAAE,cAAuB;IACvF,MAAM,cAAc,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzF,MAAM,gBAAgB,GAAG,CAAC,SAAS,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,QAAQ,GACZ,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YAC1D,CAAC,EAAE,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEnD,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAG5B,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAO7B,MAAM,OAAO,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7H,MAAM,WAAW,GACf,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC;YACjC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC9B,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAErC,OAAO,WAAW,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,oCAAoC;QAC3C,WAAW,EACT,0IAA0I;QAC5I,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EACZ,yFAAyF;gBAC3F,KAAK,EAAE;oBACL,wCAAwC;oBACxC,iDAAiD;oBACjD,6CAA6C;iBAC9C;aACF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,2BAA2B,CAAC,SAAuB,EAAE,cAAuB;IAC1F,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;IAC3F,MAAM,qBAAqB,GAAG,CAAC,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IACzF,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAElF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAEtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAGhC,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,aAAa,GACjB,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;YACnE,CAAC,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAExD,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,0BAA0B;QACjC,WAAW,EACT,0HAA0H;QAC5H,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EACL,QAAQ,CAAC,MAAM,GAAG,CAAC;YACjB,CAAC,CAAC;gBACE,cAAc,EAAE,4EAA4E;gBAC5F,MAAM,EAAE,8EAA8E;aACvF;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAYD,SAAgB,yBAAyB,CACvC,SAAuB,EACvB,cAAuB;IAKvB,MAAM,uBAAuB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACrD,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC,WAAW,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAGvC,MAAM,gBAAgB,GAAI,CAA6B,CAAC,4BAA4B,CAAC,KAAK,SAAS,CAAC;QACpG,OAAO,QAAQ,IAAI,CAAC,gBAAgB,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,wBAAwB;QAC/B,WAAW,EACT,wDAAwD;YACxD,yEAAyE;QAC3E,KAAK,EAAE,uBAAuB,CAAC,MAAM;QACrC,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,IAAA,6CAA0B,EAAC,uBAAuB,CAAC;YACrD,CAAC,CAAC,SAAS;QACb,OAAO,EAAE;YACP,cAAc,EACZ,2EAA2E;YAC7E,IAAI,EAAE,uGAAuG;SAC9G;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,4BAA4B,CAC1C,SAAuB,EACvB,cAAuB;IAGvB,MAAM,gBAAgB,GAAG;QACvB,aAAa;QACb,eAAe;QACf,aAAa;QACb,cAAc;QACd,gBAAgB;KACjB,CAAC;IAGF,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACtC,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC7B,MAAM,EAAE,GAAG,IAAA,mCAAgB,EAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAG/C,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,IAAI,WAAW;YAAE,OAAO,IAAI,CAAC;QAG7B,MAAM,QAAQ,GAAI,CAA6B,CAAC,+BAA+B,CAAuB,CAAC;QACvG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAE3B,MAAM,UAAU,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;YAC3C,IAAI,UAAU,IAAI,QAAQ,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9C,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,yBAAyB;QAChC,WAAW,EACT,8EAA8E;YAC9E,oFAAoF;QACtF,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC,IAAA,6CAA0B,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACnF,OAAO,EAAE;YACP,cAAc,EACZ,oFAAoF;YACtF,SAAS,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC;SAC7C;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,8BAA8B,CAC5C,SAAuB,EACvB,cAAuB;IAGvB,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAE/E,OAAO;QACL,GAAG,kBAAkB;QACrB,2BAA2B,CAAC,SAAS,EAAE,cAAc,CAAC;QACtD,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC;QACnD,mCAAmC,CAAC,SAAS,EAAE,cAAc,CAAC;QAC9D,kBAAkB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC7C,0BAA0B,CAAC,SAAS,EAAE,cAAc,CAAC;QACrD,0BAA0B,CAAC,SAAS,EAAE,cAAc,CAAC;QACrD,qCAAqC,CAAC,SAAS,EAAE,cAAc,CAAC;QAChE,2BAA2B,CAAC,SAAS,EAAE,cAAc,CAAC;QACtD,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,sBAAsB,CAAC,SAAS,EAAE,cAAc,CAAC;QACjD,oBAAoB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC/C,sBAAsB,CAAC,SAAS,EAAE,cAAc,CAAC;QACjD,gCAAgC,CAAC,SAAS,EAAE,cAAc,CAAC;QAC3D,qBAAqB,CAAC,SAAS,EAAE,cAAc,CAAC;QAChD,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QACvD,kCAAkC,CAAC,SAAS,EAAE,cAAc,CAAC;QAC7D,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;QACvD,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC;QACnD,gCAAgC,CAAC,SAAS,EAAE,cAAc,CAAC;QAE3D,iBAAiB,CAAC,SAAS,EAAE,cAAc,CAAC;QAC5C,0BAA0B,CAAC,SAAS,EAAE,cAAc,CAAC;QACrD,wBAAwB,CAAC,SAAS,EAAE,cAAc,CAAC;QACnD,2BAA2B,CAAC,SAAS,EAAE,cAAc,CAAC;QAEtD,yBAAyB,CAAC,SAAS,EAAE,cAAc,CAAC;QACpD,4BAA4B,CAAC,SAAS,EAAE,cAAc,CAAC;KACxD,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAEnB,IAAI,OAAO,CAAC,KAAK,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAEnC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -0,0 +1,17 @@
|
|
|
1
|
+
import { Finding } from '../../../../types/finding.types';
|
|
2
|
+
import { ADGPO, GPOLink, GPOAclEntry } from '../../../../types/gpo.types';
|
|
3
|
+
export declare function detectGpoDangerousPermissions(gpos: ADGPO[], _links: GPOLink[], _includeDetails: boolean): Finding;
|
|
4
|
+
export declare function detectGpoLapsNotDeployed(gpos: ADGPO[], links: GPOLink[], _includeDetails: boolean): Finding;
|
|
5
|
+
export declare function detectGpoWeakPasswordPolicy(_gpos: ADGPO[], _links: GPOLink[], domainPasswordPolicy: {
|
|
6
|
+
minPasswordLength?: number;
|
|
7
|
+
} | null, includeDetails: boolean): Finding;
|
|
8
|
+
export declare function detectGpoUnlinked(gpos: ADGPO[], links: GPOLink[], includeDetails: boolean): Finding;
|
|
9
|
+
export declare function detectGpoDisabledButLinked(gpos: ADGPO[], links: GPOLink[], includeDetails: boolean): Finding;
|
|
10
|
+
export declare function detectGpoNoSecurityFiltering(gpos: ADGPO[], links: GPOLink[], gpoAcls: GPOAclEntry[], includeDetails: boolean): Finding;
|
|
11
|
+
export declare function detectGpoAuthenticatedUsersApply(gpos: ADGPO[], links: GPOLink[], gpoAcls: GPOAclEntry[], includeDetails: boolean): Finding;
|
|
12
|
+
export declare function detectGpoPasswordInSysvol(gpos: ADGPO[], _links: GPOLink[], includeDetails: boolean): Finding;
|
|
13
|
+
export declare function detectGpoOrphaned(gpos: ADGPO[], _links: GPOLink[], includeDetails: boolean): Finding;
|
|
14
|
+
export declare function detectGpoVulnerabilities(gpos: ADGPO[], links: GPOLink[], domainPasswordPolicy: {
|
|
15
|
+
minPasswordLength?: number;
|
|
16
|
+
} | null, includeDetails: boolean, gpoAcls?: GPOAclEntry[]): Finding[];
|
|
17
|
+
//# sourceMappingURL=gpo.detector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gpo.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/gpo.detector.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,OAAO,EACP,WAAW,EAIZ,MAAM,6BAA6B,CAAC;AAsBrC,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,KAAK,EAAE,EACb,MAAM,EAAE,OAAO,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,OAAO,CAmBT;AAKD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,eAAe,EAAE,OAAO,GACvB,OAAO,CA6BT;AAMD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,KAAK,EAAE,EACd,MAAM,EAAE,OAAO,EAAE,EACjB,oBAAoB,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC3D,cAAc,EAAE,OAAO,GACtB,OAAO,CAmBT;AAKD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,cAAc,EAAE,OAAO,GACtB,OAAO,CA2BT;AAKD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,cAAc,EAAE,OAAO,GACtB,OAAO,CAoBT;AAMD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,OAAO,EAAE,WAAW,EAAE,EACtB,cAAc,EAAE,OAAO,GACtB,OAAO,CAgET;AAMD,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,OAAO,EAAE,WAAW,EAAE,EACtB,cAAc,EAAE,OAAO,GACtB,OAAO,CAqDT;AAaD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,KAAK,EAAE,EACb,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA8CT;AAYD,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,KAAK,EAAE,EACb,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CAgCT;AAKD,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,KAAK,EAAE,EACb,KAAK,EAAE,OAAO,EAAE,EAChB,oBAAoB,EAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC3D,cAAc,EAAE,OAAO,EACvB,OAAO,GAAE,WAAW,EAAO,GAC1B,OAAO,EAAE,CAaX"}
|
|
@@ -0,0 +1,257 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.detectGpoDangerousPermissions = detectGpoDangerousPermissions;
|
|
4
|
+
exports.detectGpoLapsNotDeployed = detectGpoLapsNotDeployed;
|
|
5
|
+
exports.detectGpoWeakPasswordPolicy = detectGpoWeakPasswordPolicy;
|
|
6
|
+
exports.detectGpoUnlinked = detectGpoUnlinked;
|
|
7
|
+
exports.detectGpoDisabledButLinked = detectGpoDisabledButLinked;
|
|
8
|
+
exports.detectGpoNoSecurityFiltering = detectGpoNoSecurityFiltering;
|
|
9
|
+
exports.detectGpoAuthenticatedUsersApply = detectGpoAuthenticatedUsersApply;
|
|
10
|
+
exports.detectGpoPasswordInSysvol = detectGpoPasswordInSysvol;
|
|
11
|
+
exports.detectGpoOrphaned = detectGpoOrphaned;
|
|
12
|
+
exports.detectGpoVulnerabilities = detectGpoVulnerabilities;
|
|
13
|
+
const gpo_types_1 = require("../../../../types/gpo.types");
|
|
14
|
+
const SID_AUTHENTICATED_USERS = 'S-1-5-11';
|
|
15
|
+
const SID_EVERYONE = 'S-1-1-0';
|
|
16
|
+
const SID_DOMAIN_COMPUTERS = '-515';
|
|
17
|
+
const APPLY_GROUP_POLICY_RIGHT = 0x00000004;
|
|
18
|
+
function hasLapsCse(gpo) {
|
|
19
|
+
const extensions = gpo.gPCMachineExtensionNames || '';
|
|
20
|
+
return extensions.includes(gpo_types_1.LAPS_CSE_GUID) || extensions.includes(gpo_types_1.LAPS_LEGACY_CSE_GUID);
|
|
21
|
+
}
|
|
22
|
+
function detectGpoDangerousPermissions(gpos, _links, _includeDetails) {
|
|
23
|
+
return {
|
|
24
|
+
type: 'GPO_DANGEROUS_PERMISSIONS',
|
|
25
|
+
severity: 'high',
|
|
26
|
+
category: 'gpo',
|
|
27
|
+
title: 'GPO Permissions Review Required',
|
|
28
|
+
description: 'Group Policy Objects should be reviewed for overly permissive ACLs that allow non-administrators to modify GPO settings.',
|
|
29
|
+
count: 0,
|
|
30
|
+
affectedEntities: undefined,
|
|
31
|
+
details: {
|
|
32
|
+
note: 'Manual review of GPO ACLs recommended. Check for non-admin principals with write access.',
|
|
33
|
+
gposToReview: gpos.length,
|
|
34
|
+
},
|
|
35
|
+
};
|
|
36
|
+
}
|
|
37
|
+
function detectGpoLapsNotDeployed(gpos, links, _includeDetails) {
|
|
38
|
+
const lapsGpos = gpos.filter((gpo) => hasLapsCse(gpo));
|
|
39
|
+
const linkedLapsGpos = lapsGpos.filter((gpo) => links.some((link) => link.gpoGuid.toLowerCase() === gpo.cn.toLowerCase() && !link.disabled));
|
|
40
|
+
const noLapsDeployed = linkedLapsGpos.length === 0;
|
|
41
|
+
return {
|
|
42
|
+
type: 'GPO_LAPS_NOT_DEPLOYED',
|
|
43
|
+
severity: 'medium',
|
|
44
|
+
category: 'gpo',
|
|
45
|
+
title: 'LAPS Not Deployed via GPO',
|
|
46
|
+
description: 'No active Group Policy Object was found deploying LAPS (Local Administrator Password Solution). This leaves local admin passwords vulnerable to reuse attacks.',
|
|
47
|
+
count: noLapsDeployed ? 1 : 0,
|
|
48
|
+
affectedEntities: undefined,
|
|
49
|
+
details: {
|
|
50
|
+
lapsGposFound: lapsGpos.length,
|
|
51
|
+
linkedLapsGpos: linkedLapsGpos.length,
|
|
52
|
+
note: noLapsDeployed
|
|
53
|
+
? 'LAPS not deployed - local admin passwords are not being rotated.'
|
|
54
|
+
: 'LAPS is deployed via GPO.',
|
|
55
|
+
recommendation: noLapsDeployed
|
|
56
|
+
? 'Deploy LAPS via GPO to manage local administrator passwords.'
|
|
57
|
+
: undefined,
|
|
58
|
+
},
|
|
59
|
+
};
|
|
60
|
+
}
|
|
61
|
+
function detectGpoWeakPasswordPolicy(_gpos, _links, domainPasswordPolicy, includeDetails) {
|
|
62
|
+
const minLength = domainPasswordPolicy?.minPasswordLength ?? 0;
|
|
63
|
+
const isWeak = minLength < 12;
|
|
64
|
+
return {
|
|
65
|
+
type: 'GPO_WEAK_PASSWORD_POLICY',
|
|
66
|
+
severity: 'medium',
|
|
67
|
+
category: 'gpo',
|
|
68
|
+
title: 'Weak Password Policy',
|
|
69
|
+
description: `Domain password policy requires only ${minLength} characters minimum. Microsoft recommends at least 12 characters for standard accounts, 14+ for privileged accounts.`,
|
|
70
|
+
count: isWeak ? 1 : 0,
|
|
71
|
+
affectedEntities: includeDetails && isWeak ? ['Default Domain Policy'] : undefined,
|
|
72
|
+
details: isWeak
|
|
73
|
+
? {
|
|
74
|
+
currentMinLength: minLength,
|
|
75
|
+
recommendedMinLength: 12,
|
|
76
|
+
}
|
|
77
|
+
: undefined,
|
|
78
|
+
};
|
|
79
|
+
}
|
|
80
|
+
function detectGpoUnlinked(gpos, links, includeDetails) {
|
|
81
|
+
const linkedGuids = new Set(links.map((l) => l.gpoGuid.toLowerCase()));
|
|
82
|
+
const unlinkedGpos = gpos.filter((gpo) => !linkedGuids.has(gpo.cn.toLowerCase()));
|
|
83
|
+
const excludeGuids = [
|
|
84
|
+
'31B2F340-016D-11D2-945F-00C04FB984F9',
|
|
85
|
+
'6AC1786C-016F-11D2-945F-00C04FB984F9',
|
|
86
|
+
];
|
|
87
|
+
const relevantUnlinked = unlinkedGpos.filter((gpo) => !excludeGuids.some((guid) => gpo.cn.toUpperCase().includes(guid)));
|
|
88
|
+
return {
|
|
89
|
+
type: 'GPO_UNLINKED',
|
|
90
|
+
severity: 'low',
|
|
91
|
+
category: 'gpo',
|
|
92
|
+
title: 'Unlinked Group Policy Objects',
|
|
93
|
+
description: 'GPOs exist that are not linked to any OU, domain, or site. These may be orphaned or indicate incomplete deployment.',
|
|
94
|
+
count: relevantUnlinked.length,
|
|
95
|
+
affectedEntities: includeDetails
|
|
96
|
+
? relevantUnlinked.map((gpo) => gpo.displayName || gpo.cn)
|
|
97
|
+
: undefined,
|
|
98
|
+
};
|
|
99
|
+
}
|
|
100
|
+
function detectGpoDisabledButLinked(gpos, links, includeDetails) {
|
|
101
|
+
const disabledGpos = gpos.filter((gpo) => gpo.flags === gpo_types_1.GPO_FLAG_ALL_DISABLED);
|
|
102
|
+
const disabledButLinked = disabledGpos.filter((gpo) => links.some((link) => link.gpoGuid.toLowerCase() === gpo.cn.toLowerCase() && !link.disabled));
|
|
103
|
+
return {
|
|
104
|
+
type: 'GPO_DISABLED_BUT_LINKED',
|
|
105
|
+
severity: 'medium',
|
|
106
|
+
category: 'gpo',
|
|
107
|
+
title: 'Disabled GPO Still Linked',
|
|
108
|
+
description: 'GPOs are disabled (both user and computer settings) but remain linked. This may indicate configuration drift or incomplete changes.',
|
|
109
|
+
count: disabledButLinked.length,
|
|
110
|
+
affectedEntities: includeDetails
|
|
111
|
+
? disabledButLinked.map((gpo) => gpo.displayName || gpo.cn)
|
|
112
|
+
: undefined,
|
|
113
|
+
};
|
|
114
|
+
}
|
|
115
|
+
function detectGpoNoSecurityFiltering(gpos, links, gpoAcls, includeDetails) {
|
|
116
|
+
const linkedGuids = new Set(links.filter((l) => !l.disabled).map((l) => l.gpoGuid.toLowerCase()));
|
|
117
|
+
const noFiltering = [];
|
|
118
|
+
for (const gpo of gpos) {
|
|
119
|
+
if (!linkedGuids.has(gpo.cn.toLowerCase()))
|
|
120
|
+
continue;
|
|
121
|
+
const aclsForGpo = gpoAcls.filter((acl) => acl.gpoDn.toLowerCase() === gpo.dn.toLowerCase());
|
|
122
|
+
if (aclsForGpo.length === 0)
|
|
123
|
+
continue;
|
|
124
|
+
const hasUnrestrictedApply = aclsForGpo.some((acl) => (acl.trusteeSid === SID_AUTHENTICATED_USERS || acl.trusteeSid === SID_EVERYONE) &&
|
|
125
|
+
(acl.accessMask & APPLY_GROUP_POLICY_RIGHT) !== 0);
|
|
126
|
+
const hasSpecificFiltering = aclsForGpo.some((acl) => acl.trusteeSid !== SID_AUTHENTICATED_USERS &&
|
|
127
|
+
acl.trusteeSid !== SID_EVERYONE &&
|
|
128
|
+
!acl.trusteeSid.endsWith(SID_DOMAIN_COMPUTERS) &&
|
|
129
|
+
(acl.accessMask & APPLY_GROUP_POLICY_RIGHT) !== 0);
|
|
130
|
+
if (hasUnrestrictedApply && !hasSpecificFiltering) {
|
|
131
|
+
noFiltering.push(gpo);
|
|
132
|
+
}
|
|
133
|
+
}
|
|
134
|
+
return {
|
|
135
|
+
type: 'GPO_NO_SECURITY_FILTERING',
|
|
136
|
+
severity: 'medium',
|
|
137
|
+
category: 'gpo',
|
|
138
|
+
title: 'GPO Without Security Filtering',
|
|
139
|
+
description: 'GPOs that apply to all Authenticated Users or Everyone without specific security filtering. Consider restricting GPO application to specific groups.',
|
|
140
|
+
count: noFiltering.length,
|
|
141
|
+
affectedEntities: includeDetails
|
|
142
|
+
? noFiltering.map((gpo) => gpo.displayName || gpo.cn)
|
|
143
|
+
: undefined,
|
|
144
|
+
details: noFiltering.length > 0
|
|
145
|
+
? {
|
|
146
|
+
recommendation: 'Apply security filtering to restrict GPO application to specific groups.',
|
|
147
|
+
}
|
|
148
|
+
: undefined,
|
|
149
|
+
};
|
|
150
|
+
}
|
|
151
|
+
function detectGpoAuthenticatedUsersApply(gpos, links, gpoAcls, includeDetails) {
|
|
152
|
+
const linkedGuids = new Set(links.filter((l) => !l.disabled).map((l) => l.gpoGuid.toLowerCase()));
|
|
153
|
+
const authUsersApply = [];
|
|
154
|
+
for (const gpo of gpos) {
|
|
155
|
+
if (!linkedGuids.has(gpo.cn.toLowerCase()))
|
|
156
|
+
continue;
|
|
157
|
+
const aclsForGpo = gpoAcls.filter((acl) => acl.gpoDn.toLowerCase() === gpo.dn.toLowerCase());
|
|
158
|
+
if (aclsForGpo.length === 0)
|
|
159
|
+
continue;
|
|
160
|
+
const authUsersHasApply = aclsForGpo.some((acl) => acl.trusteeSid === SID_AUTHENTICATED_USERS &&
|
|
161
|
+
(acl.accessMask & APPLY_GROUP_POLICY_RIGHT) !== 0);
|
|
162
|
+
if (authUsersHasApply) {
|
|
163
|
+
authUsersApply.push(gpo);
|
|
164
|
+
}
|
|
165
|
+
}
|
|
166
|
+
return {
|
|
167
|
+
type: 'GPO_AUTHENTICATED_USERS_APPLY',
|
|
168
|
+
severity: 'medium',
|
|
169
|
+
category: 'gpo',
|
|
170
|
+
title: 'GPO Applies to All Authenticated Users',
|
|
171
|
+
description: 'GPOs with Authenticated Users granted the "Apply Group Policy" permission. This is the default but may be too broad for sensitive policies.',
|
|
172
|
+
count: authUsersApply.length,
|
|
173
|
+
affectedEntities: includeDetails
|
|
174
|
+
? authUsersApply.map((gpo) => gpo.displayName || gpo.cn)
|
|
175
|
+
: undefined,
|
|
176
|
+
details: authUsersApply.length > 0
|
|
177
|
+
? {
|
|
178
|
+
recommendation: 'Review if all GPOs should apply to all users. Consider using security filtering for sensitive policies.',
|
|
179
|
+
note: 'This is informational - Authenticated Users is the default.',
|
|
180
|
+
}
|
|
181
|
+
: undefined,
|
|
182
|
+
};
|
|
183
|
+
}
|
|
184
|
+
function detectGpoPasswordInSysvol(gpos, _links, includeDetails) {
|
|
185
|
+
const affected = gpos.filter((gpo) => {
|
|
186
|
+
const gpoName = (gpo.displayName || gpo.cn || '').toLowerCase();
|
|
187
|
+
const gpoPath = (gpo.gPCFileSysPath || '').toLowerCase();
|
|
188
|
+
const riskyPatterns = [
|
|
189
|
+
'password',
|
|
190
|
+
'credential',
|
|
191
|
+
'local admin',
|
|
192
|
+
'service account',
|
|
193
|
+
'scheduled task',
|
|
194
|
+
'drive map',
|
|
195
|
+
];
|
|
196
|
+
return riskyPatterns.some((pattern) => gpoName.includes(pattern) || gpoPath.includes(pattern));
|
|
197
|
+
});
|
|
198
|
+
return {
|
|
199
|
+
type: 'GPO_PASSWORD_IN_SYSVOL',
|
|
200
|
+
severity: 'critical',
|
|
201
|
+
category: 'gpo',
|
|
202
|
+
title: 'Potential Passwords in GPO SYSVOL',
|
|
203
|
+
description: 'GPOs that may contain cleartext passwords in SYSVOL (cPassword vulnerability MS14-025). ' +
|
|
204
|
+
'Group Policy Preferences stored passwords that can be easily decrypted.',
|
|
205
|
+
count: affected.length,
|
|
206
|
+
affectedEntities: includeDetails
|
|
207
|
+
? affected.map((g) => g.displayName || g.cn || g.dn)
|
|
208
|
+
: undefined,
|
|
209
|
+
details: {
|
|
210
|
+
note: affected.length > 0
|
|
211
|
+
? `Found ${affected.length} GPO(s) with names suggesting password storage. Manual SYSVOL scan required.`
|
|
212
|
+
: 'No GPOs with suspicious names found. Manual SYSVOL scan still recommended.',
|
|
213
|
+
recommendation: 'Scan SYSVOL for Groups.xml, Services.xml, ScheduledTasks.xml, DataSources.xml containing cpassword. ' +
|
|
214
|
+
'Use tools like Get-GPPPassword or gpp-decrypt.',
|
|
215
|
+
reference: 'MS14-025',
|
|
216
|
+
gposScanned: gpos.length,
|
|
217
|
+
},
|
|
218
|
+
};
|
|
219
|
+
}
|
|
220
|
+
function detectGpoOrphaned(gpos, _links, includeDetails) {
|
|
221
|
+
const affected = gpos.filter((gpo) => {
|
|
222
|
+
const hasSysvolPath = gpo.gPCFileSysPath && gpo.gPCFileSysPath.length > 0;
|
|
223
|
+
const hasVersion = gpo.versionNumber !== undefined && gpo.versionNumber > 0;
|
|
224
|
+
const hasName = gpo.displayName || gpo.cn;
|
|
225
|
+
return !hasSysvolPath || !hasVersion || !hasName;
|
|
226
|
+
});
|
|
227
|
+
return {
|
|
228
|
+
type: 'GPO_ORPHANED',
|
|
229
|
+
severity: 'medium',
|
|
230
|
+
category: 'gpo',
|
|
231
|
+
title: 'Potentially Orphaned GPOs',
|
|
232
|
+
description: 'GPOs that may be orphaned (missing SYSVOL content or AD object). ' +
|
|
233
|
+
'Orphaned GPOs can cause processing errors and may indicate tampering.',
|
|
234
|
+
count: affected.length,
|
|
235
|
+
affectedEntities: includeDetails
|
|
236
|
+
? affected.map((g) => g.displayName || g.cn || g.dn)
|
|
237
|
+
: undefined,
|
|
238
|
+
details: {
|
|
239
|
+
recommendation: 'Compare AD GPOs with SYSVOL folders. Use gpotool.exe or Get-GPO to identify orphans. ' +
|
|
240
|
+
'Delete orphaned GPOs after verification.',
|
|
241
|
+
},
|
|
242
|
+
};
|
|
243
|
+
}
|
|
244
|
+
function detectGpoVulnerabilities(gpos, links, domainPasswordPolicy, includeDetails, gpoAcls = []) {
|
|
245
|
+
return [
|
|
246
|
+
detectGpoDangerousPermissions(gpos, links, includeDetails),
|
|
247
|
+
detectGpoLapsNotDeployed(gpos, links, includeDetails),
|
|
248
|
+
detectGpoWeakPasswordPolicy(gpos, links, domainPasswordPolicy, includeDetails),
|
|
249
|
+
detectGpoUnlinked(gpos, links, includeDetails),
|
|
250
|
+
detectGpoDisabledButLinked(gpos, links, includeDetails),
|
|
251
|
+
detectGpoNoSecurityFiltering(gpos, links, gpoAcls, includeDetails),
|
|
252
|
+
detectGpoAuthenticatedUsersApply(gpos, links, gpoAcls, includeDetails),
|
|
253
|
+
detectGpoPasswordInSysvol(gpos, links, includeDetails),
|
|
254
|
+
detectGpoOrphaned(gpos, links, includeDetails),
|
|
255
|
+
].filter((finding) => finding.count > 0 || finding.details?.['note']);
|
|
256
|
+
}
|
|
257
|
+
//# sourceMappingURL=gpo.detector.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"gpo.detector.js","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/gpo.detector.ts"],"names":[],"mappings":";;AAsDA,sEAuBC;AAKD,4DAiCC;AAMD,kEAwBC;AAKD,8CA+BC;AAKD,gEAwBC;AAMD,oEAqEC;AAMD,4EA0DC;AAaD,8DAkDC;AAYD,8CAoCC;AAKD,4DAmBC;AA3cD,2DAOqC;AAGrC,MAAM,uBAAuB,GAAG,UAAU,CAAC;AAC3C,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAGpC,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAK5C,SAAS,UAAU,CAAC,GAAU;IAC5B,MAAM,UAAU,GAAG,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,yBAAa,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,gCAAoB,CAAC,CAAC;AACzF,CAAC;AAMD,SAAgB,6BAA6B,CAC3C,IAAa,EACb,MAAiB,EACjB,eAAwB;IAMxB,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,MAAM;QAChB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,iCAAiC;QACxC,WAAW,EACT,0HAA0H;QAC5H,KAAK,EAAE,CAAC;QACR,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE;YACP,IAAI,EAAE,0FAA0F;YAChG,YAAY,EAAE,IAAI,CAAC,MAAM;SAC1B;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CACtC,IAAa,EACb,KAAgB,EAChB,eAAwB;IAGxB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7C,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC5F,CAAC;IAEF,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;IAEnD,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,gKAAgK;QAClK,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,gBAAgB,EAAE,SAAS;QAC3B,OAAO,EAAE;YACP,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,cAAc,EAAE,cAAc,CAAC,MAAM;YACrC,IAAI,EAAE,cAAc;gBAClB,CAAC,CAAC,kEAAkE;gBACpE,CAAC,CAAC,2BAA2B;YAC/B,cAAc,EAAE,cAAc;gBAC5B,CAAC,CAAC,8DAA8D;gBAChE,CAAC,CAAC,SAAS;SACd;KACF,CAAC;AACJ,CAAC;AAMD,SAAgB,2BAA2B,CACzC,KAAc,EACd,MAAiB,EACjB,oBAA2D,EAC3D,cAAuB;IAEvB,MAAM,SAAS,GAAG,oBAAoB,EAAE,iBAAiB,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,SAAS,GAAG,EAAE,CAAC;IAE9B,OAAO;QACL,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,sBAAsB;QAC7B,WAAW,EAAE,wCAAwC,SAAS,sHAAsH;QACpL,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,gBAAgB,EAAE,cAAc,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,SAAS;QAClF,OAAO,EAAE,MAAM;YACb,CAAC,CAAC;gBACE,gBAAgB,EAAE,SAAS;gBAC3B,oBAAoB,EAAE,EAAE;aACzB;YACH,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAKD,SAAgB,iBAAiB,CAC/B,IAAa,EACb,KAAgB,EAChB,cAAuB;IAGvB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAGlF,MAAM,YAAY,GAAG;QACnB,sCAAsC;QACtC,sCAAsC;KACvC,CAAC;IAEF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAC3E,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,+BAA+B;QACtC,WAAW,EACT,qHAAqH;QACvH,KAAK,EAAE,gBAAgB,CAAC,MAAM;QAC9B,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1D,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CACxC,IAAa,EACb,KAAgB,EAChB,cAAuB;IAGvB,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,iCAAqB,CAAC,CAAC;IAE/E,MAAM,iBAAiB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CACpD,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC5F,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,qIAAqI;QACvI,KAAK,EAAE,iBAAiB,CAAC,MAAM;QAC/B,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;YAC3D,CAAC,CAAC,SAAS;KACd,CAAC;AACJ,CAAC;AAMD,SAAgB,4BAA4B,CAC1C,IAAa,EACb,KAAgB,EAChB,OAAsB,EACtB,cAAuB;IAGvB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CACrE,CAAC;IAKF,MAAM,WAAW,GAAY,EAAE,CAAC;IAEhC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAGrD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAC1D,CAAC;QAGF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAGtC,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,CAC1C,CAAC,GAAG,EAAE,EAAE,CACN,CAAC,GAAG,CAAC,UAAU,KAAK,uBAAuB,IAAI,GAAG,CAAC,UAAU,KAAK,YAAY,CAAC;YAC/E,CAAC,GAAG,CAAC,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CACpD,CAAC;QAGF,MAAM,oBAAoB,GAAG,UAAU,CAAC,IAAI,CAC1C,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,UAAU,KAAK,uBAAuB;YAC1C,GAAG,CAAC,UAAU,KAAK,YAAY;YAC/B,CAAC,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC;YAC9C,CAAC,GAAG,CAAC,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CACpD,CAAC;QAGF,IAAI,oBAAoB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAClD,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,2BAA2B;QACjC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,gCAAgC;QACvC,WAAW,EACT,sJAAsJ;QACxJ,KAAK,EAAE,WAAW,CAAC,MAAM;QACzB,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;YACrD,CAAC,CAAC,SAAS;QACb,OAAO,EACL,WAAW,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC;gBACE,cAAc,EACZ,0EAA0E;aAC7E;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAMD,SAAgB,gCAAgC,CAC9C,IAAa,EACb,KAAgB,EAChB,OAAsB,EACtB,cAAuB;IAGvB,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CACrE,CAAC;IAGF,MAAM,cAAc,GAAY,EAAE,CAAC;IAEnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QAEvB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAGrD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,WAAW,EAAE,CAC1D,CAAC;QAGF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAGtC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CACvC,CAAC,GAAG,EAAE,EAAE,CACN,GAAG,CAAC,UAAU,KAAK,uBAAuB;YAC1C,CAAC,GAAG,CAAC,UAAU,GAAG,wBAAwB,CAAC,KAAK,CAAC,CACpD,CAAC;QAEF,IAAI,iBAAiB,EAAE,CAAC;YACtB,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,+BAA+B;QACrC,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,wCAAwC;QAC/C,WAAW,EACT,6IAA6I;QAC/I,KAAK,EAAE,cAAc,CAAC,MAAM;QAC5B,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;YACxD,CAAC,CAAC,SAAS;QACb,OAAO,EACL,cAAc,CAAC,MAAM,GAAG,CAAC;YACvB,CAAC,CAAC;gBACE,cAAc,EACZ,yGAAyG;gBAC3G,IAAI,EAAE,6DAA6D;aACpE;YACH,CAAC,CAAC,SAAS;KAChB,CAAC;AACJ,CAAC;AAaD,SAAgB,yBAAyB,CACvC,IAAa,EACb,MAAiB,EACjB,cAAuB;IAKvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChE,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAGzD,MAAM,aAAa,GAAG;YACpB,UAAU;YACV,YAAY;YACZ,aAAa;YACb,iBAAiB;YACjB,gBAAgB;YAChB,WAAW;SACZ,CAAC;QAEF,OAAO,aAAa,CAAC,IAAI,CACvB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,mCAAmC;QAC1C,WAAW,EACT,0FAA0F;YAC1F,yEAAyE;QAC3E,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,CAAC,CAAC,SAAS;QACb,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACvB,CAAC,CAAC,SAAS,QAAQ,CAAC,MAAM,8EAA8E;gBACxG,CAAC,CAAC,4EAA4E;YAChF,cAAc,EACZ,sGAAsG;gBACtG,gDAAgD;YAClD,SAAS,EAAE,UAAU;YACrB,WAAW,EAAE,IAAI,CAAC,MAAM;SACzB;KACF,CAAC;AACJ,CAAC;AAYD,SAAgB,iBAAiB,CAC/B,IAAa,EACb,MAAiB,EACjB,cAAuB;IAIvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;QAEnC,MAAM,aAAa,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAE1E,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC;QAE5E,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;QAE1C,OAAO,CAAC,aAAa,IAAI,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,2BAA2B;QAClC,WAAW,EACT,mEAAmE;YACnE,uEAAuE;QACzE,KAAK,EAAE,QAAQ,CAAC,MAAM;QACtB,gBAAgB,EAAE,cAAc;YAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACpD,CAAC,CAAC,SAAS;QACb,OAAO,EAAE;YACP,cAAc,EACZ,uFAAuF;gBACvF,0CAA0C;SAC7C;KACF,CAAC;AACJ,CAAC;AAKD,SAAgB,wBAAwB,CACtC,IAAa,EACb,KAAgB,EAChB,oBAA2D,EAC3D,cAAuB,EACvB,UAAyB,EAAE;IAE3B,OAAO;QACL,6BAA6B,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;QAC1D,wBAAwB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;QACrD,2BAA2B,CAAC,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,cAAc,CAAC;QAC9E,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;QAC9C,0BAA0B,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;QACvD,4BAA4B,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC;QAClE,gCAAgC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC;QAEtE,yBAAyB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;QACtD,iBAAiB,CAAC,IAAI,EAAE,KAAK,EAAE,cAAc,CAAC;KAC/C,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC"}
|
|
@@ -0,0 +1,19 @@
|
|
|
1
|
+
import { ADUser, ADGroup } from '../../../../types/ad.types';
|
|
2
|
+
import { Finding } from '../../../../types/finding.types';
|
|
3
|
+
export declare function detectGpoModifyRights(users: ADUser[], includeDetails: boolean): Finding;
|
|
4
|
+
export declare function detectDnsAdminsMember(users: ADUser[], includeDetails: boolean): Finding;
|
|
5
|
+
export declare function detectPreWindows2000Access(users: ADUser[], includeDetails: boolean): Finding;
|
|
6
|
+
export declare function detectOversizedGroupCritical(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
7
|
+
export declare function detectOversizedGroupHigh(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
8
|
+
export declare function detectOversizedGroup(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
9
|
+
export declare function detectDangerousGroupNesting(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
10
|
+
export declare function detectGroupEmptyPrivileged(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
11
|
+
export declare function detectGroupCircularNesting(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
12
|
+
export declare function detectGroupExcessiveMembers(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
13
|
+
export declare function detectBuiltinModified(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
14
|
+
export declare function detectGroupEveryoneInPrivileged(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
15
|
+
export declare function detectGroupAuthenticatedUsersPrivileged(groups: ADGroup[], includeDetails: boolean): Finding;
|
|
16
|
+
export declare function detectGroupProtectedUsersEmpty(groups: ADGroup[], _includeDetails: boolean): Finding;
|
|
17
|
+
export declare function detectExcessivePrivilegedAccounts(users: ADUser[], groups: ADGroup[], includeDetails: boolean): Finding;
|
|
18
|
+
export declare function detectGroupsVulnerabilities(users: ADUser[], groups: ADGroup[], includeDetails: boolean): Finding[];
|
|
19
|
+
//# sourceMappingURL=groups.detector.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"groups.detector.d.ts","sourceRoot":"","sources":["../../../../../src/services/audit/detectors/ad/groups.detector.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,iCAAiC,CAAC;AAM1D,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAevF;AAKD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAevF;AAKD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAe5F;AAMD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAehG;AAKD,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAe5F;AAKD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAexF;AAKD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAoC/F;AAQD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CA4C9F;AAMD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAwD9F;AAMD,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAgC/F;AAMD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,OAAO,GAAG,OAAO,CAuDzF;AAYD,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA2CT;AAYD,wBAAgB,uCAAuC,CACrD,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA0CT;AAYD,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,OAAO,EAAE,EACjB,eAAe,EAAE,OAAO,GACvB,OAAO,CAgCT;AAOD,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,CA+ET;AAKD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,cAAc,EAAE,OAAO,GACtB,OAAO,EAAE,CAuBX"}
|