@etcsec-com/etc-collector 1.4.0

package/dist/types/finding.types.d.ts

@@ -0,0 +1,133 @@
+export interface AffectedUserEntity {
+    type: 'user';
+    dn: string;
+    sAMAccountName: string;
+    userPrincipalName: string | null;
+    displayName: string | null;
+    mail: string | null;
+    title: string | null;
+    department: string | null;
+    company: string | null;
+    manager: string | null;
+    physicalDeliveryOfficeName: string | null;
+    description: string | null;
+    employeeID: string | null;
+    telephoneNumber: string | null;
+    whenCreated: string | null;
+    whenChanged: string | null;
+    lastLogon: string | null;
+    pwdLastSet: string | null;
+    accountExpires: string | null;
+    badPwdCount: number;
+    lockoutTime: string | null;
+    adminCount: number;
+    memberOf: string[];
+    enabled: boolean;
+}
+export interface AffectedAzureUserEntity {
+    type: 'azureUser';
+    id: string;
+    userPrincipalName: string;
+    displayName: string | null;
+    mail: string | null;
+    givenName: string | null;
+    surname: string | null;
+    jobTitle: string | null;
+    department: string | null;
+    companyName: string | null;
+    manager: string | null;
+    officeLocation: string | null;
+    employeeId: string | null;
+    createdDateTime: string | null;
+    lastSignInDateTime: string | null;
+    lastPasswordChangeDateTime: string | null;
+    accountEnabled: boolean;
+    userType: string | null;
+    riskLevel: string | null;
+    riskState: string | null;
+    isMfaRegistered: boolean;
+    assignedLicenses: string[];
+    memberOf: string[];
+}
+export interface AffectedAppEntity {
+    id: string;
+    displayName: string;
+    type: 'application' | 'servicePrincipal';
+    appId: string | null;
+    signInAudience: string | null;
+    createdDateTime: string | null;
+    publisherDomain: string | null;
+    verifiedPublisher: boolean;
+    credentialCount: number;
+    oldestCredentialExpiry: string | null;
+}
+export interface AffectedGroupEntity {
+    id: string;
+    displayName: string;
+    type: 'group';
+    sAMAccountName: string | null;
+    groupType: string | null;
+    groupScope: string | null;
+    securityEnabled: boolean | null;
+    mailEnabled: boolean | null;
+    groupTypes: string[];
+    memberCount: number | null;
+    description: string | null;
+}
+export interface AffectedComputerEntity {
+    id: string;
+    displayName: string;
+    type: 'computer';
+    sAMAccountName: string;
+    dNSHostName: string | null;
+    operatingSystem: string | null;
+    operatingSystemVersion: string | null;
+    whenCreated: string | null;
+    whenChanged: string | null;
+    lastLogon: string | null;
+    pwdLastSet: string | null;
+    enabled: boolean;
+    userAccountControl: number;
+}
+export type Severity = 'critical' | 'high' | 'medium' | 'low';
+export type Category = 'passwords' | 'kerberos' | 'accounts' | 'groups' | 'computers' | 'advanced' | 'permissions' | 'config' | 'adcs' | 'gpo' | 'trusts' | 'attack-paths' | 'monitoring' | 'compliance' | 'network' | 'identity' | 'applications' | 'conditionalAccess' | 'privilegedAccess';
+export interface Finding {
+    type: string;
+    severity: Severity;
+    category: Category;
+    title: string;
+    description: string;
+    count: number;
+    totalInstances?: number;
+    affectedEntities?: (string | AffectedUserEntity | AffectedAzureUserEntity | AffectedAppEntity | AffectedGroupEntity | AffectedComputerEntity)[];
+    details?: Record<string, unknown>;
+}
+export interface FindingCounts {
+    critical: number;
+    high: number;
+    medium: number;
+    low: number;
+    total: number;
+}
+export interface CategoryCounts {
+    passwords: number;
+    kerberos: number;
+    accounts: number;
+    groups: number;
+    computers: number;
+    advanced: number;
+    permissions: number;
+    config: number;
+    adcs: number;
+    gpo: number;
+    trusts: number;
+    'attack-paths': number;
+    monitoring: number;
+    compliance: number;
+    network: number;
+    identity: number;
+    applications: number;
+    conditionalAccess: number;
+    privilegedAccess: number;
+}
+//# sourceMappingURL=finding.types.d.ts.map

package/dist/types/finding.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.types.d.ts","sourceRoot":"","sources":["../../src/types/finding.types.ts"],"names":[],"mappings":"AAWA,MAAM,WAAW,kBAAkB;IAEjC,IAAI,EAAE,MAAM,CAAC;IAGb,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAGpB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAG9B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;CAClB;AAMD,MAAM,WAAW,uBAAuB;IAEtC,IAAI,EAAE,WAAW,CAAC;IAGlB,EAAE,EAAE,MAAM,CAAC;IACX,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAGvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,0BAA0B,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1C,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,aAAa,GAAG,kBAAkB,CAAC;IAGzC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAG/B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAMD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,CAAC;IAGd,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,eAAe,EAAE,OAAO,GAAG,IAAI,CAAC;IAChC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,EAAE,CAAC;IAGrB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAMD,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,UAAU,CAAC;IAGjB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAG3B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAGtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAG1B,OAAO,EAAE,OAAO,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAKD,MAAM,MAAM,QAAQ,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;AAK9D,MAAM,MAAM,QAAQ,GAChB,WAAW,GACX,UAAU,GACV,UAAU,GACV,QAAQ,GACR,WAAW,GACX,UAAU,GACV,aAAa,GACb,QAAQ,GACR,MAAM,GACN,KAAK,GACL,QAAQ,GACR,cAAc,GACd,YAAY,GACZ,YAAY,GACZ,SAAS,GACT,UAAU,GACV,cAAc,GACd,mBAAmB,GACnB,kBAAkB,CAAC;AAKvB,MAAM,WAAW,OAAO;IAItB,IAAI,EAAE,MAAM,CAAC;IAKb,QAAQ,EAAE,QAAQ,CAAC;IAKnB,QAAQ,EAAE,QAAQ,CAAC;IAKnB,KAAK,EAAE,MAAM,CAAC;IAKd,WAAW,EAAE,MAAM,CAAC;IAMpB,KAAK,EAAE,MAAM,CAAC;IAOd,cAAc,CAAC,EAAE,MAAM,CAAC;IAMxB,gBAAgB,CAAC,EAAE,CACf,MAAM,GACN,kBAAkB,GAClB,uBAAuB,GACvB,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,CACzB,EAAE,CAAC;IAKJ,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAKD,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAKD,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B"}

package/dist/types/finding.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=finding.types.js.map

package/dist/types/finding.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finding.types.js","sourceRoot":"","sources":["../../src/types/finding.types.ts"],"names":[],"mappings":""}

package/dist/types/gpo.types.d.ts

@@ -0,0 +1,39 @@
+export interface ADGPO {
+    dn: string;
+    cn: string;
+    displayName?: string;
+    gPCFileSysPath?: string;
+    flags?: number;
+    versionNumber?: number;
+    nTSecurityDescriptor?: Buffer;
+    gPCMachineExtensionNames?: string;
+    gPCUserExtensionNames?: string;
+}
+export interface GPOLink {
+    gpoGuid: string;
+    gpoDn?: string;
+    linkedTo: string;
+    linkOrder?: number;
+    enforced: boolean;
+    disabled: boolean;
+}
+export interface GPOAclEntry {
+    gpoDn: string;
+    gpoName: string;
+    trustee: string;
+    trusteeSid: string;
+    accessMask: number;
+    aceType: number;
+}
+export declare const GPO_FLAG_USER_DISABLED = 1;
+export declare const GPO_FLAG_COMPUTER_DISABLED = 2;
+export declare const GPO_FLAG_ALL_DISABLED = 3;
+export declare const GPO_LINK_DISABLED = 1;
+export declare const GPO_LINK_ENFORCED = 2;
+export declare const LAPS_CSE_GUID = "{D76B9641-3288-4f75-942D-087DE603E3EA}";
+export declare const LAPS_LEGACY_CSE_GUID = "{169EBF44-942F-4C43-87CE-13C93996EBBE}";
+export declare const GPO_RIGHT_WRITE = 2;
+export declare const GPO_RIGHT_WRITE_DAC = 262144;
+export declare const GPO_RIGHT_WRITE_OWNER = 524288;
+export declare const GPO_RIGHT_GENERIC_WRITE = 1073741824;
+//# sourceMappingURL=gpo.types.d.ts.map

package/dist/types/gpo.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpo.types.d.ts","sourceRoot":"","sources":["../../src/types/gpo.types.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IAGxB,KAAK,CAAC,EAAE,MAAM,CAAC;IAGf,aAAa,CAAC,EAAE,MAAM,CAAC;IAGvB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAG9B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAEhC;AAKD,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAKD,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAGD,eAAO,MAAM,sBAAsB,IAAa,CAAC;AACjD,eAAO,MAAM,0BAA0B,IAAa,CAAC;AACrD,eAAO,MAAM,qBAAqB,IAAa,CAAC;AAGhD,eAAO,MAAM,iBAAiB,IAAa,CAAC;AAC5C,eAAO,MAAM,iBAAiB,IAAa,CAAC;AAG5C,eAAO,MAAM,aAAa,2CAA2C,CAAC;AACtE,eAAO,MAAM,oBAAoB,2CAA2C,CAAC;AAG7E,eAAO,MAAM,eAAe,IAAa,CAAC;AAC1C,eAAO,MAAM,mBAAmB,SAAa,CAAC;AAC9C,eAAO,MAAM,qBAAqB,SAAa,CAAC;AAChD,eAAO,MAAM,uBAAuB,aAAa,CAAC"}

package/dist/types/gpo.types.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GPO_RIGHT_GENERIC_WRITE = exports.GPO_RIGHT_WRITE_OWNER = exports.GPO_RIGHT_WRITE_DAC = exports.GPO_RIGHT_WRITE = exports.LAPS_LEGACY_CSE_GUID = exports.LAPS_CSE_GUID = exports.GPO_LINK_ENFORCED = exports.GPO_LINK_DISABLED = exports.GPO_FLAG_ALL_DISABLED = exports.GPO_FLAG_COMPUTER_DISABLED = exports.GPO_FLAG_USER_DISABLED = void 0;
+exports.GPO_FLAG_USER_DISABLED = 0x00000001;
+exports.GPO_FLAG_COMPUTER_DISABLED = 0x00000002;
+exports.GPO_FLAG_ALL_DISABLED = 0x00000003;
+exports.GPO_LINK_DISABLED = 0x00000001;
+exports.GPO_LINK_ENFORCED = 0x00000002;
+exports.LAPS_CSE_GUID = '{D76B9641-3288-4f75-942D-087DE603E3EA}';
+exports.LAPS_LEGACY_CSE_GUID = '{169EBF44-942F-4C43-87CE-13C93996EBBE}';
+exports.GPO_RIGHT_WRITE = 0x00000002;
+exports.GPO_RIGHT_WRITE_DAC = 0x00040000;
+exports.GPO_RIGHT_WRITE_OWNER = 0x00080000;
+exports.GPO_RIGHT_GENERIC_WRITE = 0x40000000;
+//# sourceMappingURL=gpo.types.js.map

package/dist/types/gpo.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpo.types.js","sourceRoot":"","sources":["../../src/types/gpo.types.ts"],"names":[],"mappings":";;;AAuDa,QAAA,sBAAsB,GAAG,UAAU,CAAC;AACpC,QAAA,0BAA0B,GAAG,UAAU,CAAC;AACxC,QAAA,qBAAqB,GAAG,UAAU,CAAC;AAGnC,QAAA,iBAAiB,GAAG,UAAU,CAAC;AAC/B,QAAA,iBAAiB,GAAG,UAAU,CAAC;AAG/B,QAAA,aAAa,GAAG,wCAAwC,CAAC;AACzD,QAAA,oBAAoB,GAAG,wCAAwC,CAAC;AAGhE,QAAA,eAAe,GAAG,UAAU,CAAC;AAC7B,QAAA,mBAAmB,GAAG,UAAU,CAAC;AACjC,QAAA,qBAAqB,GAAG,UAAU,CAAC;AACnC,QAAA,uBAAuB,GAAG,UAAU,CAAC"}

package/dist/types/token.types.d.ts

@@ -0,0 +1,26 @@
+export type TokenStatus = 'valid' | 'expired' | 'revoked' | 'max_uses_exceeded';
+export interface TokenPayload {
+    jti: string;
+    iat: number;
+    exp: number;
+    maxUses: number;
+    metadata?: Record<string, string>;
+}
+export interface TokenInfo {
+    jti: string;
+    createdAt: string;
+    expiresAt: string;
+    maxUses: number;
+    usedCount: number;
+    status: TokenStatus;
+    revoked: boolean;
+    revokedAt?: string;
+    revokedReason?: string;
+}
+export interface TokenUsage {
+    jti: string;
+    usedAt: string;
+    usedCount: number;
+    remainingUses: number;
+}
+//# sourceMappingURL=token.types.d.ts.map

package/dist/types/token.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.types.d.ts","sourceRoot":"","sources":["../../src/types/token.types.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,mBAAmB,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/types/token.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=token.types.js.map

package/dist/types/token.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.types.js","sourceRoot":"","sources":["../../src/types/token.types.ts"],"names":[],"mappings":""}

package/dist/types/trust.types.d.ts

@@ -0,0 +1,45 @@
+export interface ADTrustExtended {
+    name: string;
+    dn: string;
+    trustDirection: number;
+    direction: 'inbound' | 'outbound' | 'bidirectional';
+    trustType: number;
+    type: 'forest' | 'external' | 'realm' | 'shortcut' | 'parent-child';
+    trustAttributes: number;
+    sidFilteringEnabled: boolean;
+    selectiveAuthEnabled: boolean;
+    isTransitive: boolean;
+    flatName?: string;
+    trustPartner?: string;
+    supportedEncryptionTypes?: number;
+    whenCreated?: Date;
+    whenChanged?: Date;
+}
+export declare const TRUST_DIRECTION_INBOUND = 1;
+export declare const TRUST_DIRECTION_OUTBOUND = 2;
+export declare const TRUST_DIRECTION_BIDIRECTIONAL = 3;
+export declare const TRUST_TYPE_DOWNLEVEL = 1;
+export declare const TRUST_TYPE_UPLEVEL = 2;
+export declare const TRUST_TYPE_MIT = 3;
+export declare const TRUST_TYPE_DCE = 4;
+export declare const TRUST_ATTRIBUTE_NON_TRANSITIVE = 1;
+export declare const TRUST_ATTRIBUTE_UPLEVEL_ONLY = 2;
+export declare const TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = 4;
+export declare const TRUST_ATTRIBUTE_FOREST_TRANSITIVE = 8;
+export declare const TRUST_ATTRIBUTE_CROSS_ORGANIZATION = 16;
+export declare const TRUST_ATTRIBUTE_WITHIN_FOREST = 32;
+export declare const TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = 64;
+export declare const TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION = 128;
+export declare const TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION = 512;
+export declare const TRUST_ATTRIBUTE_PIM_TRUST = 1024;
+export declare function parseTrustDirection(direction: number): 'inbound' | 'outbound' | 'bidirectional';
+export declare function parseTrustType(type: number, attributes: number): 'forest' | 'external' | 'realm' | 'shortcut' | 'parent-child';
+export declare function isSidFilteringEnabled(attributes: number): boolean;
+export declare function isSelectiveAuthEnabled(attributes: number): boolean;
+export declare function isTrustTransitive(attributes: number): boolean;
+export declare function parseTrustAttributes(attributes: number): {
+    sidFilteringEnabled: boolean;
+    selectiveAuthEnabled: boolean;
+    isTransitive: boolean;
+};
+//# sourceMappingURL=trust.types.d.ts.map

package/dist/types/trust.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.types.d.ts","sourceRoot":"","sources":["../../src/types/trust.types.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IAGX,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,SAAS,GAAG,UAAU,GAAG,eAAe,CAAC;IAGpD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAAC;IAGpE,eAAe,EAAE,MAAM,CAAC;IAGxB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,OAAO,CAAC;IAGtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IAItB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAGlC,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,WAAW,CAAC,EAAE,IAAI,CAAC;CACpB;AAGD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AACzC,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAG/C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AACtC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,cAAc,IAAI,CAAC;AAGhC,eAAO,MAAM,8BAA8B,IAAa,CAAC;AACzD,eAAO,MAAM,4BAA4B,IAAa,CAAC;AACvD,eAAO,MAAM,kCAAkC,IAAa,CAAC;AAC7D,eAAO,MAAM,iCAAiC,IAAa,CAAC;AAC5D,eAAO,MAAM,kCAAkC,KAAa,CAAC;AAC7D,eAAO,MAAM,6BAA6B,KAAa,CAAC;AACxD,eAAO,MAAM,iCAAiC,KAAa,CAAC;AAC5D,eAAO,MAAM,mCAAmC,MAAa,CAAC;AAC9D,eAAO,MAAM,oDAAoD,MAAa,CAAC;AAC/E,eAAO,MAAM,yBAAyB,OAAa,CAAC;AAKpD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,eAAe,CAW/F;AAKD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,UAAU,GAAG,cAAc,CAmB9H;AAKD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEjE;AAKD,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAElE;AAKD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAE7D;AAKD,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG;IACxD,mBAAmB,EAAE,OAAO,CAAC;IAC7B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,YAAY,EAAE,OAAO,CAAC;CACvB,CAMA"}

package/dist/types/trust.types.js

@@ -0,0 +1,71 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TRUST_ATTRIBUTE_PIM_TRUST = exports.TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION = exports.TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION = exports.TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = exports.TRUST_ATTRIBUTE_WITHIN_FOREST = exports.TRUST_ATTRIBUTE_CROSS_ORGANIZATION = exports.TRUST_ATTRIBUTE_FOREST_TRANSITIVE = exports.TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = exports.TRUST_ATTRIBUTE_UPLEVEL_ONLY = exports.TRUST_ATTRIBUTE_NON_TRANSITIVE = exports.TRUST_TYPE_DCE = exports.TRUST_TYPE_MIT = exports.TRUST_TYPE_UPLEVEL = exports.TRUST_TYPE_DOWNLEVEL = exports.TRUST_DIRECTION_BIDIRECTIONAL = exports.TRUST_DIRECTION_OUTBOUND = exports.TRUST_DIRECTION_INBOUND = void 0;
+exports.parseTrustDirection = parseTrustDirection;
+exports.parseTrustType = parseTrustType;
+exports.isSidFilteringEnabled = isSidFilteringEnabled;
+exports.isSelectiveAuthEnabled = isSelectiveAuthEnabled;
+exports.isTrustTransitive = isTrustTransitive;
+exports.parseTrustAttributes = parseTrustAttributes;
+exports.TRUST_DIRECTION_INBOUND = 1;
+exports.TRUST_DIRECTION_OUTBOUND = 2;
+exports.TRUST_DIRECTION_BIDIRECTIONAL = 3;
+exports.TRUST_TYPE_DOWNLEVEL = 1;
+exports.TRUST_TYPE_UPLEVEL = 2;
+exports.TRUST_TYPE_MIT = 3;
+exports.TRUST_TYPE_DCE = 4;
+exports.TRUST_ATTRIBUTE_NON_TRANSITIVE = 0x00000001;
+exports.TRUST_ATTRIBUTE_UPLEVEL_ONLY = 0x00000002;
+exports.TRUST_ATTRIBUTE_QUARANTINED_DOMAIN = 0x00000004;
+exports.TRUST_ATTRIBUTE_FOREST_TRANSITIVE = 0x00000008;
+exports.TRUST_ATTRIBUTE_CROSS_ORGANIZATION = 0x00000010;
+exports.TRUST_ATTRIBUTE_WITHIN_FOREST = 0x00000020;
+exports.TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL = 0x00000040;
+exports.TRUST_ATTRIBUTE_USES_RC4_ENCRYPTION = 0x00000080;
+exports.TRUST_ATTRIBUTE_CROSS_ORGANIZATION_NO_TGT_DELEGATION = 0x00000200;
+exports.TRUST_ATTRIBUTE_PIM_TRUST = 0x00000400;
+function parseTrustDirection(direction) {
+    switch (direction) {
+        case exports.TRUST_DIRECTION_INBOUND:
+            return 'inbound';
+        case exports.TRUST_DIRECTION_OUTBOUND:
+            return 'outbound';
+        case exports.TRUST_DIRECTION_BIDIRECTIONAL:
+            return 'bidirectional';
+        default:
+            return 'inbound';
+    }
+}
+function parseTrustType(type, attributes) {
+    if ((attributes & exports.TRUST_ATTRIBUTE_FOREST_TRANSITIVE) !== 0) {
+        return 'forest';
+    }
+    if ((attributes & exports.TRUST_ATTRIBUTE_WITHIN_FOREST) !== 0) {
+        return 'parent-child';
+    }
+    switch (type) {
+        case exports.TRUST_TYPE_MIT:
+            return 'realm';
+        case exports.TRUST_TYPE_UPLEVEL:
+        case exports.TRUST_TYPE_DOWNLEVEL:
+        default:
+            return 'external';
+    }
+}
+function isSidFilteringEnabled(attributes) {
+    return (attributes & exports.TRUST_ATTRIBUTE_QUARANTINED_DOMAIN) !== 0;
+}
+function isSelectiveAuthEnabled(attributes) {
+    return (attributes & exports.TRUST_ATTRIBUTE_CROSS_ORGANIZATION) !== 0;
+}
+function isTrustTransitive(attributes) {
+    return (attributes & exports.TRUST_ATTRIBUTE_NON_TRANSITIVE) === 0;
+}
+function parseTrustAttributes(attributes) {
+    return {
+        sidFilteringEnabled: isSidFilteringEnabled(attributes),
+        selectiveAuthEnabled: isSelectiveAuthEnabled(attributes),
+        isTransitive: isTrustTransitive(attributes),
+    };
+}
+//# sourceMappingURL=trust.types.js.map

package/dist/types/trust.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.types.js","sourceRoot":"","sources":["../../src/types/trust.types.ts"],"names":[],"mappings":";;;AAoEA,kDAWC;AAKD,wCAmBC;AAKD,sDAEC;AAKD,wDAEC;AAKD,8CAEC;AAKD,oDAUC;AAhGY,QAAA,uBAAuB,GAAG,CAAC,CAAC;AAC5B,QAAA,wBAAwB,GAAG,CAAC,CAAC;AAC7B,QAAA,6BAA6B,GAAG,CAAC,CAAC;AAGlC,QAAA,oBAAoB,GAAG,CAAC,CAAC;AACzB,QAAA,kBAAkB,GAAG,CAAC,CAAC;AACvB,QAAA,cAAc,GAAG,CAAC,CAAC;AACnB,QAAA,cAAc,GAAG,CAAC,CAAC;AAGnB,QAAA,8BAA8B,GAAG,UAAU,CAAC;AAC5C,QAAA,4BAA4B,GAAG,UAAU,CAAC;AAC1C,QAAA,kCAAkC,GAAG,UAAU,CAAC;AAChD,QAAA,iCAAiC,GAAG,UAAU,CAAC;AAC/C,QAAA,kCAAkC,GAAG,UAAU,CAAC;AAChD,QAAA,6BAA6B,GAAG,UAAU,CAAC;AAC3C,QAAA,iCAAiC,GAAG,UAAU,CAAC;AAC/C,QAAA,mCAAmC,GAAG,UAAU,CAAC;AACjD,QAAA,oDAAoD,GAAG,UAAU,CAAC;AAClE,QAAA,yBAAyB,GAAG,UAAU,CAAC;AAKpD,SAAgB,mBAAmB,CAAC,SAAiB;IACnD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,+BAAuB;YAC1B,OAAO,SAAS,CAAC;QACnB,KAAK,gCAAwB;YAC3B,OAAO,UAAU,CAAC;QACpB,KAAK,qCAA6B;YAChC,OAAO,eAAe,CAAC;QACzB;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAKD,SAAgB,cAAc,CAAC,IAAY,EAAE,UAAkB;IAE7D,IAAI,CAAC,UAAU,GAAG,yCAAiC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,QAAQ,CAAC;IAClB,CAAC;IAGD,IAAI,CAAC,UAAU,GAAG,qCAA6B,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,sBAAc;YACjB,OAAO,OAAO,CAAC;QACjB,KAAK,0BAAkB,CAAC;QACxB,KAAK,4BAAoB,CAAC;QAC1B;YACE,OAAO,UAAU,CAAC;IACtB,CAAC;AACH,CAAC;AAKD,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,OAAO,CAAC,UAAU,GAAG,0CAAkC,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAKD,SAAgB,sBAAsB,CAAC,UAAkB;IACvD,OAAO,CAAC,UAAU,GAAG,0CAAkC,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAKD,SAAgB,iBAAiB,CAAC,UAAkB;IAClD,OAAO,CAAC,UAAU,GAAG,sCAA8B,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAKD,SAAgB,oBAAoB,CAAC,UAAkB;IAKrD,OAAO;QACL,mBAAmB,EAAE,qBAAqB,CAAC,UAAU,CAAC;QACtD,oBAAoB,EAAE,sBAAsB,CAAC,UAAU,CAAC;QACxD,YAAY,EAAE,iBAAiB,CAAC,UAAU,CAAC;KAC5C,CAAC;AACJ,CAAC"}

package/dist/utils/entity-converter.d.ts

@@ -0,0 +1,17 @@
+import { ADUser, ADGroup, ADComputer } from '../types/ad.types';
+import { AzureUser, AzureApp, AzureGroup } from '../types/azure.types';
+import { AffectedUserEntity, AffectedAzureUserEntity, AffectedAppEntity, AffectedGroupEntity, AffectedComputerEntity } from '../types/finding.types';
+export declare function ldapAttrToString(value: unknown): string;
+export declare function toAffectedUserEntity(user: ADUser): AffectedUserEntity;
+export declare function toAffectedUserEntities(users: ADUser[]): AffectedUserEntity[];
+export declare function toAffectedAzureUserEntity(user: AzureUser): AffectedAzureUserEntity;
+export declare function toAffectedAzureUserEntities(users: AzureUser[]): AffectedAzureUserEntity[];
+export declare function toAffectedAppEntity(app: AzureApp): AffectedAppEntity;
+export declare function toAffectedAppEntities(apps: AzureApp[]): AffectedAppEntity[];
+export declare function toAffectedADGroupEntity(group: ADGroup): AffectedGroupEntity;
+export declare function toAffectedADGroupEntities(groups: ADGroup[]): AffectedGroupEntity[];
+export declare function toAffectedAzureGroupEntity(group: AzureGroup): AffectedGroupEntity;
+export declare function toAffectedAzureGroupEntities(groups: AzureGroup[]): AffectedGroupEntity[];
+export declare function toAffectedComputerEntity(computer: ADComputer): AffectedComputerEntity;
+export declare function toAffectedComputerEntities(computers: ADComputer[]): AffectedComputerEntity[];
+//# sourceMappingURL=entity-converter.d.ts.map

package/dist/utils/entity-converter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-converter.d.ts","sourceRoot":"","sources":["../../src/utils/entity-converter.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EACL,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAWhC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKvD;AAoGD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,CA0CrE;AAKD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAE5E;AAyCD,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,SAAS,GAAG,uBAAuB,CAmClF;AAKD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,uBAAuB,EAAE,CAEzF;AA2BD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,QAAQ,GAAG,iBAAiB,CAoBpE;AAKD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,iBAAiB,EAAE,CAE3E;AA4BD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAsB3E;AAKD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,EAAE,CAElF;AAKD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,UAAU,GAAG,mBAAmB,CAoBjF;AAKD,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,EAAE,CAExF;AAOD,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,UAAU,GAAG,sBAAsB,CAiCrF;AAKD,wBAAgB,0BAA0B,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,sBAAsB,EAAE,CAE5F"}