@etcsec-com/etc-collector 1.4.0

package/dist/utils/entity-converter.js

@@ -0,0 +1,285 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ldapAttrToString = ldapAttrToString;
+exports.toAffectedUserEntity = toAffectedUserEntity;
+exports.toAffectedUserEntities = toAffectedUserEntities;
+exports.toAffectedAzureUserEntity = toAffectedAzureUserEntity;
+exports.toAffectedAzureUserEntities = toAffectedAzureUserEntities;
+exports.toAffectedAppEntity = toAffectedAppEntity;
+exports.toAffectedAppEntities = toAffectedAppEntities;
+exports.toAffectedADGroupEntity = toAffectedADGroupEntity;
+exports.toAffectedADGroupEntities = toAffectedADGroupEntities;
+exports.toAffectedAzureGroupEntity = toAffectedAzureGroupEntity;
+exports.toAffectedAzureGroupEntities = toAffectedAzureGroupEntities;
+exports.toAffectedComputerEntity = toAffectedComputerEntity;
+exports.toAffectedComputerEntities = toAffectedComputerEntities;
+const FILETIME_EPOCH_OFFSET = 11644473600000;
+function ldapAttrToString(value) {
+    if (typeof value === 'string')
+        return value;
+    if (Array.isArray(value) && value.length > 0)
+        return String(value[0]);
+    if (value === null || value === undefined)
+        return '';
+    return String(value);
+}
+function filetimeToIso(filetime) {
+    if (!filetime)
+        return null;
+    let filetimeNum;
+    if (typeof filetime === 'string') {
+        filetimeNum = parseInt(filetime, 10);
+    }
+    else {
+        filetimeNum = filetime;
+    }
+    if (filetimeNum === 0 || filetimeNum >= 9223372036854775807) {
+        return null;
+    }
+    const milliseconds = filetimeNum / 10000;
+    const unixTimestamp = milliseconds - FILETIME_EPOCH_OFFSET;
+    if (unixTimestamp < 0 || unixTimestamp > Date.now() + 100 * 365 * 24 * 60 * 60 * 1000) {
+        return null;
+    }
+    return new Date(unixTimestamp).toISOString();
+}
+function dateToIso(date) {
+    if (!date)
+        return null;
+    if (date instanceof Date) {
+        return date.toISOString();
+    }
+    if (typeof date === 'string') {
+        if (date.includes('T') || date.includes('Z')) {
+            return date;
+        }
+        const match = date.match(/^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})/);
+        if (match && match[1] && match[2] && match[3] && match[4] && match[5] && match[6]) {
+            return new Date(Date.UTC(parseInt(match[1]), parseInt(match[2]) - 1, parseInt(match[3]), parseInt(match[4]), parseInt(match[5]), parseInt(match[6]))).toISOString();
+        }
+    }
+    return null;
+}
+function strOrNull(value) {
+    if (value === undefined || value === null || value === '')
+        return null;
+    return String(value);
+}
+function numOrDefault(value, defaultVal) {
+    if (value === undefined || value === null)
+        return defaultVal;
+    const num = typeof value === 'number' ? value : parseInt(String(value), 10);
+    return isNaN(num) ? defaultVal : num;
+}
+function toStringArray(value) {
+    if (!value)
+        return [];
+    if (Array.isArray(value))
+        return value.map(String);
+    return [String(value)];
+}
+function toAffectedUserEntity(user) {
+    const uac = user.userAccountControl ?? 0;
+    const enabled = (uac & 0x2) === 0;
+    return {
+        type: 'user',
+        dn: user.dn,
+        sAMAccountName: user.sAMAccountName,
+        userPrincipalName: strOrNull(user.userPrincipalName),
+        displayName: strOrNull(user.displayName),
+        mail: strOrNull(user.mail),
+        title: strOrNull(user.title),
+        department: strOrNull(user.department),
+        company: strOrNull(user.company),
+        manager: strOrNull(user.manager),
+        physicalDeliveryOfficeName: strOrNull(user.physicalDeliveryOfficeName),
+        description: strOrNull(user.description),
+        employeeID: strOrNull(user.employeeID),
+        telephoneNumber: strOrNull(user.telephoneNumber),
+        whenCreated: dateToIso(user.whenCreated),
+        whenChanged: dateToIso(user.whenChanged),
+        lastLogon: user.lastLogon ? user.lastLogon.toISOString() : filetimeToIso(user['lastLogon']),
+        pwdLastSet: user.passwordLastSet
+            ? user.passwordLastSet.toISOString()
+            : filetimeToIso(user.pwdLastSet),
+        accountExpires: filetimeToIso(user.accountExpires),
+        badPwdCount: numOrDefault(user.badPwdCount, 0),
+        lockoutTime: filetimeToIso(user.lockoutTime),
+        adminCount: numOrDefault(user.adminCount, 0),
+        memberOf: toStringArray(user.memberOf),
+        enabled,
+    };
+}
+function toAffectedUserEntities(users) {
+    return users.map(toAffectedUserEntity);
+}
+function getAzureManagerStr(manager) {
+    if (!manager)
+        return null;
+    if (typeof manager === 'string')
+        return manager;
+    if (typeof manager === 'object') {
+        return manager.displayName || manager.id || null;
+    }
+    return null;
+}
+function getAzureLicenses(licenses) {
+    if (!licenses || !Array.isArray(licenses))
+        return [];
+    return licenses.map((l) => l.skuId || 'unknown').filter(Boolean);
+}
+function getAzureMemberOf(memberOf) {
+    if (!memberOf || !Array.isArray(memberOf))
+        return [];
+    return memberOf.map((m) => {
+        if (typeof m === 'string')
+            return m;
+        if (typeof m === 'object' && m) {
+            return m.displayName || m.id || '';
+        }
+        return '';
+    }).filter(Boolean);
+}
+function toAffectedAzureUserEntity(user) {
+    return {
+        type: 'azureUser',
+        id: user.id,
+        userPrincipalName: user.userPrincipalName,
+        displayName: strOrNull(user.displayName),
+        mail: strOrNull(user.mail),
+        givenName: strOrNull(user.givenName),
+        surname: strOrNull(user.surname),
+        jobTitle: strOrNull(user.jobTitle),
+        department: strOrNull(user.department),
+        companyName: strOrNull(user.companyName),
+        manager: getAzureManagerStr(user.manager),
+        officeLocation: strOrNull(user.officeLocation),
+        employeeId: strOrNull(user.employeeId),
+        createdDateTime: strOrNull(user.createdDateTime),
+        lastSignInDateTime: strOrNull(user.lastSignInDateTime),
+        lastPasswordChangeDateTime: strOrNull(user.lastPasswordChangeDateTime),
+        accountEnabled: user.accountEnabled,
+        userType: strOrNull(user.userType),
+        riskLevel: strOrNull(user.riskLevel),
+        riskState: strOrNull(user.riskState),
+        isMfaRegistered: user.isMfaRegistered === true || (user.strongAuthenticationMethods?.length ?? 0) > 0,
+        assignedLicenses: getAzureLicenses(user.assignedLicenses),
+        memberOf: getAzureMemberOf(user.memberOf),
+    };
+}
+function toAffectedAzureUserEntities(users) {
+    return users.map(toAffectedAzureUserEntity);
+}
+function getOldestCredentialExpiry(app) {
+    const credentials = [
+        ...(app.passwordCredentials || []),
+        ...(app.keyCredentials || []),
+    ];
+    if (credentials.length === 0)
+        return null;
+    const expiries = credentials
+        .map((c) => c.endDateTime)
+        .filter((d) => Boolean(d))
+        .map((d) => new Date(d).getTime())
+        .sort((a, b) => a - b);
+    return expiries.length > 0 ? new Date(expiries[0]).toISOString() : null;
+}
+function toAffectedAppEntity(app) {
+    const passwordCreds = app.passwordCredentials || [];
+    const keyCreds = app.keyCredentials || [];
+    return {
+        id: app.id,
+        displayName: app.displayName,
+        type: 'application',
+        appId: strOrNull(app.appId),
+        signInAudience: strOrNull(app.signInAudience),
+        createdDateTime: strOrNull(app.createdDateTime),
+        publisherDomain: strOrNull(app.publisherDomain),
+        verifiedPublisher: !!app.verifiedPublisher?.displayName,
+        credentialCount: passwordCreds.length + keyCreds.length,
+        oldestCredentialExpiry: getOldestCredentialExpiry(app),
+    };
+}
+function toAffectedAppEntities(apps) {
+    return apps.map(toAffectedAppEntity);
+}
+function getADGroupType(groupType) {
+    if (groupType === undefined)
+        return null;
+    return (groupType & 0x80000000) !== 0 ? 'Security' : 'Distribution';
+}
+function getADGroupScope(groupType) {
+    if (groupType === undefined)
+        return null;
+    if ((groupType & 0x8) !== 0)
+        return 'Universal';
+    if ((groupType & 0x4) !== 0)
+        return 'DomainLocal';
+    if ((groupType & 0x2) !== 0)
+        return 'Global';
+    return null;
+}
+function toAffectedADGroupEntity(group) {
+    const groupTypeNum = group.groupType;
+    return {
+        id: group.dn,
+        displayName: group.cn || group.displayName || group.sAMAccountName || group.dn,
+        type: 'group',
+        sAMAccountName: strOrNull(group.sAMAccountName),
+        groupType: getADGroupType(groupTypeNum),
+        groupScope: getADGroupScope(groupTypeNum),
+        securityEnabled: null,
+        mailEnabled: null,
+        groupTypes: [],
+        memberCount: Array.isArray(group.member) ? group.member.length : null,
+        description: strOrNull(group.description),
+    };
+}
+function toAffectedADGroupEntities(groups) {
+    return groups.map(toAffectedADGroupEntity);
+}
+function toAffectedAzureGroupEntity(group) {
+    return {
+        id: group.id,
+        displayName: group.displayName,
+        type: 'group',
+        sAMAccountName: null,
+        groupType: null,
+        groupScope: null,
+        securityEnabled: group.securityEnabled ?? null,
+        mailEnabled: group.mailEnabled ?? null,
+        groupTypes: group.groupTypes || [],
+        memberCount: group.memberCount ?? null,
+        description: strOrNull(group.description),
+    };
+}
+function toAffectedAzureGroupEntities(groups) {
+    return groups.map(toAffectedAzureGroupEntity);
+}
+function toAffectedComputerEntity(computer) {
+    const uac = computer.userAccountControl ?? 0;
+    const enabled = (uac & 0x2) === 0;
+    return {
+        id: computer.dn,
+        displayName: computer.cn || computer.sAMAccountName || computer.dn,
+        type: 'computer',
+        sAMAccountName: computer.sAMAccountName,
+        dNSHostName: strOrNull(computer.dNSHostName),
+        operatingSystem: strOrNull(computer.operatingSystem),
+        operatingSystemVersion: strOrNull(computer.operatingSystemVersion),
+        whenCreated: dateToIso(computer.whenCreated),
+        lastLogon: computer.lastLogon
+            ? computer.lastLogon.toISOString()
+            : filetimeToIso(computer['lastLogonTimestamp']),
+        pwdLastSet: computer.passwordLastSet
+            ? computer.passwordLastSet.toISOString()
+            : filetimeToIso(computer['pwdLastSet']),
+        enabled,
+        userAccountControl: uac,
+        whenChanged: dateToIso(computer.whenChanged),
+    };
+}
+function toAffectedComputerEntities(computers) {
+    return computers.map(toAffectedComputerEntity);
+}
+//# sourceMappingURL=entity-converter.js.map

package/dist/utils/entity-converter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entity-converter.js","sourceRoot":"","sources":["../../src/utils/entity-converter.ts"],"names":[],"mappings":";;AAyBA,4CAKC;AAoGD,oDA0CC;AAKD,wDAEC;AAyCD,8DAmCC;AAKD,kEAEC;AA2BD,kDAoBC;AAKD,sDAEC;AA4BD,0DAsBC;AAKD,8DAEC;AAKD,gEAoBC;AAKD,oEAEC;AAOD,4DAiCC;AAKD,gEAEC;AAjbD,MAAM,qBAAqB,GAAG,cAAc,CAAC;AAM7C,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAMD,SAAS,aAAa,CAAC,QAA4C;IACjE,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,WAAmB,CAAC;IACxB,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,WAAW,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,QAAQ,CAAC;IACzB,CAAC;IAGD,IAAI,WAAW,KAAK,CAAC,IAAI,WAAW,IAAI,mBAAmB,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC;IACd,CAAC;IAGD,MAAM,YAAY,GAAG,WAAW,GAAG,KAAK,CAAC;IAGzC,MAAM,aAAa,GAAG,YAAY,GAAG,qBAAqB,CAAC;IAG3D,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QACtF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;AAC/C,CAAC;AAKD,SAAS,SAAS,CAAC,IAAsC;IACvD,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,IAAI,IAAI,YAAY,IAAI,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;IAGD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QAGD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACxE,IAAI,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,OAAO,IAAI,IAAI,CACb,IAAI,CAAC,GAAG,CACN,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EACtB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAClB,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACnB,CACF,CAAC,WAAW,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACvE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAKD,SAAS,YAAY,CAAC,KAAc,EAAE,UAAkB;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC7D,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;AACvC,CAAC;AAKD,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzB,CAAC;AAKD,SAAgB,oBAAoB,CAAC,IAAY;IAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAElC,OAAO;QAEL,IAAI,EAAE,MAAM;QAGZ,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,iBAAiB,EAAE,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC;QACpD,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAG1B,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5B,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAChC,0BAA0B,EAAE,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC;QACtE,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;QAGhD,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,aAAa,CAAE,IAAY,CAAC,WAAW,CAAC,CAAC;QACpG,UAAU,EAAE,IAAI,CAAC,eAAe;YAC9B,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;YACpC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC;QAClC,cAAc,EAAE,aAAa,CAAC,IAAI,CAAC,cAAc,CAAC;QAGlD,WAAW,EAAE,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9C,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC;QAC5C,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5C,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtC,OAAO;KACR,CAAC;AACJ,CAAC;AAKD,SAAgB,sBAAsB,CAAC,KAAe;IACpD,OAAO,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AACzC,CAAC;AAOD,SAAS,kBAAkB,CAAC,OAA6B;IACvD,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,IAAI,IAAI,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAS,gBAAgB,CAAC,QAAuC;IAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAKD,SAAS,gBAAgB,CAAC,QAA+B;IACvD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACrD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAKD,SAAgB,yBAAyB,CAAC,IAAe;IACvD,OAAO;QAEL,IAAI,EAAE,WAAW;QAGjB,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAC1B,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;QAGhC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QACtC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC;QAC9C,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAGtC,eAAe,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;QAChD,kBAAkB,EAAE,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC;QACtD,0BAA0B,EAAE,SAAS,CAAC,IAAI,CAAC,0BAA0B,CAAC;QAGtE,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QACpC,eAAe,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,2BAA2B,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;QACrG,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACzD,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;KAC1C,CAAC;AACJ,CAAC;AAKD,SAAgB,2BAA2B,CAAC,KAAkB;IAC5D,OAAO,KAAK,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAC9C,CAAC;AAOD,SAAS,yBAAyB,CAAC,GAAa;IAC9C,MAAM,WAAW,GAAG;QAClB,GAAG,CAAE,GAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC;QAC3C,GAAG,CAAE,GAAW,CAAC,cAAc,IAAI,EAAE,CAAC;KACvC,CAAC;IAEF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,MAAM,QAAQ,GAAG,WAAW;SACzB,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,WAAiC,CAAC;SACpD,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACjC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAEzB,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAKD,SAAgB,mBAAmB,CAAC,GAAa;IAC/C,MAAM,aAAa,GAAI,GAAW,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAI,GAAW,CAAC,cAAc,IAAI,EAAE,CAAC;IAEnD,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,IAAI,EAAE,aAAa;QAGnB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3B,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC;QAC7C,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC;QAG/C,eAAe,EAAE,SAAS,CAAE,GAAW,CAAC,eAAe,CAAC;QACxD,iBAAiB,EAAE,CAAC,CAAE,GAAW,CAAC,iBAAiB,EAAE,WAAW;QAChE,eAAe,EAAE,aAAa,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QACvD,sBAAsB,EAAE,yBAAyB,CAAC,GAAG,CAAC;KACvD,CAAC;AACJ,CAAC;AAKD,SAAgB,qBAAqB,CAAC,IAAgB;IACpD,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AACvC,CAAC;AAOD,SAAS,cAAc,CAAC,SAA6B;IACnD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEzC,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;AACtE,CAAC;AAKD,SAAS,eAAe,CAAC,SAA6B;IACpD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEzC,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAChD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,CAAC;IAClD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC7C,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,SAAgB,uBAAuB,CAAC,KAAc;IACpD,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC;IAErC,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,EAAE;QAC9E,IAAI,EAAE,OAAO;QAGb,cAAc,EAAE,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC;QAC/C,SAAS,EAAE,cAAc,CAAC,YAAY,CAAC;QACvC,UAAU,EAAE,eAAe,CAAC,YAAY,CAAC;QAGzC,eAAe,EAAE,IAAI;QACrB,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,EAAE;QAGd,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACrE,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC;KAC1C,CAAC;AACJ,CAAC;AAKD,SAAgB,yBAAyB,CAAC,MAAiB;IACzD,OAAO,MAAM,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;AAC7C,CAAC;AAKD,SAAgB,0BAA0B,CAAC,KAAiB;IAC1D,OAAO;QACL,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,IAAI,EAAE,OAAO;QAGb,cAAc,EAAE,IAAI;QACpB,SAAS,EAAE,IAAI;QACf,UAAU,EAAE,IAAI;QAGhB,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;QAC9C,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,IAAI;QACtC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;QAGlC,WAAW,EAAG,KAAa,CAAC,WAAW,IAAI,IAAI;QAC/C,WAAW,EAAE,SAAS,CAAE,KAAa,CAAC,WAAW,CAAC;KACnD,CAAC;AACJ,CAAC;AAKD,SAAgB,4BAA4B,CAAC,MAAoB;IAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;AAChD,CAAC;AAOD,SAAgB,wBAAwB,CAAC,QAAoB;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,kBAAkB,IAAI,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IAElC,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,WAAW,EAAE,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,cAAc,IAAI,QAAQ,CAAC,EAAE;QAClE,IAAI,EAAE,UAAU;QAGhB,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QAG5C,eAAe,EAAE,SAAS,CAAC,QAAQ,CAAC,eAAe,CAAC;QACpD,sBAAsB,EAAE,SAAS,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QAGlE,WAAW,EAAE,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC3B,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE;YAClC,CAAC,CAAC,aAAa,CAAE,QAAgB,CAAC,oBAAoB,CAAC,CAAC;QAC1D,UAAU,EAAE,QAAQ,CAAC,eAAe;YAClC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,WAAW,EAAE;YACxC,CAAC,CAAC,aAAa,CAAE,QAAgB,CAAC,YAAY,CAAC,CAAC;QAGlD,OAAO;QACP,kBAAkB,EAAE,GAAG;QAGvB,WAAW,EAAE,SAAS,CAAE,QAAgB,CAAC,WAAW,CAAC;KACtD,CAAC;AACJ,CAAC;AAKD,SAAgB,0BAA0B,CAAC,SAAuB;IAChE,OAAO,SAAS,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACjD,CAAC"}

package/dist/utils/graph.util.d.ts

@@ -0,0 +1,66 @@
+import { ADUser, ADGroup, ADComputer } from '../types/ad.types';
+import { AclEntry } from '../types/ad.types';
+export type NodeType = 'user' | 'group' | 'computer' | 'gpo' | 'ou' | 'domain';
+export type EdgeType = 'memberOf' | 'hasMember' | 'canModify' | 'canRead' | 'delegateTo' | 'rbcdFrom' | 'adminTo' | 'owns' | 'gpLink' | 'contains';
+export interface GraphNode {
+    dn: string;
+    type: NodeType;
+    name: string;
+    isPrivileged?: boolean;
+    isEnabled?: boolean;
+    attributes?: Record<string, unknown>;
+}
+export interface GraphEdge {
+    source: string;
+    target: string;
+    type: EdgeType;
+    accessMask?: number;
+    isInherited?: boolean;
+}
+export interface AttackPath {
+    source: GraphNode;
+    target: GraphNode;
+    edges: GraphEdge[];
+    length: number;
+    riskScore: number;
+}
+export declare const DANGEROUS_RIGHTS: {
+    GENERIC_ALL: number;
+    GENERIC_WRITE: number;
+    WRITE_DACL: number;
+    WRITE_OWNER: number;
+    WRITE_PROPERTY: number;
+    SELF: number;
+    EXTENDED_RIGHT: number;
+};
+export declare const PRIVILEGED_GROUPS: string[];
+export declare class AttackGraph {
+    private nodes;
+    private outEdges;
+    private inEdges;
+    private privilegedDNs;
+    addNode(node: GraphNode): void;
+    addEdge(edge: GraphEdge): void;
+    getNode(dn: string): GraphNode | undefined;
+    getOutEdges(dn: string): GraphEdge[];
+    getInEdges(dn: string): GraphEdge[];
+    getPrivilegedNodes(): GraphNode[];
+    markAsPrivileged(dn: string): void;
+    isPrivileged(dn: string): boolean;
+    findShortestPathToPrivileged(sourceDn: string, maxDepth?: number): AttackPath | null;
+    findAllPathsToPrivileged(sourceDn: string, maxDepth?: number, maxPaths?: number): AttackPath[];
+    getReachable(sourceDn: string, maxDepth?: number): Set<string>;
+    getRecursiveMembers(groupDn: string, maxDepth?: number): Set<string>;
+    private calculatePathRisk;
+    getStats(): {
+        nodes: number;
+        edges: number;
+        privileged: number;
+    };
+}
+export declare function buildGroupMembershipGraph(users: ADUser[], groups: ADGroup[], computers: ADComputer[]): AttackGraph;
+export declare function buildAclGraph(aclEntries: AclEntry[], baseGraph: AttackGraph): AttackGraph;
+export declare function addDelegationEdges(users: ADUser[], computers: ADComputer[], graph: AttackGraph): void;
+export declare function detectNestingDepth(groupDn: string, groups: ADGroup[], maxDepth?: number): number;
+export declare function isPrivilegedMember(dn: string, graph: AttackGraph, maxDepth?: number): boolean;
+//# sourceMappingURL=graph.util.d.ts.map

package/dist/utils/graph.util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.util.d.ts","sourceRoot":"","sources":["../../src/utils/graph.util.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAK7C,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,OAAO,GAAG,UAAU,GAAG,KAAK,GAAG,IAAI,GAAG,QAAQ,CAAC;AAK/E,MAAM,MAAM,QAAQ,GAChB,UAAU,GACV,WAAW,GACX,WAAW,GACX,SAAS,GACT,YAAY,GACZ,UAAU,GACV,SAAS,GACT,MAAM,GACN,QAAQ,GACR,UAAU,CAAC;AAKf,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAKD,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAKD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAKD,eAAO,MAAM,gBAAgB;;;;;;;;CAQ5B,CAAC;AAKF,eAAO,MAAM,iBAAiB,UAY7B,CAAC;AAKF,qBAAa,WAAW;IACtB,OAAO,CAAC,KAAK,CAAqC;IAClD,OAAO,CAAC,QAAQ,CAAuC;IACvD,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,aAAa,CAA0B;IAK/C,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IAmB9B,OAAO,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI;IA2B9B,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAO1C,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE;IAOpC,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,EAAE;IAOnC,kBAAkB,IAAI,SAAS,EAAE;IASjC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAYlC,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAOjC,4BAA4B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,UAAU,GAAG,IAAI;IA+C/E,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAI,EAAE,QAAQ,SAAK,GAAG,UAAU,EAAE;IA4CrF,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,GAAG,CAAC,MAAM,CAAC;IA6BzD,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,GAAG,CAAC,MAAM,CAAC;IA4BhE,OAAO,CAAC,iBAAiB;IAoBzB,QAAQ,IAAI;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE;CAUjE;AAKD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EAAE,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,SAAS,EAAE,UAAU,EAAE,GACtB,WAAW,CAqFb;AAKD,wBAAgB,aAAa,CAC3B,UAAU,EAAE,QAAQ,EAAE,EACtB,SAAS,EAAE,WAAW,GACrB,WAAW,CAwBb;AAKD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EAAE,EACf,SAAS,EAAE,UAAU,EAAE,EACvB,KAAK,EAAE,WAAW,GACjB,IAAI,CAwCN;AAKD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,OAAO,EAAE,EACjB,QAAQ,SAAK,GACZ,MAAM,CAwBR;AAKD,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,WAAW,EAClB,QAAQ,SAAK,GACZ,OAAO,CAUT"}