Expand description
Shared domain model: SIDs, GUIDs, collected AD objects, findings, risk config. Everything above this crate (checks, graph, report) speaks in these types.
Re-exports§
pub use finding::Category;pub use finding::Finding;pub use finding::Mitre;pub use finding::Severity;pub use object::AdObject;pub use sid::Guid;pub use sid::Sid;pub use snapshot::Snapshot;
Modules§
- finding
- The output vocabulary: a Finding is one rule firing, tagged with a PingCastle-style category, a severity, and one or more MITRE ATT&CK techniques.
- object
- A generic collected directory object: DN + multi-valued string attributes, plus the raw binary blobs we need to parse ourselves (objectSid, nTSecurityDescriptor).
- sid
- SID / GUID parsing per MS-DTYP. No FFI — pure binary + string handling.
- snapshot
- An immutable point-in-time capture of the directory. Checks and the graph builder read this; the collector produces it. Keeps a few precomputed indices.