Enum EdgeKind 

pub enum EdgeKind {
    MemberOf,
    Acl(ControlPrimitive),
    AllowedToDelegate,
    UnconstrainedDelegation,
    SidHistory,
    HasSession,
    Coercible,
    AdminTo,
}

Edge label. ACL-derived edges are ad_acl::ControlPrimitives; the rest come from object attributes rather than from a security descriptor.

Variants

MemberOf

Group membership.

Acl(ControlPrimitive)

Derived from an ACE on the target’s security descriptor.

AllowedToDelegate

msDS-AllowedToDelegateTo names a service on the target — constrained delegation with protocol transition impersonates any user to it.

UnconstrainedDelegation

The source runs with TRUSTED_FOR_DELEGATION: coerce the target to authenticate to it and its TGT lands in the source’s cache.

SidHistory

The source carries the target’s SID in sIDHistory — it already is the target as far as access checks are concerned.

HasSession

A privileged principal has a live logon session on the source host; controlling the host yields that principal’s credentials/TGT. Populated by enum sessions (S2).

Coercible

The target can be coerced into authenticating to an attacker listener (MS-EFSR/RPRN/ DFSNM/FSRVP), feeding an NTLM relay. Populated by coercion posture (S2).

AdminTo

The source is a local administrator on the target host — full control and secret extraction. Populated by session/local-admin collection (S5).

Implementations

impl EdgeKind

pub fn weight(self) -> u32

Lower = cheaper for the attacker = more dangerous.

pub fn name(self) -> &'static str

pub fn impact(self) -> &'static str

What traversing this edge gets the attacker.

pub fn mitigation(self) -> &'static str

How a defender removes this edge.

pub fn executor(self) -> Option<&'static str>

The adhammer command that walks this edge, as a template over {from} and {to}.

None means the tool can find this edge but cannot yet walk it — which is exactly the roadmap: an edge without an executor is an attack still owed.

pub fn command(self, from: &str, to: &str) -> Option<String>

EdgeKind::executor with the endpoints filled in.

Trait Implementations

impl Clone for EdgeKind

fn clone(&self) -> EdgeKind

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EdgeKind

impl Debug for EdgeKind

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for EdgeKind

impl From<ControlPrimitive> for EdgeKind

fn from(p: ControlPrimitive) -> Self

Converts to this type from the input type.

impl PartialEq for EdgeKind

fn eq(&self, other: &EdgeKind) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EdgeKind