ntdsextract2 1.3.0

Display contents of Active Directory database files (ntds.dit)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

use crate::{cache::RecordId, ntds::DataTableRecord, win32_types::Rdn};

pub trait RecordPredicate<'info, 'db> {
    fn matches(&self, record: &DataTableRecord<'info, 'db>) -> bool;
}

pub struct RecordHasRid(pub u32);

impl<'info, 'db> RecordPredicate<'info, 'db> for RecordHasRid {
    fn matches(&self, record: &DataTableRecord<'info, 'db>) -> bool {
        match record.att_object_sid() {
            Ok(sid) => sid.get_rid() == &self.0,
            _ => false,
        }
    }
}

pub struct RecordHasParent(pub RecordId);

impl<'info, 'db> RecordPredicate<'info, 'db> for RecordHasParent {
    fn matches(&self, record: &DataTableRecord<'info, 'db>) -> bool {
        log::debug!(
            "searching children of {}; current is {:?}",
            self.0,
            record.ds_parent_record_id()
        );
        match record.ds_parent_record_id() {
            Ok(r) => r == self.0,
            _ => false,
        }
    }
}

pub struct RecordHasAttRdn(pub Rdn);

impl<'info, 'db> RecordPredicate<'info, 'db> for RecordHasAttRdn {
    fn matches(&self, record: &DataTableRecord<'info, 'db>) -> bool {
        match record.att_object_name2() {
            Ok(r) => r == self.0,
            _ => false,
        }
    }
}