ntdsextract2 1.4.15

Display contents of Active Directory database files (ntds.dit)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

use getset::Getters;
use libesedb::{EseDb, Table};
use std::ops::Index;

use crate::{ntds::NtdsAttributeId, ColumnInfoMapping, ColumnInformation};

#[derive(Getters)]
#[getset(get = "pub")]
pub struct EsedbInfo<'db> {
    data_table: Table<'db>,
    link_table: Table<'db>,
    sd_table: Table<'db>,
    mapping: ColumnInfoMapping,
}

impl<'db> TryFrom<&'db EseDb> for EsedbInfo<'db> {
    type Error = anyhow::Error;

    fn try_from(esedb: &'db EseDb) -> Result<Self, Self::Error> {
        let data_table = esedb.table_by_name("datatable")?;
        let link_table = esedb.table_by_name("link_table")?;
        let sd_table = esedb.table_by_name("sd_table")?;
        let mapping = ColumnInfoMapping::try_from(&data_table)?;

        Ok(Self {
            data_table,
            link_table,
            sd_table,
            mapping,
        })
    }
}

impl<'db> EsedbInfo<'db> {
    pub fn column(&self, att_id: NtdsAttributeId) -> &ColumnInformation {
        self.mapping().index(att_id)
    }

    pub fn print_metainfo(esedb: &'db EseDb) -> Result<(), anyhow::Error> {
        for table in esedb.iter_tables()?.filter_map(Result::ok) {
            let name = table.name()?;
            let count = table.count_records()?;
            println!("{name:32}: {count} records");
        }
        Ok(())
    }
}