ntdsextract2 1.4.25

Display contents of Active Directory database files (ntds.dit)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64

use dfir_windows_types::Guid;

use crate::{cache::ValueSet, CDatabase};

pub trait ToStringOrStringSet {
    fn to_string_or_stringset(&self, database: &CDatabase<'_, '_>) -> StringOrStringSet;
}

pub enum StringOrStringSet {
    String(String),
    StringSet(Vec<String>),
}

impl ToStringOrStringSet for String {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl ToStringOrStringSet for u32 {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl ToStringOrStringSet for i32 {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl ToStringOrStringSet for i64 {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl ToStringOrStringSet for bool {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl ToStringOrStringSet for Guid {
    fn to_string_or_stringset(&self, _database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::String(self.to_string())
    }
}

impl<T> ToStringOrStringSet for ValueSet<T>
where
    T: ToStringOrStringSet + Eq + PartialEq,
{
    fn to_string_or_stringset(&self, database: &CDatabase<'_, '_>) -> StringOrStringSet {
        StringOrStringSet::StringSet(
            self.iter()
                .flat_map(|e| match e.to_string_or_stringset(database) {
                    StringOrStringSet::String(s) => vec![s],
                    StringOrStringSet::StringSet(items) => items,
                })
                .collect(),
        )
    }
}