ntdsextract2 1.4.31

Display contents of Active Directory database files (ntds.dit)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82

use getset::Getters;

use std::sync::Arc;

use crate::{
    cache::{self, ColumnsOfTable, MetaDataCache},
    esedb_mitigation::libesedb_count,
    ntds::DataTableRecord,
    object_tree_entry::ObjectTreeEntry,
    EsedbInfo,
};

use super::RecordPointer;

#[derive(Getters)]
#[getset(get = "pub")]
pub struct DataTable<'info, 'db>
where
    'info: 'db,
{
    table_id: &'static str,

    table: &'info libesedb::Table<'db>,

    esedbinfo: &'info EsedbInfo<'db>,
    metadata: MetaDataCache,

    number_of_records: i32,

    // this is needed for `::all_attributes`
    columns: Arc<ColumnsOfTable>,
}

impl<'info, 'db> DataTable<'info, 'db>
where
    'info: 'db,
{
    pub fn new(
        table: &'info libesedb::Table<'db>,
        table_id: &'static str,
        esedbinfo: &'info EsedbInfo<'db>,
        metadata: MetaDataCache,
    ) -> std::io::Result<Self> {
        Ok(Self {
            table,
            table_id,
            esedbinfo,
            metadata,
            number_of_records: libesedb_count(|| table.count_records())?,
            columns: Arc::new(ColumnsOfTable::try_from(table)?),
        })
    }
}

impl<'info, 'db> DataTable<'info, 'db> {
    pub fn iter(&'db self) -> impl Iterator<Item = DataTableRecord<'info, 'db>> {
        self.metadata
            .iter()
            .map(|e| self.data_table_record_from(*e.record_ptr()))
            .filter_map(Result::ok)
    }

    pub fn data_table_record_from(
        &self,
        ptr: RecordPointer,
    ) -> std::io::Result<DataTableRecord<'info, 'db>> {
        Ok(DataTableRecord::new(
            cache::Record::try_from(
                self.table.record(ptr.esedb_row().inner())?,
                self.table_id,
                *ptr.esedb_row(),
                self.esedbinfo,
                Arc::clone(&self.columns),
            )?,
            ptr,
        ))
    }
    pub fn path_to_str(&self, path: &[Arc<ObjectTreeEntry>]) -> String {
        let v: Vec<_> = path.iter().map(|e| e.name().to_string()).collect();
        v.join(",")
    }
}