rusthound-ce 2.4.7

Active Directory data collector for Bloodhound Community Edition written in rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

use std::error::Error;
use crate::objects::common::Link;
use crate::enums::regex::{GPLINK_RE1,GPLINK_RE2};

/// Function to parse gplink and push it in json format
pub fn parse_gplink(all_link: String) -> Result<Vec<Link>, Box<dyn Error>> {
   let mut gplinks: Vec<Link> = Vec::new();

   let mut cpaths: Vec<String> = Vec::new();
   for cpath in GPLINK_RE1.captures_iter(&all_link)
   {
      cpaths.push(cpath[0].to_owned());
   }

   let mut status: Vec<String> = Vec::new();
   for enforced in GPLINK_RE2.captures_iter(&all_link){
      status.push(enforced[0].to_owned());
   }

   for i in 0..cpaths.len()
   {
      let mut gplink = Link::new(false, cpaths[i].to_string());
      
      // Thanks to: https://techibee.com/group-policies/find-link-status-and-enforcement-status-of-group-policies-using-powershell/2424
      if status[i].to_string().contains(";2") | status[i].to_string().contains(";3") {
         *gplink.is_enforced_mut() = true;
      }

      //trace!("gpo link: {:?}",cpaths[i]);
      gplinks.push(gplink);
   }

   Ok(gplinks)
}