rusthound-ce 2.4.7

Active Directory data collector for Bloodhound Community Edition written in rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

use once_cell::sync::Lazy;
use regex::Regex;

/// <https://docs.rs/regex/latest/regex/#avoid-re-compiling-regexes-especially-in-a-loop>

// Use by ./RustHound-CE/src/enums/gplink.rs
pub static GPLINK_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"[a-zA-Z0-9-]{36}").unwrap());
pub static GPLINK_RE2: Lazy<Regex> = Lazy::new(|| Regex::new(r"[;][0-4]{1}").unwrap());

// Use by ./RustHound-CE/src/json/checker/common.rs
pub static COMMON_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"^S-[0-9]+-[0-9]+-[0-9]+(?:-[0-9]+)+").unwrap());
pub static DOMAIN_SID_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"^S-[0-9]+-[0-9]+-[0-9]+(?:-[0-9]+)(?:-[0-9]+)(?:-[0-9]+)").unwrap());

// Use by ./RustHound-CE/src/json/parser/mod.rs
pub static PARSER_MOD_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"[0-9a-z-A-Z]{1,}-[0-9a-z-A-Z]{1,}-[0-9a-z-A-Z]{1,}-[0-9a-z-A-Z]{1,}").unwrap());
pub static PARSER_MOD_RE2: Lazy<Regex> = Lazy::new(|| Regex::new(r"CN=DOMAINUPDATES,CN=SYSTEM,").unwrap());

// Use by ./RustHound-CE/src/objets/*.rs
pub static OBJECT_SID_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"^S-[0-9]{1}-[0-9]{1}-[0-9]{1,}-[0-9]{1,}-[0-9]{1,}-[0-9]{1,}").unwrap());
pub static SID_PART1_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r"S-.*-").unwrap());

// Use by ./RustHound-CE/src/enums/sid.rs
pub static IS_SID_RE1: Lazy<Regex> = Lazy::new(|| Regex::new(r".*S-1-5.*").unwrap());