BloodHoundAD / SharpHoundCommon

Common library used by SharpHound.
GNU General Public License v3.0
73 stars 47 forks source link

Filter out GPOs with disabled computer settings from local group processing #85

Open JonasBK opened 8 months ago

JonasBK commented 8 months ago

We check if principals are added to local groups such as Administrators through linked GPOs and create edges like AdminTo based on that with the function ReadGPOLocalGroups: https://github.com/BloodHoundAD/SharpHoundCommon/blob/ed7b3916d304c9dba901cf58876607bb0576610e/src/CommonLib/Processors/GPOLocalGroupProcessor.cs#L63

We should filter out GPOs that are either disabled or have their computer settings disabled as those GPOs will not apply to computers: image

Issue originally posted here: https://github.com/BloodHoundAD/BloodHound/issues/699