Collect Kerberos Delegation on users in dedicated request

c-bless / reveal

This project contains some PowerShell scripts used to collect system configurations or domain information. Furthermore it has a Flask based web application and API to import and analyze the results of collector scripts. It can export collected data to Excel via the Web-Interface or to JSON via API.

1 stars 1 forks source link

Collect Kerberos Delegation on users in dedicated request #92

Closed c-bless closed 1 month ago

c-bless commented 1 month ago

Description: Collect users with TrustedForDelegation, TrustedToAuthForDelegation, msds-allowedtodelegateto in dedicated requests to collect the attributes only for affected accounts.

Requested solution: The following requests should be implemented

-Get-ADUser -filter { TrustedForDelegation -eq $true} -properties TrustedForDelegation

Get-ADUser -filter { TrustedToAuthForDelegation -eq $true} -properties TrustedToAuthForDelegation,msDS-AllowedToDelegateTo

c-bless commented 1 month ago

added requests / collector methods for Unconstraint and Constraint delegations. Furthermore user accounts with attribute 'AccountNotDelegated' are collected (not delegation allowed).