External tools pyldapsearch [producer] and BOFHound [consumer] expect binary attributes to be formatted as Base64 or bracketed strings.
This PR adds support for all of the attributes specified by pyldapsearch to establish feature parity and enhance compatibility of C2 log output.
# bofhound expects some attributes in a certain format
_base64_attributes = ['nTSecurityDescriptor', 'msDS-GenerationId', 'auditingPolicy', 'dSASignature', 'mS-DS-CreatorSID',
'logonHours', 'schemaIDGUID']
_raw_attributes = ['whenCreated', 'whenChanged', 'dSCorePropagationData', 'accountExpires', 'badPasswordTime', 'pwdLastSet',
'lastLogonTimestamp', 'lastLogon', 'lastLogoff', 'maxPwdAge', 'minPwdAge', 'creationTime', 'lockOutObservationWindow',
'lockoutDuration']
_bracketed_attributes = ['objectGUID']
_ignore_attributes = ['userCertificate']
External tools pyldapsearch [producer] and BOFHound [consumer] expect binary attributes to be formatted as Base64 or bracketed strings. This PR adds support for all of the attributes specified by pyldapsearch to establish feature parity and enhance compatibility of C2 log output.