dissect.database.ese.ntds.sd

Module Contents

Classes

SecurityDescriptor	Parse a security descriptor from a file-like object.
ACL	Parse an ACL from a file-like object.
ACE	Parse an ACE from a file-like object.

Attributes

ACE_TYPE
ACE_FLAGS
ACE_OBJECT_FLAGS
ACCESS_MASK
COMPOUND_ACE_TYPE

dissect.database.ese.ntds.sd.ACE_TYPE

dissect.database.ese.ntds.sd.ACE_FLAGS

dissect.database.ese.ntds.sd.ACE_OBJECT_FLAGS

dissect.database.ese.ntds.sd.ACCESS_MASK

dissect.database.ese.ntds.sd.COMPOUND_ACE_TYPE

class dissect.database.ese.ntds.sd.SecurityDescriptor(fh: BinaryIO)

Parse a security descriptor from a file-like object.

Parameters:

fh – The file-like object to parse a security descriptor from.

header

owner = None

group = None

sacl = None

dacl = None

__repr__() → str

class dissect.database.ese.ntds.sd.ACL(fh: BinaryIO)

Parse an ACL from a file-like object.

Parameters:

fh – The file-like object to parse an ACL from.

header

ace

__repr__() → str

property revision: int

Return the ACL revision.

property size: int

Return the ACL size.

class dissect.database.ese.ntds.sd.ACE(fh: BinaryIO)

Parse an ACE from a file-like object.

Parameters:

fh – The file-like object to parse an ACE from.

header

data

mask: ACCESS_MASK | None = None

sid: str | None = None

object_flags: ACE_OBJECT_FLAGS | None = None

object_type: uuid.UUID | None = None

inherited_object_type: uuid.UUID | None = None

compound_type: COMPOUND_ACE_TYPE | None = None

server_sid: str | None = None

application_data

__repr__() → str

property type: ACE_TYPE

Return the ACE type.

property flags: ACE_FLAGS

Return the ACE flags.

property size: int

Return the ACE size.

property is_standard_ace: bool

Return whether this ACE is a standard ACE.

property is_compound_ace: bool

Return whether this ACE is a compound ACE.

property is_object_ace: bool

Return whether this ACE is an object ACE.