Features
- add initial URA collection POC (Rohan Vazarkar)
- add RecurseDomains flag and add collected flag to domains #59 (rvazarkar)
- configuration class collection #70 (Jonas Knudsen)
- add certservices collection method #76 (Ulises Rangel)
- issuancepolicy nodes (SpecterOps#93) #93 (Rohan Vazarkar)
Bug Fixes
- change SHC version back to nuget, upgrade to 3.0.0-rc7 (Rohan Vazarkar)
- actually use the no registry logged on flag #59 (rvazarkar)
- implement throttles appropriately #59 (rvazarkar)
- use string enum convertor to properly send enums #60 (rvazarkar)
- change domain property to domainsid and add to rootca in object processors #77 (Ulises Rangel)
- add all obj classes to container collection #71 (Jonas Knudsen)
- remove ContainsBy from GPOs and add to OUs #71 (Jonas Knudsen)
- eca processing without ca registry #75 (Jonas Knudsen)
- bad filter sneaking into configurations NC #78 (rvazarkar)
- don't write UTF8-BOM #80 (rvazarkar)
- remove bom from comp status #80 (rvazarkar)
- add isaclprotected to property bag #81 (rvazarkar)
- use versionconvertor to deserialize/serialize cache #82 (rvazarkar)
- properly parse collection methods for cert services objects #84 (rvazarkar)
- dcregistry should only pull domain controllers #84 (rvazarkar)
- properly set includeACL for cert services #84 (rvazarkar)
- don't include ACLs in default NC for cert services #84 (rvazarkar)
- add reconcile tag where necessary #84 (rvazarkar)
- only collect caregistry if flag is set #84 (rvazarkar)
- add proper props to cert services #84 (rvazarkar)
- set collected correctly for domains #84 (rvazarkar)
- properly populate status #84 (rvazarkar)
- collect container acl correctly #84 (rvazarkar)
- uncomment ps1 build target #85 (rvazarkar)
Chores
- fix typo #59 (rvazarkar)
- bump version to 2.0.0 #59 (rvazarkar)
- fix namespace (rvazarkar)
- fix log line #60 (rvazarkar)
- update README.md with version #60 (rvazarkar)
- move commonlib over to new hosting #65 (rvazarkar)
- add some extra logging around CollectAllProperties #65 (rvazarkar)
- bump version (rvazarkar)
- update some methods to make them more testable and make output more consistent #77 (Jonas Knudsen)
- add domain as top level property for ntauthstore and enterpriseca #77 (Ulises Rangel)
- handle CARegistryData collected properties setting during collection instead of ingest #77 (Ulises Rangel)
- update help docs #76 (Eli K Miller)
- bump SharpHoundCommon #77 (Eli K Miller)
- bump SharpHoundCommon (Jonas Knudsen)
- bump version (rvazarkar)
- bump common lib #77 (Ulises Rangel)
- bump version (rvazarkar)
- bump version (rvazarkar)
- remove highvalue tag as its superceded by admin_tier_0 #84 (rvazarkar)
- add missing msa/gmsa props #84 (rvazarkar)
- refactor nested if #84 (rvazarkar)
- bump commonlib, add dcfor info #85 (rvazarkar)
- bump version (SpecterOps#91) #91 (Ulises Rangel)
Commits
- 1fe013f: Merge branch 'dev' into 2.X (Jonas Knudsen)
- 55d2c22: upgrade to commonlib v3.0.3 (Jonas Knudsen)
- 27858a2: add adcs stuff (Jonas Knudsen) #77
- bd0d183: Split CA objects (Jonas Knudsen) #77
- be1cc2a: move CASecurity into Aces (Jonas Knudsen) #77
- b5466a7: Change cert in NTAuthCert to array (Jonas Knudsen) #77
- 2f0f824: replace certificate with certThumbprint in certain objects (Jonas Knudsen) #77
- 53e1c8c: Fix resolving certTemplates and improve EnrollmentAgent data (Jonas Knudsen) #77
- 5536d87: add 'collected' values to CA reg output (Jonas Knudsen) #77
- a371fa0: Add CARegistry collection enum (Jonas Knudsen) #77
- 787e59a: Ensure ADCS object ACLs are handled if collected (Jonas Knudsen) #77
- 3aefde1: Rename NTAuthCert to NTAuthStore (Jonas Knudsen) #77
- c60dbf1: Fix registry ACL collection (Jonas Knudsen) #77
- f8969ca: Update dependency versions (Jonas Knudsen) #77
- dd55621: Fix EnumerationDomain (Jonas Knudsen) #77
- 46b6f44: Add Certificate to RootCA (Jonas Knudsen) #77
- b0b4482: Update commonlib version (Jonas Knudsen) #77
- 422ff12: Rename EnrollmentService to EnterpriseCA (Jonas Knudsen) #67
- b37bfb1: Fix data arrangement in output (Jonas Knudsen) #68
- d454f43: Add collection of DC reg keys (Jonas Knudsen) #68
- 92e777e: remove DomainSID from EnterpriseCA (Jonas Knudsen) #77
- df7f6c3: bump commonlib version (Jonas Knudsen) #77
- 24f07cc: BED-3868: Build contains edges from DNs (Jonas Knudsen) #71
- d7b0165: Merge branch '2.X' into adcs (Jonas Knudsen) #77
- 8bc108f: load local commonlib without version specification (Jonas Knudsen) #77
- 33dfe9a: remove version number from readme (Jonas Bülow Knudsen) #74
- fe6c8a8: Merge branch '2.X' into adcs (Jonas Knudsen) #77
- f694291: BED-3868: Build contains edges from DNs (ADCS) (Jonas Knudsen) #77
- 01b5158: Session Enumeration as local Admin User (LuemmelSec)
- 437894e: Merge branch '2.X' into adcs (JonasBK) #77
- 76fb763: Merge remote-tracking branch 'origin/2.X' into adcs (rvazarkar) #77
- c27955e: Merge branch '2.X' into adcs (Ulises Rangel) #77
- cc52d72: Bump Versions and add MR Template (SpecterOps#88) (Rohan Vazarkar) #88
- 268374f: Skip over CAs that can't be resolved to SIDs during collection (SpecterOps#90) (Alex Nemeth) #90
- 45bbf24: pull upstream/2.X branch, add workflow, sliver support, and remove upstream workflows (c2biz)