Foreign Computer/User membership not added

[api0cradle]

Great work on ADExplorerSnapshot.py! Love the tool and keep up the great work!

I do have one issue, and of course it might be my lab and not an issue. But it seems that if you have multiple domains and computer (or user) accounts are members of foreign groups, these are not added to the graph.

Tested with groups that are member of foreign groups and those works, however not computer or user accounts.

Is this a known issue?

Thanks

[api0cradle]

Looked at the outputted json files and I could not see any traces of a known foreign group on computer/user objects

[c3c]

Hi and thanks for the kind words!

I had to read over the code first to see what exactly is going on: indeed, only the 'member' attribute is parsed for groups, to see which objects belong to that group. At this moment it's not being done from the other angle (reading the 'memberOf' attribute for users/computers to see what groups they are part of). This would explain what you're seeing.

I think it's possible to add - it just would require adding an extra processing step to also add 'foreign groups' to the output.
I can't fix it on the spot, but let's track it for now. Thanks for reporting!

[api0cradle]

Awesome! Thanks for taking a look!

[c3c]

This issue didn't age well (sorry) :-) I hope the BOFHound output mode will take care of this.