Repository navigation

Update for SO-CON 2026 - #53

Merged

martinsohn merged 111 commits into

mainfrom

so-con-2026

Apr 15, 2026

Merged

Update for SO-CON 2026#53
martinsohn merged 111 commits into
mainfrom
so-con-2026

Commits on Feb 17, 2026
- Update README.md
  martinsohn
  committed
  c0c9505
- Rename and align to 'All members of Operator groups'
  martinsohn
  committed
  7b90296
- Fix mapping guid for "Enrollment rights on published certificate templates with no security extension"
  martinsohn
  committed
  84f65cb
- Add initial PurpleKnight queries
  martinsohn
  committed
  028ffaa
- Add 'Domains without Group Managed Service Accounts'
  martinsohn
  committed
  f1a55a8
- Create "Objects created in the last 10 days"
  martinsohn
  committed
  6040b76
Commits on Feb 18, 2026
Commits on Feb 20, 2026
- fix some PK mapping scopes
  martinsohn
  committed
  4d69082
Commits on Mar 12, 2026
- Add query for computers with local administrator permissions over other computers
  5tuk0v
  committed
  9868bca
Commits on Mar 16, 2026
- align mapping type descriptions with those in json file
  martinsohn
  committed
  64536e8
- Map PK "gMSA objects with old passwords"
  martinsohn
  committed
  980f15b
- Map PK "Privileged accounts with a password that never expires"
  martinsohn
  committed
  b97019d
- Map PK "Kerberoastable members of Tier Zero / High Value groups"
  martinsohn
  committed
  309a1ca
- Map PK "Users with ServicePrincipalName defined"
  martinsohn
  committed
  face189
- correct PK names and IDs
  martinsohn
  committed
  12351aa
- PK map "Computer Accounts in Privileged Groups"
  martinsohn
  committed
  4b26a89
- Map PK "RC4 or DES encryption type are supported by Domain Controllers"
  martinsohn
  committed
  995ee3f
- Fix: Map "RC4 or DES encryption type are supported by Domain Controllers"
  martinsohn
  committed
  16398e1
- Map "SSO computer account with password last set over 90 days ago"
  martinsohn
  committed
  338dde9
- Map "Shadow Credentials on privileged objects"
  martinsohn
  committed
  c4a3137
- PK map "Non-privileged users with access to gMSA passwords"
  martinsohn
  committed
  bbe2f6a
- PK map "Primary users with SPN not supporting AES encryption on Kerberos"
  martinsohn
  committed
  9b585ff
- fix: PK map "Privileged users with SPN defined"
  martinsohn
  committed
  4f66642
- PK map "User accounts that use DES encryption"
  martinsohn
  committed
  6072905
- Map PK "Users with Kerberos pre-authentication disabled"
  martinsohn
  committed
  0e7d11f
- fix: PK map "Users with SPN defined"
  martinsohn
  committed
  8378189
- Fix: PK map "krbtgt account with Resource-Based Constrained Delegation (RBCD) enabled"
  martinsohn
  committed
  e11ba6f
- Map PK "Global Administrators that signed in during the last 14 days"
  martinsohn
  committed
  b4dfb66
- Map PK "Guest accounts that were inactive for more than 30 days"
  martinsohn
  committed
  25090cf
- Map PK "Less than 2 Global Administrators exist"
  martinsohn
  committed
  36c39d8
- Map PK "More than 5 Global Administrators exist"
  martinsohn
  committed
  4e137fe
- Map PK "More than 10 Privileged Administrators exist"
  martinsohn
  committed
  a8ef49a
- Map PK "Privileged accounts with mailbox"
  martinsohn
  committed
  a854136
- Map PK "Privileged group contains guest account"
  martinsohn
  committed
  d875807
- Map PK "Suspicious Directory Synchronization Accounts role member"
  martinsohn
  committed
  a0ab54d
Commits on Mar 18, 2026
- Map PK "Unprivileged owner of a privileged group"
  martinsohn
  committed
  c5fb989
- fix: PK "Suspicious Directory Synchronization Accounts role member"
  martinsohn
  committed
  7ed423d
- Update Enabled Entra ID guest users inactive for 30 days.yml
  martinsohn
  committed
  bd6f7ad
- PK map "Users or devices inactive for at least 90 days"
  martinsohn
  committed
  3e4e678
- Update security-assessment-mapping.json
  martinsohn
  committed
  c7c7353
- Update Tier Zero accounts that can be delegated.yml
  martinsohn
  committed
  332958a
- Map PK
  martinsohn
  committed
  f49281e
- added resource links
  martinsohn
  committed
  1866455
- Create Enabled Entra Tier Zero principals inactive for 60 days.yml
  martinsohn
  committed
  8768c47
- Add Nessus IDs
  martinsohn
  committed
  ca6533b
- Add PurpleKnight to assessment tool .md
  martinsohn
  committed
  242793e
- Map PK "GPO linking delegation at the domain level"
  martinsohn
  committed
  b2024a2
- Map PK "Changes to MS LAPS read permissions"
  martinsohn
  committed
  a3f0252
- Update security-assessment-mapping.md
  martinsohn
  committed
  33f007b
Commits on Mar 20, 2026
- Update Non-Tier Zero users that can read LAPS passwords.yml
  martinsohn
  committed
  843e558
- Update security-assessment-mapping.json
  martinsohn
  committed
  7f0ab0a
- Update security-assessment-mapping.md
  martinsohn
  committed
  50a9ce7
Commits on Mar 23, 2026
- Add non-tier-zero shortest path queries to tier zero
  chryzsh
  committed
  c45d8e1
Commits on Apr 4, 2026
Commits on Apr 10, 2026
- Update Computers with local administrator permissions over other computers.yml
  martinsohn
  committed
  0923a89
Commits on Apr 12, 2026
- REAME: Deprecation Notice: `system_tags` Queries
  martinsohn
  committed
  9ebff06
- Update Computers with non-default Primary Group membership.yml
  martinsohn
  committed
  9ee1cb0
- bump missing revisions
  martinsohn
  committed
  bc1d526
- rename file to match internal name
  martinsohn
  committed
  0da2cea
Commits on Apr 13, 2026
Commits on Apr 14, 2026
Commits on Apr 15, 2026
- Update Non-Tier Zero principals with access to enabled gMSA passwords.yml
  martinsohn
  committed
  48a92ff
- Fix syntax checks
  martinsohn
  committed
  47c9763

Commits

Commits on Feb 17, 2026

Commits on Feb 18, 2026

Commits on Feb 20, 2026

Commits on Mar 12, 2026

Commits on Mar 16, 2026

Commits on Mar 18, 2026

Commits on Mar 20, 2026

Commits on Mar 23, 2026

Commits on Apr 4, 2026

Commits on Apr 10, 2026

Commits on Apr 12, 2026

Commits on Apr 13, 2026

Commits on Apr 14, 2026

Commits on Apr 15, 2026