AdFind V01.32.00 is officially released…
You can download it from http://www.joeware.net/win/free/tools/adfind.htm
I have posted several glimpses into what this version can do here on the blog, here are the changes:
- Fixed bug in -adcsv, added more data to -adcsv header
- Fixed bug in -noctl
- Fixed bug in SDDL SID Decode
- Added subnets and exch to DN Replace option
- Added support to decode longhorn mode values
- Expanded partitions msDS-Behavior-Version decoded on
- Decode defaultSecurityDescriptor
- Changed usage switches around – see adfind /?
- Added switches -sddl++, -sddlfilter, -sddlnotfilter, -recmute, -noowner, -nogroup, -nodacl, -nosacl, -decsddlacl, -tdca, -tdcas, -tdcgt, -tdcgts
- Allow ACEs in SDDL+/SDDL++ output to be filtered with -mvfilter
- Fixed -maxe so it works for values >1000
- Increased buffer size of -ef and -ff options to 10MB
- Special Exchange specific decode of msExchMailboxSecurityDescriptor with sddl+
- Added shortcuts listpropsets, listpropsetsl, listpropsetscsv, listvwrites, listvwritesl, listvwritescsv, listxrights,listxrightsl,listxrightscsv,exchmbxs, exchme, sdfilter, sdfilterns, explaces
I hope you enjoy it and find it useful. As always, if you encounter issues, please read the USAGE screens carefully and if that doesn’t clear it up, drop me an email. Oh, one thing you don’t have to tell me is that there aren’t examples of every switch, I know that. 🙂 I could end up writing examples of everything and I would end up with more lines of code dedicated to documenting the tool than the functions of the tool, since this is a free tool, that doesn’t make a whole lot of sense from my standpoint.
joe
Hey Joe, I’m attending the SANS conference in Las Vegas right now and your tools are a hit, sort of. They are prominently mentioned in the AD & DNS security course and they are included on the CDROM the SANS instructor handed out. Kudos. 🙂 Thanks for the updated ADMOD and ADFIND, by the way.
Cool thanks for the update Fred. I do recall someone pinging me a while back about getting the rights to distribute the tools on a CD like that. I forgot all about it after I said that was cool. Good to hear someone saw it and noticed!