prep for CoerceToTGT

BloodHoundAD · Oct 16, 2024 · 79b8475 · 79b8475
1 parent d197763
commit 79b8475
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/Runtime/ObjectProcessors.cs b/src/Runtime/ObjectProcessors.cs
@@ -127,6 +127,7 @@ private async Task<User> ProcessUserObject(IDirectoryObject entry,
             ret.Properties.Add("samaccountname", entry.GetProperty(LDAPProperties.SAMAccountName));
             if (entry.IsMSA()) ret.Properties.Add("msa", true);
             if (entry.IsGMSA()) ret.Properties.Add("gmsa", true);
+            ret.DomainSID = resolvedSearchResult.DomainSid;
 
             if ((_methods & CollectionMethod.ACL) != 0) {
                 var aces = await _aclProcessor.ProcessACL(resolvedSearchResult, entry)
@@ -153,6 +154,7 @@ private async Task<User> ProcessUserObject(IDirectoryObject entry,
 
                 ret.HasSIDHistory = userProps.SidHistory;
                 ret.AllowedToDelegate = userProps.AllowedToDelegate;
+                ret.UnconstrainedDelegation = userProps.UnconstrainedDelegation;
             }
 
             if ((_methods & CollectionMethod.SPNTargets) != 0) {
@@ -207,6 +209,7 @@ private async Task<Computer> ProcessComputerObject(IDirectoryObject entry,
                 ret.AllowedToAct = computerProps.AllowedToAct;
                 ret.HasSIDHistory = computerProps.SidHistory;
                 ret.DumpSMSAPassword = computerProps.DumpSMSAPassword;
+                ret.UnconstrainedDelegation = computerProps.UnconstrainedDelegation;
             }
 
             if ((_methods & CollectionMethod.Container) != 0) {