public void Sds1_ntfs_sds2_SDS()
{
var config = new LoggingConfiguration();
var loglevel = LogLevel.Debug;
var layout = @"${message}";
var consoleTarget = new ColoredConsoleTarget();
config.AddTarget("console", consoleTarget);
consoleTarget.Layout = layout;
var rule1 = new LoggingRule("*", loglevel, consoleTarget);
config.LoggingRules.Add(rule1);
// LogManager.Configuration = config;
var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds2\$SDS");
ss.SdsEntries.Count.Should().Be(1696);
//
// foreach (var ssSdsEntry in ss.SdsEntries)
// {
// Debug.WriteLine(ssSdsEntry.SecurityDescriptor);
// }
}
public void sds3()
{
var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds3\$SDS");
//ss.SdsEntries.Count.Should().Be(1391);
//
// foreach (var ssSdsEntry in ss.SdsEntries)
// {
// Debug.WriteLine(ssSdsEntry.SecurityDescriptor);
// }
}
public void Sds_sds1_Secure_SDS()
{
var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds1\$Secure_$SDS");
ss.SdsEntries.Count.Should().Be(9978);
foreach (var ssSdsEntry in ss.SdsEntries)
{
// Debug.WriteLine($"Offset: 0x{ssSdsEntry.FileOffset:X} {ssSdsEntry.SecurityDescriptor}");
}
}
public void sds4()
{
var config = new LoggingConfiguration();
var loglevel = LogLevel.Debug;
var layout = @"${message}";
var consoleTarget = new ColoredConsoleTarget();
config.AddTarget("console", consoleTarget);
consoleTarget.Layout = layout;
var rule1 = new LoggingRule("*", loglevel, consoleTarget);
config.LoggingRules.Add(rule1);
//var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds4\Win7_$SDS");
var ss = SdsFile.Load(@"C:\Temp\sds.vss313.bin");
ss.SdsEntries.Count.Should().Be(6868);
foreach (var ssSdsEntry in ss.SdsEntries)
{
Debug.WriteLine(ssSdsEntry.SecurityDescriptor);
if (ssSdsEntry.SecurityDescriptor.Sacl != null)
{
var SaclAceCount = ssSdsEntry.SecurityDescriptor.Sacl.AceCount;
var uniqueAce = new HashSet <string>();
foreach (var saclAceRecord in ssSdsEntry.SecurityDescriptor.Sacl.AceRecords)
{
uniqueAce.Add(saclAceRecord.AceType.ToString());
}
var UniqueSaclAceTypes = string.Join("|", uniqueAce);
}
if (ssSdsEntry.SecurityDescriptor.Dacl != null)
{
var DaclAceCount = ssSdsEntry.SecurityDescriptor.Dacl.AceCount;
var uniqueAce = new HashSet <string>();
foreach (var daclAceRecord in ssSdsEntry.SecurityDescriptor.Dacl.AceRecords)
{
uniqueAce.Add(daclAceRecord.AceType.ToString());
}
var UniqueDaclAceTypes = string.Join("|", uniqueAce);
}
}
}
public void Sds()
{
var sds = SdsFile.Load(@"C:\Users\eric\Desktop\Failed-SDS\2");
//ss..Count.Should().Be(41);
}