public void Sds1_ntfs_sds2_SDS() { var config = new LoggingConfiguration(); var loglevel = LogLevel.Debug; var layout = @"${message}"; var consoleTarget = new ColoredConsoleTarget(); config.AddTarget("console", consoleTarget); consoleTarget.Layout = layout; var rule1 = new LoggingRule("*", loglevel, consoleTarget); config.LoggingRules.Add(rule1); // LogManager.Configuration = config; var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds2\$SDS"); ss.SdsEntries.Count.Should().Be(1696); // // foreach (var ssSdsEntry in ss.SdsEntries) // { // Debug.WriteLine(ssSdsEntry.SecurityDescriptor); // } }
public void sds3() { var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds3\$SDS"); //ss.SdsEntries.Count.Should().Be(1391); // // foreach (var ssSdsEntry in ss.SdsEntries) // { // Debug.WriteLine(ssSdsEntry.SecurityDescriptor); // } }
public void Sds_sds1_Secure_SDS() { var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds1\$Secure_$SDS"); ss.SdsEntries.Count.Should().Be(9978); foreach (var ssSdsEntry in ss.SdsEntries) { // Debug.WriteLine($"Offset: 0x{ssSdsEntry.FileOffset:X} {ssSdsEntry.SecurityDescriptor}"); } }
public void sds4() { var config = new LoggingConfiguration(); var loglevel = LogLevel.Debug; var layout = @"${message}"; var consoleTarget = new ColoredConsoleTarget(); config.AddTarget("console", consoleTarget); consoleTarget.Layout = layout; var rule1 = new LoggingRule("*", loglevel, consoleTarget); config.LoggingRules.Add(rule1); //var ss = SdsFile.Load(@"D:\SynologyDrive\ntfs\sds4\Win7_$SDS"); var ss = SdsFile.Load(@"C:\Temp\sds.vss313.bin"); ss.SdsEntries.Count.Should().Be(6868); foreach (var ssSdsEntry in ss.SdsEntries) { Debug.WriteLine(ssSdsEntry.SecurityDescriptor); if (ssSdsEntry.SecurityDescriptor.Sacl != null) { var SaclAceCount = ssSdsEntry.SecurityDescriptor.Sacl.AceCount; var uniqueAce = new HashSet <string>(); foreach (var saclAceRecord in ssSdsEntry.SecurityDescriptor.Sacl.AceRecords) { uniqueAce.Add(saclAceRecord.AceType.ToString()); } var UniqueSaclAceTypes = string.Join("|", uniqueAce); } if (ssSdsEntry.SecurityDescriptor.Dacl != null) { var DaclAceCount = ssSdsEntry.SecurityDescriptor.Dacl.AceCount; var uniqueAce = new HashSet <string>(); foreach (var daclAceRecord in ssSdsEntry.SecurityDescriptor.Dacl.AceRecords) { uniqueAce.Add(daclAceRecord.AceType.ToString()); } var UniqueDaclAceTypes = string.Join("|", uniqueAce); } } }
public void Sds() { var sds = SdsFile.Load(@"C:\Users\eric\Desktop\Failed-SDS\2"); //ss..Count.Should().Be(41); }