{"data":[{"ObjectIdentifier": "S-1-5-21-4108700763...

Question

{"data":[{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1000", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-516", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "L3AKPRIDC.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=L3AKPRIDC,OU=Domain Controllers,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": true, "enabled": true, "trustedtoauth": false, "samaccountname": "L3AKPRIDC $", "haslaps": false, "lastlogon": 1750365290, "lastlogontimestamp": 1750130385, "pwdlastset": 1750130362, "whencreated": 1750130345, "serviceprincipalnames": ["Dfsr-12F9A27C-BF97-4787-9364-D31B6C55EB04/L3akPriDC.l3ak.ctf.com", "ldap/L3akPriDC.l3ak.ctf.com/ForestDnsZones.l3ak.ctf.com", "ldap/L3akPriDC.l3ak.ctf.com/DomainDnsZones.l3ak.ctf.com", "DNS/L3akPriDC.l3ak.ctf.com", "GC/L3akPriDC.l3ak.ctf.com/l3ak.ctf.com", "RestrictedKrbHost/L3akPriDC.l3ak.ctf.com", "RestrictedKrbHost/L3AKPRIDC", "RPC/3185510f-692b-436f-ad49-3de96cce62c0._msdcs.l3ak.ctf.com", "HOST/L3AKPRIDC/L3AK", "HOST/L3akPriDC.l3ak.ctf.com/L3AK", "HOST/L3AKPRIDC", "HOST/L3akPriDC.l3ak.ctf.com", "HOST/L3akPriDC.l3ak.ctf.com/l3ak.ctf.com", "E3514235-4B06-11D1-AB04-00C04FC2DCD2/3185510f-692b-436f-ad49-3de96cce62c0/l3ak.ctf.com", "ldap/L3AKPRIDC/L3AK", "ldap/3185510f-692b-436f-ad49-3de96cce62c0._msdcs.l3ak.ctf.com", "ldap/L3akPriDC.l3ak.ctf.com/L3AK", "ldap/L3AKPRIDC", "ldap/L3akPriDC.l3ak.ctf.com", "ldap/L3akPriDC.l3ak.ctf.com/l3ak.ctf.com"], "description": null, "operatingsystem": "Windows Server 2016 Standard Evaluation", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1103", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "FILESRV03.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=FileSrv03,CN=Computers,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "FILESRV03$ ", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750360348, "whencreated": 1750360348, "serviceprincipalnames": [], "description": null, "operatingsystem": "Red Hat Enterprise Linux", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1104", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "FILESRVWIN11.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=FileSrvWin11,CN=Computers,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "FILESRVWIN11", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750360383, "whencreated": 1750360383, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1106", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "FILESRV01.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=FileSrv01,OU=FileServers,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "FILESRV01", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750360708, "whencreated": 1750360708, "serviceprincipalnames": [], "description": null, "operatingsystem": "Red Hat Enterprise Linux", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1109", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "L3AKBACKUPDC.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=L3AKBACKUPDC,OU=WindowsServer2016,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "L3AKBACKUPDC", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750360797, "whencreated": 1750360797, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows Server", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1111", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "WINDOWS11TEST.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=Windows11Test,OU=Windows11,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "WINDOWS11TEST", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361142, "whencreated": 1750361142, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1114", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "WORKSTN02.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=Workstn02,OU=HR,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "WORKSTN02", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361153, "whencreated": 1750361153, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1116", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "WORKSTN04.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=Workstn04,OU=HR,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "WORKSTN04", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361180, "whencreated": 1750361180, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1118", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "WORKSTN06.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=Workstn06,OU=HR,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "WORKSTN06", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361194, "whencreated": 1750361194, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1120", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "WORKSTN08.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=Workstn08,OU=HR,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "WORKSTN08", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361351, "whencreated": 1750361351, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1122", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "MONEYSTN02.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=MoneyStn02,OU=Finance,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "MONEYSTN02", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361363, "whencreated": 1750361363, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1125", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ITTESTWIN10.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ITTestWin10,OU=IT,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ITTESTWIN10", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361655, "whencreated": 1750361655, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1127", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ITTESTRHEL7.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ITTestRHEL7,OU=IT,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ITTESTRHEL7", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361745, "whencreated": 1750361745, "serviceprincipalnames": [], "description": null, "operatingsystem": "Red Hat Enterprise Linux", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1129", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ITTESTRHEL10.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ITTestRHEL10,OU=IT,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ITTESTRHEL10", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361855, "whencreated": 1750361855, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1131", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ITWORKSTN02.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ITWorkstn02,OU=IT,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ITWORKSTN02", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750361911, "whencreated": 1750361911, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1133", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ACAS.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ACAS,OU=Linux,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ACAS", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750362019, "whencreated": 1750362019, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows Server", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1135", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "MECM.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=MECM,OU=WindowsServer2019,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "MECM", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750362121, "whencreated": 1750362121, "serviceprincipalnames": [], "description": null, "operatingsystem": "Red Hat Enterprise Linux", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null},{"ObjectIdentifier": "S-1-5-21-4108700763-343470189-2777947185-1138", "AllowedToAct": [], "PrimaryGroupSID": "S-1-5-21-4108700763-343470189-2777947185-515", "ContainedBy": null, "DumpSMSAPassword": [], "Properties": {"name": "ITWORKSTN04.L3AK.CTF.COM", "domainsid": "S-1-5-21-4108700763-343470189-2777947185", "domain": "L3AK.CTF.COM", "highvalue": false, "distinguishedname": "CN=ITWorkStn04,OU=IT,OU=EmployeeWorkstations,OU=Windows10,OU=Workstations,DC=l3ak,DC=ctf,DC=com", "unconstraineddelegation": false, "enabled": true, "trustedtoauth": false, "samaccountname": "ITWORKSTN04", "haslaps": false, "lastlogon": 0, "lastlogontimestamp": -11644473600, "pwdlastset": 1750362172, "whencreated": 1750362172, "serviceprincipalnames": [], "description": null, "operatingsystem": "Windows", "sidhistory": []}, "LocalGroups": [], "LocalAdmins": {"Collected": false, "FailureReason": null, "Results": []}, "RemoteDesktopUsers": {"Collected": false, "FailureReason": null, "Results": []}, "DcomUsers": {"Collected": false, "FailureReason": null, "Results": []}, "PSRemoteUsers": {"Collected": false, "FailureReason": null, "Results": []}, "UserRights": [], "PrivilegedSessions": {"Collected": false, "FailureReason": null, "Results": []}, "Sessions": {"Collected": false, "FailureReason": null, "Results": []}, "RegistrySessions": {"Collected": false, "FailureReason": null, "Results": []}, "AllowedToDelegate": [], "Aces": [{"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-526", "PrincipalType": "Group"}, {"RightName": "AddKeyCredentialLink", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-527", "PrincipalType": "Group"}, {"RightName": "WriteOwner", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "Owns", "IsInherited": false, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-512", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": true, "PrincipalSID": "S-1-5-21-4108700763-343470189-2777947185-519", "PrincipalType": "Group"}, {"RightName": "GenericWrite", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "WriteDacl", "IsInherited": true, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-544", "PrincipalType": "Group"}, {"RightName": "GenericAll", "IsInherited": false, "PrincipalSID": "L3AK.CTF.COM-S-1-5-32-548", "PrincipalType": "Group"}], "HasSIDHistory": [], "IsDeleted": false, "Status": null}],"meta":{"methods":0,"type":"computers","count":34, "version":5}}

以上哪些已经不被组织使用了？
以下是原问题：Which hosts are no longer used by the organization? Format: host1, host2, ...\n", b"???\n")

Answer 1

FILESRV03.L3AK.CTF.COM, FILESRVWIN11.L3AK.CTF.COM, INTERNSTN.L3AK.CTF.COM, FILESRV01.L3AK.CTF.COM, FILESRV02.L3AK.CTF.COM, L3AKBACKUPDC.L3AK.CTF.COM, VTCSRV.L3AK.CTF.COM, WINDOWS11TEST.L3AK.CTF.COM, WORKSTN01.L3AK.CTF.COM, WORKSTN02.L3AK.CTF.COM, WORKSTN03.L3AK.CTF.COM, WORKSTN04.L3AK.CTF.COM, WORKSTN05.L3AK.CTF.COM, WORKSTN06.L3AK.CTF.COM, WORKSTN07.L3AK.CTF.COM, WORKSTN08.L3AK.CTF.COM, MONEYSTN01.L3AK.CTF.COM, MONEYSTN02.L3AK.CTF.COM, MONEYSTN03.L3AK.CTF.COM, ITTESTWIN10.L3AK.CTF.COM, ITTESTWIN11.L3AK.CTF.COM, ITTESTRHEL7.L3AK.CTF.COM, ITTESTRHEL8.L3AK.CTF.COM, ITTESTRHEL10.L3AK.CTF.COM, ITWORKSTN01.L3AK.CTF.COM, ITWORKSTN02.L3AK.CTF.COM, ITWORKSTN03.L3AK.CTF.COM, ACAS.L3AK.CTF.COM, WSUS.L3AK.CTF.COM, MECM.L3AK.CTF.COM, UPDATEREPO.L3AK.CTF.COM, ITWORKSTN04.L3AK.CTF.COM, ITWORKSTN05.L3AK.CTF.COM

Answer 2

这些主机被判定为“已不再使用”，主要依据 Active Directory 中反映主机活跃度的 3 个核心属性──lastLogon、lastLogonTimestamp 和 pwdLastSet——都显示“从未登录”或“创建后再未变动”。具体逻辑如下：

判定信号	典型取值	说明
lastLogon = 0	0	lastLogon 记录的是该计算机对象最后一次向域控制器注册登录的 Windows FileTime；数值 0 表示从未发生过登录事件。
lastLogonTimestamp = -11644473600	-11644473600	这是 Windows FileTime 编码的 “1601-01-01 00:00:00 UTC”，同样意味着属性至今未写入——即没有任何一次登录被复制到全域。
pwdLastSet ≈ whenCreated	两值完全相同	计算机对象在加入域时会立刻设置初始机器密码；若之后从未登录，pwdLastSet 就不会再更新，因而会与 whenCreated 时间戳完全一致。

对照数据可见，除了首台域控制器 L3AKPRIDC.L3AK.CTF.COM（lastLogon = 1750365290，对应 2025-07-** 12**，显然仍在活动）外，其余 33 台主机全部满足上表的“未登录”三要素。例如：

FILESRV03.L3AK.CTF.COM
lastLogon = 0, lastLogonTimestamp = -11644473600, pwdLastSet = 1750360348 (== whenCreated) —— 说明从建档到现在从未向域认证过。
WORKSTN01.L3AK.CTF.COM 以及所有 WORKSTN、MONEYSTN、ITTEST、ITWORKSTN 前缀的工作站，情况完全相同：对象创建完毕即“沉寂”，没有一次实际开机加入域。
L3AKBACKUPDC.L3AK.CTF.COM、WSUS.L3AK.CTF.COM、MECM.L3AK.CTF.COM 等服务器同样 lastLogon = 0；它们看似是规划中的备份 DC 或管理服务器，但从未真正部署上线。

综合来看，这 33 台计算机对象只是“被预置但未投入使用/已被弃用”的记录，因而列入“no longer used”清单；只有 L3AKPRIDC 仍在域内正常活动。

{"data":[{"ObjectIdentifier": "S-1-5-21-4108700763...

Frage

Python

Python

Gedanke

Antwort

Frage

Gedanke

Analyzing unused hosts

Explaining inactive hosts

Antwort

Diesen Q&A teilen