ADExplorerSnapshot.py
ADExplorerSnapshot.py copied to clipboard
Allow other parsers
Hi,
I forked ADExplorerSnapshot because much of the code is reusable to parse other files such as LDIF files, but replacing the parsing class is not straight forward. I use this fork as a dependency here. If you choose to merge this simple change, I could delete the fork and avoid useless redundancy. Perhaps in the future even more file formats could be parsed and converted to BloodHound data, for example the ntds.dit.
What do you think?
In general i think making it more generic to allow different parsers is a great idea. Will merge after I’ve implemented tox tests.
Oh and really cool idea to have LDIF support! Now we just need the other way around… snapshot to LDIF to an external LDAP server and then run tooling (bloodhound/pingcastle/etc) against it :)